Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: xT5qD73eu/V6T2sCmqjNaKLdIEYKip3OTSgPznYFhtU=
Subject key identifier: 51:28:C8:7D:EE:EF:05:85:F2:F0:3B:9B:B8:6F:E6:BD:5E:96:BB:F5
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 0198D5F14E38879071291183469E5667C8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: AVzBevFjT2XnN9/CqVpWMt7s/vuz7OY9+zKVULMJQM8=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4e:38:87:90:71:29:11:83:46:9e:56:67:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=5128c87deeef0585f2f03b9bb86fe6bd5e96bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:3d:fd:35:f9:c6:85:ef:0c:bb:00:1f:30:
3b:00:55:da:e4:25:1f:3e:2e:28:82:ba:da:73:9b:
06:c3:3b:c2:6a:4e:9b:5c:01:ae:eb:4b:ee:11:17:
d6:f5:2a:b5:80:f8:b0:db:62:30:96:32:0e:8b:33:
35:2c:c9:a3:6c:4c:85:1a:ef:9e:4d:b3:67:2f:c5:
cd:ca:0d:83:37:e9:cd:0e:3f:95:05:d3:92:31:03:
9a:59:38:37:72:cf:08:9b:1c:62:27:13:d3:76:40:
55:c3:1a:70:af:ba:d5:c4:36:83:6b:e0:ab:62:26:
4f:2f:4b:f5:a0:ad:ae:d6:9d:44:ec:8c:88:0d:ca:
ca:8d:83:ac:53:f3:98:a5:c3:b1:3e:e7:1c:fb:0c:
18:f2:cb:d2:b7:0d:60:cf:09:f1:31:3f:cc:99:2d:
9d:7e:60:d4:4a:3e:de:66:ee:c0:64:a3:71:ee:9c:
eb:9b:92:7b:57:b0:1b:f9:e3:82:f6:8c:60:c5:5c:
db:31:5b:e8:5d:c9:40:36:44:17:29:12:26:58:0b:
85:58:43:a4:8c:3a:6a:04:9f:41:33:06:ea:45:c5:
3b:ef:e5:ac:69:9d:9e:4e:f4:53:4f:22:d9:01:1c:
26:e7:dc:93:5c:11:70:f8:cb:a3:b2:eb:98:90:bd:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:C8:7D:EE:EF:05:85:F2:F0:3B:9B:B8:6F:E6:BD:5E:96:BB:F5
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:ba:53:08:a3:98:22:28:6b:ec:62:08:f0:45:25:36:f5:
dd:0a:43:38:1e:c5:b4:1b:1d:71:d3:f4:81:39:03:02:15:8d:
a8:8f:cd:f8:6f:b6:0d:42:8b:b7:2a:7d:9f:fe:6e:ca:05:b7:
e9:e3:41:1c:72:da:e7:1a:9a:1b:c1:a6:06:aa:4c:f8:14:7e:
74:4a:a6:0f:de:af:e8:f6:19:d9:f1:ad:da:22:3e:e5:36:7e:
92:e9:5c:4d:92:f1:0d:c4:29:9f:aa:57:92:51:1a:8c:d5:70:
37:d5:10:5c:75:f0:eb:34:cc:6e:3a:c1:78:e9:1b:ad:46:a6:
58:55:bc:48:c5:c9:f6:ca:cc:39:af:81:b0:8d:ab:31:ca:6b:
05:be:fd:50:2e:74:77:7b:2f:97:51:53:cd:0c:74:47:75:e8:
d7:c8:d7:ac:86:c3:31:94:ca:c2:f5:16:9e:dd:ff:8c:3d:5b:
0a:07:42:86:24:a6:14:72:d1:3b:2a:b9:8f:c7:b0:55:11:e5:
70:63:d4:21:a8:ac:a4:af:18:48:82:68:41:98:bc:8a:24:12:
20:fd:14:67:cc:e9:fd:d2:49:78:ee:e6:a7:cd:88:fa:c0:ee:
74:b8:2d:cc:41:65:8b:0e:53:09:0c:ee:78:bb:29:24:f2:8c:
71:c0:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:35 2025 by rpki-client