Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: OWvHdjMAvdYFO11pzBS4gkhLgNG2/+RzMfNGTESAf5M=
Subject key identifier: 8D:9C:40:84:74:DD:69:27:4E:52:07:15:2C:C2:E5:A7:2C:F6:0A:E0
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 0198D66101EF7D544F848720E2393E42CFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 04CE
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: iK/edaQT6o082BCZdVKEfChoACm0s//9K9X1tGebwns=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:01:ef:7d:54:4f:84:87:20:e2:39:3e:42:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=8d9c408474dd69274e5207152cc2e5a72cf60ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:81:f4:af:ae:15:dd:66:fe:e5:e7:5f:64:
99:07:c8:e8:71:37:fe:c9:61:27:b8:6e:58:de:58:
9d:f6:77:03:cc:ec:28:71:79:2c:0f:92:e4:26:d3:
21:8f:d5:49:b7:31:e4:77:89:7d:44:3b:07:47:8c:
08:6e:5d:aa:d6:21:bb:43:60:11:4c:c0:50:4b:59:
c3:21:dc:48:a1:5c:65:23:b7:5c:64:d9:5b:26:58:
98:14:9f:91:4c:ab:07:03:3d:fa:9c:eb:3e:76:da:
5f:4f:ed:6b:d2:e9:29:88:9b:c2:d9:d0:2e:09:05:
3c:85:d5:fa:66:00:94:9d:74:5d:f5:00:a9:2d:54:
2c:5a:c7:00:cf:fb:3d:2f:ae:50:9e:ab:dd:2f:e3:
b2:14:5e:11:1f:5b:62:ba:ea:97:25:ea:1f:82:42:
9c:ef:8c:2a:86:61:f0:5b:e3:3e:4b:9e:c9:f6:f6:
c4:29:18:5e:f9:05:28:7f:9a:34:7d:40:58:ac:4a:
ca:b0:34:db:69:17:5f:17:1e:fa:bc:31:a1:1d:ef:
ef:65:80:f4:15:8b:14:4c:1f:f1:c9:a4:1c:d1:14:
52:e5:42:5c:6b:f9:e6:1e:a8:b9:5a:41:44:ed:5f:
c8:1d:13:85:c0:6e:e6:5e:ff:1f:45:70:15:e3:e9:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:40:84:74:DD:69:27:4E:52:07:15:2C:C2:E5:A7:2C:F6:0A:E0
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:c4:21:00:e5:9d:36:74:c7:e7:07:a8:23:0d:1b:61:b3:
9e:4c:51:b7:c8:e4:19:69:3f:09:ab:c6:fa:ad:c0:d7:6d:6e:
c6:6c:dc:99:5c:09:b5:33:1d:f8:40:11:82:d5:ae:a8:cb:21:
e3:a5:47:20:c0:e7:b0:79:83:91:cf:bc:dd:4f:d8:5a:e2:1f:
16:59:1c:c6:e0:e0:3c:d3:e7:ed:12:d0:95:c4:b4:bb:1b:15:
e6:c7:02:99:d2:27:35:d6:a7:89:1c:43:a7:8b:70:6b:62:f3:
27:10:77:2d:93:b8:93:d5:4d:ae:c8:75:52:dd:a7:3d:68:58:
40:6f:40:32:06:64:6f:68:a6:d0:71:79:21:17:c0:15:4e:f6:
45:b0:12:99:bf:ec:2f:bb:30:ac:7d:70:c4:89:92:5b:39:15:
9d:dc:dd:ac:08:ae:1f:b7:0c:34:c6:ad:01:5e:43:24:1b:28:
ec:31:52:25:d0:5f:12:92:92:cc:a9:df:34:ff:2f:e5:5d:b0:
19:a8:63:65:08:7f:ad:5f:85:b7:37:5e:fe:6b:ed:ee:e9:34:
14:e9:52:b7:3f:5f:2f:fb:23:39:7b:29:51:43:b7:f8:ec:d8:
17:e7:cf:23:17:14:54:4f:be:2b:ce:a1:c8:e3:95:71:1f:ad:
cc:38:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:35 2025 by rpki-client