Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: 0A5Fot47H5qUrMUUN9PmnvvVCYhcy10+EiOoBKRPeAk=
Subject key identifier: 74:F7:68:11:56:43:B0:BA:C9:9B:B2:4D:86:09:72:FE:20:20:18:12
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 0198D40479C992DA20609E7F5B30E96738FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 15DC
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: MlzJhrzEcJB+9b7T8+XoXl6J1DBvDAoktT0zdNiLnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:79:c9:92:da:20:60:9e:7f:5b:30:e9:67:38:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=74f768115643b0bac99bb24d860972fe20201812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:3d:46:0b:6e:a5:de:06:88:48:cc:fc:12:
12:12:08:00:02:52:75:d1:71:6d:fb:fe:43:56:b3:
05:88:c7:00:b9:ba:5c:67:0c:fc:e4:88:01:9b:fc:
d4:b9:d2:b8:20:37:72:49:41:9a:59:e4:fb:15:82:
b6:f9:44:b6:1c:6b:2e:cb:e2:a6:cc:f1:82:25:aa:
ae:74:d4:d5:ca:86:b9:ef:3d:53:70:dd:98:09:4a:
dd:a3:7b:70:af:92:b7:92:70:a3:74:11:39:b9:0e:
5b:24:85:a2:a8:5b:9a:6b:e4:76:fe:8c:2a:a8:bf:
45:ca:ce:66:50:6e:cf:d5:b9:1f:09:a8:ae:bc:d6:
6d:85:54:0e:58:80:83:4e:28:d9:2f:f8:87:ae:fb:
5e:34:fe:76:3c:6b:c3:23:b5:7f:46:1c:92:bb:04:
31:65:7a:19:99:09:17:b7:2f:5e:4b:75:f5:d3:f2:
42:f4:99:c9:63:6c:db:e5:ce:b4:7e:90:7e:ac:e8:
c0:82:63:ae:00:92:8d:8e:a0:c2:55:6d:3f:6a:47:
31:d7:c1:e2:c5:e4:44:c5:f0:10:fc:ae:08:0a:b7:
24:ca:8e:9e:50:f1:d9:42:55:94:96:6a:79:02:3d:
7c:3e:98:32:10:d8:ae:69:7f:d4:89:d2:90:62:4c:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F7:68:11:56:43:B0:BA:C9:9B:B2:4D:86:09:72:FE:20:20:18:12
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:c1:21:64:c8:91:d8:b2:1b:35:d5:60:d0:65:2d:f0:91:
e2:75:0a:e3:da:c1:82:5b:64:ef:48:18:71:ba:64:a8:3e:26:
ec:8d:59:98:47:01:86:f2:c3:5e:07:64:59:e8:3e:29:7f:ed:
03:38:26:17:f4:6c:c9:a4:b8:17:b4:8e:ac:d5:0b:ac:e7:78:
b0:9a:55:5a:71:4e:f2:1f:8e:7a:a9:a9:2c:5d:a6:0c:10:a2:
34:3f:8a:f5:42:01:e2:59:4d:2a:2d:bb:a6:5a:b7:5c:2c:c2:
f4:9a:a8:ec:da:78:9b:c7:f7:08:4f:e3:40:d9:51:3b:9d:a5:
e8:12:b9:e7:75:04:5e:33:6f:01:e9:06:e8:8c:76:d3:52:86:
19:74:1d:de:3a:96:73:3c:1a:c2:09:94:0e:2e:44:aa:ea:b5:
28:f4:92:74:f8:ca:9d:1b:0d:09:58:ef:1c:ed:63:c8:a0:b1:
66:1b:2b:36:0d:fc:22:47:97:b5:eb:a6:bf:17:0c:f3:a9:ca:
4e:46:66:d8:53:b9:45:40:b4:b1:9d:4e:8a:0d:bc:07:f7:ca:
33:2c:b8:00:31:a1:57:99:90:ac:67:2f:1e:d7:8e:96:51:f8:
13:dc:40:26:a7:ea:8e:23:4f:ee:08:c1:ad:9c:4b:8e:f3:51:
bc:fe:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:30 2025 by rpki-client