Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: 2fF4n6RdooFm29uyTVGGwEnIPVcupLlr+hvsUStmO6c=
Subject key identifier: B0:2C:83:19:2B:01:A1:41:1C:C7:E0:10:D3:BD:14:DD:AB:1F:96:8F
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 0198D54E6FDFE0F441072FA278F22CA02C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 05E7
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: HIoX53SDKCKLG+9VEuY7q1cN6WS2rMCM+SbOzIivb6o=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6f:df:e0:f4:41:07:2f:a2:78:f2:2c:a0:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=b02c83192b01a1411cc7e010d3bd14ddab1f968f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:c7:47:a0:26:c4:8d:41:69:68:70:86:ea:
c2:df:42:35:f9:03:02:6f:2b:14:2b:55:f4:d0:93:
10:39:45:5c:e7:2d:73:97:a6:0d:d8:c3:38:3b:5b:
e6:f2:d2:b8:98:8f:5a:e7:11:f6:27:c7:68:01:59:
39:22:3a:9a:ed:62:6b:41:de:48:1f:fe:e5:85:9a:
a6:ae:fb:1c:78:4b:7a:0e:40:ae:98:58:0e:8e:1a:
2b:2f:74:02:c0:7f:3e:d0:61:c9:f6:e4:9b:e9:01:
d1:c1:5a:fa:d4:5f:5a:04:2d:b5:43:01:ad:57:38:
5e:87:72:59:db:1a:ac:75:e2:65:20:3e:a9:21:81:
0a:28:8a:e3:9a:16:bc:78:88:cd:14:51:e6:f3:b2:
34:c6:43:07:24:0d:7a:8e:67:6a:bf:1a:6f:ed:9d:
a8:2c:fa:9f:54:95:0a:63:87:79:82:b0:80:ef:1b:
03:d5:ea:b0:07:18:7b:82:51:1a:59:88:cc:a7:58:
3f:cd:b4:41:9a:ed:03:18:ea:33:bd:4b:5c:b9:f6:
65:53:f4:a2:74:e9:0f:6e:f4:cd:8a:b2:ca:50:66:
c8:ee:0d:00:8f:86:1b:18:f4:1a:e1:07:d8:3a:62:
c4:fe:b4:c1:9a:31:8c:51:ac:af:2d:6c:f3:39:dc:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:83:19:2B:01:A1:41:1C:C7:E0:10:D3:BD:14:DD:AB:1F:96:8F
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:12:dd:c2:f8:85:52:32:83:e0:f1:e2:3d:38:f0:2b:b6:6e:
44:3a:49:37:eb:00:fd:d1:24:ee:f4:e6:d8:12:8b:20:1c:76:
66:5c:f1:36:e5:49:9b:8b:ad:f9:b0:09:b5:d9:ea:3e:bd:da:
6b:ca:fa:ab:57:ac:78:6d:6c:7f:ab:2a:43:81:aa:2d:9c:01:
57:92:2e:84:81:d3:b8:0e:7a:cc:dd:9b:89:7a:51:f0:3b:06:
3b:9f:d1:7a:6f:b5:c9:e5:c8:ef:67:41:a8:c3:3a:0d:fb:cf:
09:c9:43:98:1b:e9:db:d6:61:2a:67:87:b2:3a:77:a3:83:78:
66:50:4f:bf:bb:25:f4:47:8c:58:c0:79:89:23:88:8c:e0:cb:
b8:03:96:05:e2:94:b2:a6:c8:4b:af:60:68:f5:d1:f6:8b:aa:
d2:7f:60:be:52:24:c3:f0:f7:4a:f3:25:2c:b2:b9:4a:a9:d1:
f6:64:ce:19:8d:25:ec:a6:69:dc:cd:23:db:d6:43:52:d1:19:
e9:6a:66:82:c8:b2:51:0e:17:71:cb:20:be:19:a1:34:af:7b:
6b:05:9a:40:8d:5e:3c:be:1f:06:4d:95:c2:f1:84:e7:46:37:
e8:ca:87:21:23:a6:81:46:21:c7:f3:29:4f:f1:d6:13:6c:f9:
c6:68:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:48 2025 by rpki-client