Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: q/0ugFHVHLoHOoWJf0SReu7Dz2VOfFPzehLuKdLF0fI=
Subject key identifier: F5:62:6A:58:90:44:46:22:6A:39:DC:01:D0:01:C0:86:2F:EC:19:C7
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 0198D7A981007797441372242B61B7C9EE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 04C7
Signing time: Sat 23 Aug 2025 16:01:06 +0000
Manifest this update: Sat 23 Aug 2025 16:01:06 +0000
Manifest next update: Sun 24 Aug 2025 16:01:06 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: u5BTu5+EWAu6SfPJ6f8kQB8gX4YLobmzlCbwyf7ooyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:81:00:77:97:44:13:72:24:2b:61:b7:c9:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Aug 23 16:01:06 2025 GMT
Not After : Aug 24 16:01:06 2025 GMT
Subject: CN=f5626a58904446226a39dc01d001c0862fec19c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:25:9a:78:61:e8:85:dd:c4:65:eb:40:8a:
35:14:d0:c7:5c:66:9c:1b:57:2b:ca:f6:b1:f5:e7:
58:24:9a:e5:de:0a:a0:6a:1e:03:e2:fc:13:b5:12:
14:2f:86:26:b1:50:af:43:36:da:a9:c3:81:61:d2:
9d:5b:c3:7b:60:64:b9:82:20:0b:d9:5a:00:95:32:
92:b4:08:e2:1b:63:df:ce:d5:9c:b3:c2:52:e6:39:
54:48:fe:2e:87:fa:1d:74:14:06:8c:be:15:ce:f9:
21:45:67:7d:4d:17:7d:2a:d4:69:6b:e4:8d:12:b9:
22:c4:53:fc:cd:9d:2a:32:bd:10:50:2c:5e:7b:4a:
9e:ac:6a:73:31:89:c6:7e:f3:dc:20:c5:a9:54:f9:
d5:0e:09:6e:64:9b:9d:34:12:56:b4:b8:e5:83:24:
da:55:36:66:6d:53:41:fe:46:3f:72:df:d6:5c:6c:
b4:15:3d:c8:33:f3:bf:9c:0c:ba:62:f6:3a:1c:53:
b3:0a:3e:44:75:54:2f:09:ea:fe:ee:40:9f:40:cc:
37:e2:97:16:2e:4a:60:fe:d5:d1:cb:cb:3e:9c:8d:
f1:f4:26:7f:32:6b:c7:4e:7f:67:8e:bb:8c:20:28:
c9:0f:06:61:9b:be:ef:f2:de:44:a8:0e:1e:77:77:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:6A:58:90:44:46:22:6A:39:DC:01:D0:01:C0:86:2F:EC:19:C7
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:68:24:2d:67:36:e8:92:dd:29:ee:6c:8f:0f:ef:e3:45:
55:1d:7c:d1:b0:82:cb:0e:46:79:a0:fb:94:2a:54:fa:2b:a1:
89:b7:2c:da:95:c2:e9:5f:7f:b3:5b:37:1e:f9:a1:d9:2a:8b:
00:f4:fa:5d:e3:e7:d1:4a:38:a7:06:b7:ac:04:c3:bd:55:01:
f1:c5:37:2d:8e:cd:76:63:89:44:8c:f8:b6:8d:e4:1e:89:0b:
c3:d2:ef:e4:4e:6b:f3:bd:69:e7:eb:13:96:27:4b:c1:6f:ce:
60:d9:3b:5c:a1:29:d7:42:9d:2d:72:01:42:4f:a2:a4:0d:27:
1e:23:c9:45:6e:cc:01:72:be:05:56:8d:e5:90:7e:73:d0:cb:
60:83:fd:7e:a9:d6:5a:c6:d8:cc:7f:fe:15:5b:24:ee:71:e9:
82:ff:62:bb:19:4f:ef:4a:51:a8:11:e8:9a:ed:ec:3a:0c:78:
b8:c8:13:7a:05:65:b4:6c:02:04:5e:5c:5b:20:47:3e:f4:61:
cf:89:c8:2f:65:ce:da:b8:6c:90:60:7e:eb:12:62:3b:da:cc:
8d:4d:39:8c:3c:79:ac:2e:ab:5d:68:c3:ab:cb:48:54:2d:1a:
27:71:40:51:dc:d7:14:82:f9:2d:20:cc:83:00:a6:92:75:16:
45:5a:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:05 2025 by rpki-client