Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: 5Ob+ibJwPHsssMgifpA6N6Qq7OOvux+qlRGKuv+NpOA=
Subject key identifier: 89:B5:68:99:45:5A:C7:CB:B7:AD:BB:33:0D:3B:0D:C9:0D:68:47:B0
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 0197B6A0429816DA6C6813B0816C19BB4121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0439
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: N4TNHNvHRbKYVkqCK1N1PVaPmwhh58jbdUy4W2JO2Sg=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:42:98:16:da:6c:68:13:b0:81:6c:19:bb:41:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=89b56899455ac7cbb7adbb330d3b0dc90d6847b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:69:43:01:f6:21:e3:f1:be:94:30:f3:df:
2a:c5:3b:26:a8:de:6b:5f:52:46:86:16:e5:af:0b:
da:a4:9c:6f:00:53:1e:64:53:d6:d7:12:37:f6:ec:
5e:e2:12:8a:ec:20:23:7f:c8:f4:cb:42:47:c8:03:
35:12:af:f5:f5:31:7f:e0:ac:3c:c7:97:80:6a:c2:
1d:2c:c3:27:a1:9d:23:4b:30:8a:86:c6:db:6b:c4:
92:ea:2f:85:88:73:d6:65:a9:a3:8a:60:36:97:13:
3c:37:f0:85:eb:19:8d:4e:3d:dd:93:e6:e8:c1:2c:
36:b5:04:ee:36:14:f0:c1:75:2d:ba:a7:85:f1:e8:
6e:83:38:d2:3f:e1:26:96:ab:5c:84:64:b1:7d:d8:
af:16:7b:a7:ac:66:e1:9d:08:6d:ba:03:38:ce:63:
3c:57:0e:12:83:4b:b1:ca:48:19:93:24:20:45:76:
00:0a:62:1c:6f:ab:28:45:7c:fd:be:1e:e4:9c:d6:
30:94:26:2a:d1:bb:a7:ad:13:54:45:c6:51:f1:2d:
ba:94:a0:a8:dd:ab:3f:0a:fe:d1:76:49:50:0d:e4:
a6:89:d6:c8:d4:d1:40:02:bf:75:72:99:78:89:66:
8f:1d:6c:e4:85:ac:67:8e:12:a4:8b:da:5e:04:fa:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:68:99:45:5A:C7:CB:B7:AD:BB:33:0D:3B:0D:C9:0D:68:47:B0
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:fb:e1:65:d7:1e:16:fa:38:8b:82:c3:65:b9:e6:96:65:
f7:c3:5a:76:7a:b1:cf:2a:5c:22:30:9a:17:1e:2b:59:df:ae:
3d:4d:e9:ed:db:4c:10:1a:83:32:cf:ba:6a:ac:cc:4c:ce:71:
ed:2f:ea:af:3c:f9:05:9c:a2:c2:3b:d1:2e:f6:b4:ff:f6:29:
12:50:43:c4:6b:66:ae:28:8c:88:3b:eb:d9:42:ac:57:71:89:
ba:8a:e9:11:43:3b:cf:6d:8e:87:e0:4d:8b:57:e0:ca:d2:55:
ba:7c:d0:cd:70:f4:b7:b6:86:1b:f0:a2:c8:4c:de:2a:2c:38:
b1:c5:4e:f8:53:2f:71:41:a5:d7:2e:ec:e1:ea:24:63:01:f7:
35:f5:1b:c7:23:e4:4b:3e:97:a5:3b:eb:a6:9b:da:d8:d5:c8:
4f:d7:a2:af:ad:56:67:68:51:13:9d:b1:95:12:37:07:a9:40:
46:19:f5:12:d0:a8:1c:c8:86:cb:d2:8a:f6:4d:ad:b4:09:62:
b1:a3:c1:9c:d1:fd:87:16:df:be:5b:50:16:4c:05:e7:71:6c:
96:b6:d2:bd:94:0f:a4:34:06:a0:26:5b:79:16:f8:be:28:44:
ba:bd:69:19:d3:1a:57:30:a8:13:cc:dc:a8:d8:bb:8d:71:1e:
5c:d8:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:24 2025 by rpki-client