Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: kvU9O0an+qVca2W0unT0L+9Oav6YS/VBsxUIRfsMszc=
Subject key identifier: C2:02:B0:91:3A:9E:02:44:7B:DA:C0:01:65:C1:18:70:09:85:4F:CF
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 0197B745989FD901C05BAFD4370ED6F7A5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 0400
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: 5zIDWbBppxWB94n4Lrt7TKK7G7PRr2ewQTNbqZTZURM=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:98:9f:d9:01:c0:5b:af:d4:37:0e:d6:f7:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=c202b0913a9e02447bdac00165c1187009854fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:e7:b0:7f:15:d9:82:28:5f:c5:a0:19:65:
cb:5e:60:17:d4:54:9d:24:20:81:c7:a0:12:da:4f:
e8:c0:86:c6:bb:2f:b7:eb:bd:83:f7:dc:80:71:bb:
c3:81:21:d5:a7:07:45:03:f3:82:31:25:72:fd:1a:
16:78:43:aa:32:f7:86:bb:b1:0b:57:e4:32:82:78:
d5:c1:21:e3:7b:85:e1:b5:9b:54:45:ed:72:ae:2c:
e9:9d:11:ae:b9:1d:b7:06:59:30:29:3a:d1:7d:08:
bf:1e:35:de:54:aa:08:29:5d:1d:75:7a:5c:5d:2d:
35:f8:e8:32:4f:d9:a9:c6:72:ca:f7:dd:f8:3f:4a:
67:bc:6d:b2:57:b6:31:78:d9:49:ba:d9:60:a7:6c:
97:65:bf:d3:f9:d4:bf:df:74:25:17:d2:f0:be:ec:
9f:9b:db:a5:c2:b8:ce:56:55:29:9f:bf:4c:c6:89:
58:89:1e:72:0b:30:14:51:44:eb:4e:79:5f:53:40:
54:f4:7a:f3:e5:72:35:4b:bb:67:6f:64:ed:8a:c4:
d9:74:f4:c2:81:fd:30:95:0e:7f:a9:9f:98:2d:6e:
f7:be:16:6c:8b:f1:a8:8f:2a:92:49:ff:44:a2:48:
c3:1d:b8:96:c9:8c:a0:78:61:06:4e:c8:a1:b5:56:
39:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:B0:91:3A:9E:02:44:7B:DA:C0:01:65:C1:18:70:09:85:4F:CF
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:f3:e7:d4:3d:b3:26:5c:da:f6:7e:73:3e:c9:a6:9f:30:
fa:d3:00:b8:db:32:0b:6d:23:1c:11:f4:15:6c:51:71:28:5b:
bc:9b:b1:ea:77:ec:88:1a:1d:bf:f3:b4:e5:90:b1:92:7c:e8:
fa:f0:9e:d5:10:80:3f:5d:bf:4d:53:7a:49:84:dc:5e:bd:86:
78:09:47:06:16:7e:6e:2a:ff:03:ca:9a:92:70:ad:ac:a4:fb:
df:81:c0:da:2d:93:dd:15:12:e9:37:50:4d:b2:c8:63:2f:d4:
9c:56:7e:65:31:56:9e:cc:6e:ef:4a:07:f8:70:c7:dd:dd:ca:
94:1a:c4:e1:a7:f2:72:e7:19:1c:6d:76:80:bb:2d:54:37:b7:
0b:45:78:8b:ed:be:eb:d5:48:02:44:cc:f8:4b:63:1e:a8:79:
6f:07:b1:e4:a2:2b:30:36:6d:ee:83:fe:74:4c:67:f2:4c:43:
8a:8c:56:d4:56:0e:65:34:74:57:c7:05:03:e4:ed:dc:a9:f8:
90:94:5c:d7:c0:8a:ea:31:5a:15:4d:86:80:a1:30:bc:4f:98:
3a:fe:80:88:b5:c1:18:a7:fa:3b:3e:29:39:ff:9f:db:1a:c6:
60:74:8e:72:2a:1c:f6:46:4f:4c:62:ad:98:82:28:d5:00:5a:
5e:33:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:19 2025 by rpki-client