Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: 9aJPnp1uwmyG7fgvhXbHBmRX+u2Qb74GLzgWz7SWQl4=
Subject key identifier: 06:13:2D:AA:8B:DB:22:DD:51:58:55:0C:33:67:38:F6:D6:FF:FA:4A
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0198D583811E3A4C48A4D337E36D9952F5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0D3B
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: sc4LQ11QwJHrJ6IVeWEUTmSUGctAjTwpoRo74HrYqSk=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:81:1e:3a:4c:48:a4:d3:37:e3:6d:99:52:f5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=06132daa8bdb22dd5158550c336738f6d6fffa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:9d:4e:b9:41:b4:f2:cb:bb:2e:ae:43:5b:
d6:ac:35:c7:e7:de:f3:1d:95:f1:c1:e4:43:72:05:
45:05:bd:95:ec:fb:56:36:cb:5f:dc:2e:ed:46:36:
65:d2:5a:09:42:10:57:ab:2f:34:79:8f:5b:eb:75:
4d:61:6e:e3:01:8b:96:f8:50:0a:bd:b6:68:37:7c:
4f:0e:44:08:2d:d4:64:81:8d:df:f6:c3:01:da:08:
15:e9:dd:02:d1:cf:1d:c4:7f:94:69:4d:f2:4c:d6:
2e:7b:6e:9a:c1:34:15:1e:b4:20:43:36:8a:22:29:
47:89:e0:52:83:3f:65:9d:da:09:36:04:4a:09:6f:
87:cf:6a:71:29:f5:fc:92:26:5f:f0:f7:69:9e:1b:
db:cb:c2:3d:74:a5:ff:22:8e:ce:32:64:f3:43:6a:
46:19:71:1b:5b:d6:b5:6e:d0:93:42:52:d4:f8:02:
5d:17:4a:01:9e:96:84:83:46:25:39:92:00:69:08:
71:3f:b3:cc:3a:e8:16:41:a9:9c:d0:fb:b6:cc:73:
7c:0a:04:8c:c8:f5:eb:1e:84:b0:9f:be:86:5e:4e:
91:7f:c4:25:cc:df:bc:95:a3:c4:8f:67:d4:df:2d:
a9:8b:a3:70:a8:3d:46:97:ba:16:5e:4c:f3:9c:da:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:2D:AA:8B:DB:22:DD:51:58:55:0C:33:67:38:F6:D6:FF:FA:4A
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:30:87:e1:44:e1:a5:b0:9e:b2:a7:93:fa:ae:b3:7b:77:26:
e9:fb:94:59:dc:18:9a:25:6b:3b:e0:dd:1f:3a:96:dc:bb:7c:
f5:27:a1:30:e1:37:71:d5:d5:0a:4b:16:e4:02:2c:5d:4b:c1:
67:fd:1b:37:fc:a5:0a:79:49:8b:98:b0:e2:c5:02:90:72:b6:
70:5a:00:9c:18:e8:4c:77:c7:85:9d:43:e9:4d:78:b6:5a:83:
a3:db:f2:cf:10:9c:4c:a3:de:4d:a5:b0:ec:f8:26:1e:27:c7:
cc:10:6a:64:b8:97:80:15:ad:93:d1:0b:51:dd:e4:8b:ee:20:
0b:c4:21:44:43:15:60:f1:05:86:1c:58:62:b4:b5:8a:d3:da:
d8:88:54:59:e9:bd:9e:92:1e:16:44:94:ce:ed:49:bd:bf:f9:
3b:3d:20:fb:b0:5b:ce:26:52:64:53:52:0b:51:0c:42:67:cd:
f2:25:2e:05:7a:5d:3b:35:b8:3b:82:85:e7:29:b1:8e:22:d9:
c3:e6:57:ec:7d:f7:3b:f8:11:d2:85:79:89:33:f2:f1:13:d4:
a3:80:31:80:e7:41:a2:c9:1a:1f:84:a3:cd:12:d3:eb:02:f3:
61:ff:8e:61:3d:7e:87:70:6d:02:db:e4:51:f0:52:b1:42:4f:
3e:cf:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:41 2025 by rpki-client