Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: Lhrw79oWbVRo/L92ye4xiYX7QbEat823aUZ67125foY=
Subject key identifier: D9:D9:C4:0E:B9:68:D0:F7:C0:4F:3F:3B:80:73:08:53:84:76:16:BC
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 0197BBFDCA30800A0CCB0022700523515ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 154B
Signing time: Sun 29 Jun 2025 14:01:01 +0000
Manifest this update: Sun 29 Jun 2025 14:01:01 +0000
Manifest next update: Mon 30 Jun 2025 14:01:01 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: NOS27FROWlMAaGLe4TwIpCLi7rUXQoGDYZMt4T6OcX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:ca:30:80:0a:0c:cb:00:22:70:05:23:51:5e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Jun 29 14:01:01 2025 GMT
Not After : Jun 30 14:01:01 2025 GMT
Subject: CN=d9d9c40eb968d0f7c04f3f3b80730853847616bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:b5:8d:68:2f:db:28:0e:90:a3:35:e3:d2:
cb:e4:58:a6:68:43:b9:a1:fc:08:f2:ae:14:50:23:
ce:98:c5:0e:6a:6c:5a:73:fc:57:11:1f:72:d0:5e:
28:6f:60:ce:4a:88:38:a8:84:7b:7b:f5:62:0f:df:
fa:4b:f9:7b:df:1f:8a:e6:8b:fd:cb:70:53:cf:a1:
78:0c:20:26:9d:28:14:fe:13:0f:4a:b4:eb:78:11:
ba:44:ba:81:9a:2f:34:3d:1b:16:17:a4:78:56:62:
82:8d:72:5f:df:a0:60:f3:5d:4c:1d:c9:f9:bc:37:
15:79:a5:39:2f:91:7e:4d:e6:2c:25:cb:91:b9:60:
5b:bb:04:da:50:f2:1e:40:a2:75:27:f9:8f:85:bc:
08:96:b1:78:43:9a:91:96:48:a4:f6:d0:c1:9a:dc:
3d:94:46:b9:99:a3:20:16:b7:9b:43:d0:bf:05:45:
3f:c3:ce:96:f1:d0:32:e4:10:ef:bf:50:1b:ef:4b:
19:c3:f4:a0:88:06:4e:80:48:ca:a3:cf:7d:28:ab:
1e:b5:f3:ac:91:98:1b:c8:01:d3:28:01:9e:26:ad:
21:c4:07:03:0b:69:b4:0f:b4:c5:e3:ea:06:1f:0b:
00:fe:08:24:b7:28:71:ed:be:f1:12:c1:bc:d2:71:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:C4:0E:B9:68:D0:F7:C0:4F:3F:3B:80:73:08:53:84:76:16:BC
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:be:49:96:eb:b4:e0:b3:70:8a:01:8a:5b:03:d9:d9:65:2f:
11:47:60:eb:0f:4c:c5:c7:2e:3d:3d:69:3d:5a:78:82:1d:89:
36:fa:df:50:20:e2:ba:d6:b8:e0:51:9c:5a:3c:6b:4e:71:e9:
47:6b:1d:8c:6c:50:07:c6:44:cb:b8:e1:e5:5b:ad:b4:26:22:
f9:54:48:9a:de:a5:ec:43:59:74:c5:5a:8d:9c:74:ce:63:87:
21:01:b1:d5:61:f6:6c:87:bb:77:cc:45:63:ce:5e:79:93:96:
4c:fd:89:5c:0b:5f:2a:6c:ec:80:32:e2:60:25:6b:45:f0:b4:
e2:59:59:fc:1d:8a:95:e3:58:16:49:c9:b1:74:77:3c:b0:5f:
d0:0e:6b:66:8e:34:cf:6e:e4:e5:ee:b0:b4:06:b6:7a:4e:53:
4a:cd:95:19:b9:57:07:a3:a9:af:f7:82:e1:1e:a4:f5:e9:01:
8f:47:e4:08:cf:6a:16:15:88:cf:13:d2:33:96:02:08:67:db:
08:84:95:9c:be:f5:7f:c6:d5:fd:c8:e0:c7:1f:58:9c:f8:5a:
cd:d0:f7:0d:e6:89:01:fa:f5:b1:8f:59:07:56:46:98:d0:30:
65:7e:77:be:e8:e5:a1:70:ba:31:7c:bd:ab:fa:b1:19:35:c8:
aa:41:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:31 2025 by rpki-client