Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: B+dECqd6BBygP3dwqRNSFbGZZmcdTiSCaCD3Hg2qc8E=
Subject key identifier: 0A:4D:FC:F4:A0:07:32:A8:2B:33:08:10:1E:37:E5:0F:13:6A:71:EE
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0198D4E01012FE3CF4CDA7C0C3EDEE83605B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: ERrtd9BdI7saAe/d6TdOHwyIxZHFy1ozYXe2WIJtYg0=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:10:12:fe:3c:f4:cd:a7:c0:c3:ed:ee:83:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=0a4dfcf4a00732a82b3308101e37e50f136a71ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:e6:d0:7f:4f:fd:c1:a9:58:d1:30:9c:e3:
c3:3f:9e:22:b1:94:2b:ce:52:98:f2:a5:2d:b8:d1:
22:94:c2:f1:79:7b:17:4f:ab:b9:d3:3c:35:d4:67:
a4:79:00:e7:21:42:2c:b1:1e:04:27:02:cc:89:37:
65:8f:d1:80:0d:0e:18:11:32:fb:b8:ad:66:5a:5d:
04:c0:5a:d9:06:0a:b6:1e:25:08:da:e3:66:93:db:
02:fd:43:66:5d:af:13:a1:95:38:dc:1c:2a:90:d5:
ee:ca:ea:32:b2:50:70:31:cc:00:34:ad:80:cc:71:
a0:8f:04:82:a8:17:32:77:a4:36:ff:68:06:56:01:
30:dd:08:46:3e:b3:6c:bd:84:f5:d7:04:19:4a:35:
0e:cb:18:ea:78:af:be:cc:4b:a3:4f:65:c9:cc:46:
23:44:fc:33:83:48:51:ea:b7:ae:c9:cd:fc:1c:bb:
e4:f7:1e:f2:2b:ef:6f:ae:12:64:6f:8d:16:ca:33:
91:74:42:81:bd:fa:1c:d0:a9:eb:10:18:f0:e1:6b:
51:8d:f1:d0:45:41:05:a2:41:56:4a:62:ca:58:02:
d4:b5:94:35:aa:d4:1b:9f:8d:3d:7a:6d:a5:78:94:
3b:9d:15:14:84:04:fe:8c:af:f6:a0:03:2e:fa:71:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:FC:F4:A0:07:32:A8:2B:33:08:10:1E:37:E5:0F:13:6A:71:EE
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:31:b1:02:83:63:a8:e7:e3:92:36:1a:9d:28:b2:dc:ba:00:
b1:b9:59:3a:f1:97:2a:72:77:b7:11:5e:d7:f0:86:bb:90:d2:
14:16:28:74:92:0e:c8:d2:17:ef:b5:14:86:b6:75:b4:a8:ee:
1f:24:62:15:96:0f:ca:9d:f3:40:9e:a8:7d:c7:f9:f3:8c:67:
0c:37:c2:0f:7f:b5:6e:a9:0a:1b:74:e7:09:c4:a2:6e:84:ae:
23:bd:30:77:29:6e:43:b8:d1:21:8f:f7:b6:10:d2:97:eb:17:
df:33:fe:c9:c3:f3:91:b6:77:b5:1e:47:36:e1:60:a5:e8:8a:
ef:14:0e:d0:fb:e0:53:06:29:8b:e6:a7:e2:7f:b5:be:04:73:
ab:dd:1b:36:39:f8:a6:9d:a4:bc:85:00:72:34:a4:91:75:f1:
5d:6f:ea:6e:3c:80:f6:ba:fc:c2:ad:ef:9f:d1:95:b0:11:61:
0c:ba:e6:cb:cd:46:78:eb:ae:fe:5f:11:f4:00:b8:04:58:3a:
91:01:54:9b:cc:ae:00:64:60:70:06:c3:4f:ca:b8:7e:a7:3e:
50:1f:9b:bf:b6:96:17:4d:33:2f:25:28:c6:d6:e4:47:d9:be:
78:a3:ac:90:25:24:f7:11:93:23:e9:1c:fb:1a:2b:89:d2:62:
d4:06:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:24 2025 by rpki-client