Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: C+bOqMlOJW7PF7LgEd4SxNfuwX64gFkN63hvSwT6OAc=
Subject key identifier: 10:AB:64:5C:91:B2:5C:92:39:C5:26:57:BE:11:75:23:BE:49:F9:90
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 0198D884B2ED7E906127B5378C1AE0081A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 20:00:31 +0000
Manifest this update: Sat 23 Aug 2025 20:00:31 +0000
Manifest next update: Sun 24 Aug 2025 20:00:31 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: Fp+JZvxsr1TNadpLcQfWdfUAv1+Ab5Mz/30CVpiao/4=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:b2:ed:7e:90:61:27:b5:37:8c:1a:e0:08:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Aug 23 20:00:31 2025 GMT
Not After : Aug 24 20:00:31 2025 GMT
Subject: CN=10ab645c91b25c9239c52657be117523be49f990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:6e:5d:67:c5:fe:36:1b:9f:c7:e1:20:ad:
8b:11:2f:53:b6:79:91:c6:d1:94:81:81:e0:86:ef:
ec:67:93:12:cf:34:ec:c0:36:3f:72:7e:6a:31:32:
f2:fe:52:95:f1:fc:91:ca:7c:9c:45:4c:d8:82:4b:
44:17:cb:e5:14:3d:e7:e6:78:ae:a0:bc:86:f0:bc:
e4:74:2d:3d:5a:0c:53:fe:f0:f3:92:d3:cc:70:5f:
96:5a:0d:63:7d:ca:70:ec:2e:0f:79:02:4f:64:c9:
08:c0:c4:93:98:f1:28:da:1e:0b:b6:a7:23:4a:12:
a2:2b:4d:3e:7f:2b:c4:66:a4:21:38:ba:ca:54:a3:
2d:8a:06:c5:61:a5:9b:27:1d:03:7f:53:0e:2a:13:
a6:d8:48:4c:b6:a1:fc:52:12:73:e3:dc:2a:1d:ba:
68:b9:36:51:74:43:94:c9:b7:f4:d2:7c:e8:63:56:
4b:33:cc:4c:46:8b:dc:1f:15:a6:c4:f5:fd:2d:df:
60:90:fb:35:2f:38:7a:d9:59:57:46:86:d4:1d:76:
86:8f:a4:04:b6:07:ba:58:5f:cb:e0:bc:ca:10:9b:
c2:c5:ae:bf:db:88:33:8f:fc:0e:b3:de:97:91:28:
27:ef:1f:9a:e8:9d:fb:31:b6:4f:af:7d:89:bd:25:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:64:5C:91:B2:5C:92:39:C5:26:57:BE:11:75:23:BE:49:F9:90
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:36:ae:ec:79:02:1b:c6:0a:5d:3d:cd:65:c3:9d:25:11:
c4:aa:67:c0:1b:d6:56:ea:85:cf:3a:d1:dd:c0:c5:b4:99:c5:
b1:f6:b6:78:e3:e7:dc:d9:88:a6:d9:e3:4b:2f:61:79:1c:57:
35:3e:f1:b6:a6:f5:1c:0a:88:62:55:e0:ec:b1:87:a3:e1:d4:
1d:e9:8b:df:8e:ed:f3:ec:a6:ad:70:4a:18:ba:06:d6:35:0f:
bf:27:c0:fc:73:68:a5:b1:cd:a2:31:b4:1f:4e:b6:51:a4:26:
1b:3c:73:72:63:69:04:2a:96:6d:99:41:f0:db:27:25:2a:46:
24:6f:cc:c4:ab:a8:32:da:3e:83:55:c9:ff:94:79:2e:1a:f2:
b3:82:14:ca:65:5d:5d:bf:99:2e:a8:82:2d:ae:65:ee:38:0c:
13:50:0f:ed:8a:93:a3:93:b3:bb:9d:cf:11:eb:0b:0d:d3:a6:
31:a4:d1:45:17:42:3d:cd:8c:3c:c6:63:79:91:25:2d:78:16:
d8:e7:3c:f2:26:cc:2f:9d:16:a5:c6:79:a0:99:8d:34:9c:f3:
54:38:5e:63:e2:77:4e:99:49:92:38:27:5a:ce:7b:30:9f:69:
b6:ac:4e:cc:97:b9:e7:35:b2:16:bb:11:57:96:a7:26:d4:2d:
a6:9c:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:12 2025 by rpki-client