Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: 5BxL5PNcuJrRLjmLyFd5zpef9VgymgJMwi1/gkJ3YBk=
Subject key identifier: C9:88:27:47:BF:1B:26:10:17:6F:7B:D0:0C:4D:5D:62:31:E7:64:79
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 0197B82166A542D5AFD7FABD2316B25FA59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:26 +0000
Manifest this update: Sat 28 Jun 2025 20:01:26 +0000
Manifest next update: Sun 29 Jun 2025 20:01:26 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: d4ON8QiSAsM7jQAEnODFEiEPBahs2XNZEM8KMp5xYFc=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:66:a5:42:d5:af:d7:fa:bd:23:16:b2:5f:a5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jun 28 20:01:26 2025 GMT
Not After : Jun 29 20:01:26 2025 GMT
Subject: CN=c9882747bf1b2610176f7bd00c4d5d6231e76479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:a8:af:e6:82:24:de:03:52:06:0c:fe:3a:
08:a8:87:c1:8b:2d:aa:83:e3:bc:ba:7f:e8:b5:af:
ad:6d:bf:8b:b7:de:60:1c:30:70:bb:16:28:6b:83:
54:96:32:7c:d0:fa:f2:bd:a1:16:c6:95:5a:2a:ee:
46:73:23:51:37:52:ae:84:21:7b:82:bc:90:aa:fa:
49:72:07:fd:df:c3:9f:42:33:69:70:d7:f6:fc:81:
20:3b:60:08:26:2d:25:07:49:6b:49:68:78:80:67:
30:15:22:f9:47:09:4e:ee:92:ba:5e:47:b7:93:8b:
39:e7:4b:c4:5f:7f:1d:9b:32:1e:a2:93:ff:60:8a:
77:8e:3c:c5:3b:27:ce:6b:73:3d:fc:e9:9d:a9:d0:
c2:39:8e:65:1c:d2:33:2d:6c:eb:0c:5f:96:e1:e5:
39:dd:ab:5b:e1:d8:8a:b8:eb:58:25:06:28:ef:1f:
de:8d:82:2d:0b:29:54:df:94:2a:c7:f4:1a:e5:66:
79:ff:85:f4:a2:f7:c9:2a:a3:7c:2b:72:68:08:4e:
84:f2:de:40:b1:be:b0:81:66:09:5c:94:3f:0c:ce:
1e:5f:8e:5d:e9:38:18:a6:45:83:f6:8b:7b:31:16:
be:33:fc:cf:bc:f2:12:3a:08:c5:83:34:20:3d:7b:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:88:27:47:BF:1B:26:10:17:6F:7B:D0:0C:4D:5D:62:31:E7:64:79
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:8a:ea:da:2f:89:0f:13:04:f2:03:c3:8b:97:cc:43:a2:
ca:47:3c:4a:f5:71:ce:07:5e:80:6c:d0:7f:71:91:c1:6c:6b:
f5:01:f4:67:8f:c8:97:98:99:99:84:ef:cb:d5:63:2e:e9:9e:
d8:73:c9:1e:63:5c:f6:42:dd:dd:b8:8d:10:e3:36:7d:b4:6e:
22:9a:2f:22:a2:28:e4:77:bd:fe:f0:2b:eb:99:a5:70:39:c4:
2b:fd:ad:5e:63:1d:52:b1:3c:c3:3a:e6:78:04:3f:b8:46:1b:
91:21:22:8a:29:2e:b8:0a:d2:64:ad:01:ff:9f:28:7d:ae:88:
b6:32:8a:e5:7e:b7:54:3a:97:6a:e2:64:1d:e8:61:d9:f9:93:
31:0b:f9:10:ea:ef:77:2d:1c:2f:2a:8f:ea:08:8d:63:9c:02:
b7:a7:e2:ce:3b:d7:8d:7a:8b:ee:90:c2:2a:53:37:07:0d:ac:
f7:49:d7:94:3f:51:5d:e3:f3:d7:ad:49:dc:ea:60:3d:b6:d7:
de:b5:ed:be:e8:5e:d4:9b:78:b4:aa:ad:4d:e5:f0:9e:57:75:
05:60:93:80:5b:47:84:5d:3b:12:aa:a3:65:c1:68:47:77:bb:
a0:45:be:63:03:85:7f:96:8f:c4:28:66:e5:01:62:7d:7e:4e:
45:92:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:44 2025 by rpki-client