Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: bYbHAdhltA9Sxb1SIXeWAp+gZNSjg0zGZkv8V0QWzxE=
Subject key identifier: 68:BC:4D:8F:5D:82:73:25:0E:C2:32:8C:B7:65:99:0A:31:5B:D2:95
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 0198D54E8A3480E97AF53FAED93FB4E266B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 0531
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: IUoIwNJwb1Ergv6aN8ZoEJFmC01qknKAAPg68h5V3Sk=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8a:34:80:e9:7a:f5:3f:ae:d9:3f:b4:e2:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=68bc4d8f5d8273250ec2328cb765990a315bd295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:9d:34:77:68:e4:e9:78:02:59:43:eb:d5:
4a:f0:d9:79:76:b7:6f:83:4b:f9:25:f9:a0:ac:1d:
0c:92:28:55:10:21:5a:72:80:b9:0a:a6:62:9d:84:
d6:e2:cc:f3:0e:ec:9f:de:c3:0a:2c:eb:96:bd:32:
c5:0a:e4:dd:68:18:1b:64:23:a4:1a:30:24:d9:2b:
99:97:2a:ba:60:1c:c0:c7:10:6c:56:7c:45:0a:b6:
e1:1d:36:77:35:64:f4:2f:ec:03:b3:f2:35:da:e1:
d3:ff:a7:b3:2f:62:02:a2:c9:ff:ec:21:6d:d7:61:
24:1d:da:e8:32:f9:06:d5:0f:7c:95:3b:7f:38:97:
0a:0d:a9:af:be:67:21:45:db:cb:c0:dc:5d:bd:8c:
7c:b2:4e:d9:1b:02:99:0f:04:96:7d:6f:2b:d4:ca:
80:40:2a:11:d4:47:99:1d:a4:2d:f8:6d:e8:ce:16:
5c:d2:96:3f:06:bf:1d:e6:f9:d3:e8:92:e4:9c:60:
70:99:a4:8c:3e:bf:52:7e:3b:85:70:cc:b6:25:ef:
e0:45:db:36:1b:64:e2:6f:bb:14:93:58:03:4a:63:
e4:e0:91:57:de:ed:62:cc:37:0a:c3:c6:cd:f9:50:
26:a7:ac:a9:18:bb:09:27:c7:ec:1d:32:1b:a3:2c:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:4D:8F:5D:82:73:25:0E:C2:32:8C:B7:65:99:0A:31:5B:D2:95
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e5:8d:44:59:61:45:14:17:2e:a9:94:8b:c7:5c:80:f6:0c:
00:20:ae:a7:6a:d9:5e:e3:a3:e6:f3:b4:c0:f3:e8:27:f5:69:
19:9d:32:5e:99:26:b7:af:3f:74:d8:ec:bc:65:79:96:04:cd:
a7:f3:9a:f7:b8:66:8f:6d:cd:c9:96:7a:86:50:32:0e:a9:1a:
be:9b:26:12:9d:ab:07:bd:dc:17:c6:31:95:fe:d5:20:eb:8c:
8f:bc:8b:0b:6e:63:a7:f8:bb:1f:57:e2:5b:2e:d1:19:f0:ab:
c0:ff:f8:df:0e:c5:43:9b:38:b3:eb:66:e3:67:a7:d3:03:da:
a1:cd:aa:2b:5a:3b:9e:e6:da:b6:b9:00:0b:fd:29:27:e2:5a:
49:fd:58:26:f6:7a:c3:5b:7e:27:b1:04:39:ce:58:54:f7:35:
15:e0:cc:38:8c:d0:ee:4a:e4:b8:ba:7c:ba:a4:15:69:74:b8:
2f:1d:d7:d3:b4:82:ab:b0:c4:98:67:a4:1b:47:5f:5e:23:b7:
f8:60:f2:0f:c2:d9:66:7c:36:e7:27:aa:60:8d:8f:85:57:1c:
49:77:c5:a6:ea:99:f7:96:1e:1c:bb:e9:73:ac:44:2c:15:3d:
99:e2:02:75:23:d3:5c:5e:1d:74:aa:57:bd:81:93:62:00:c8:
be:93:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:11 2025 by rpki-client