Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: 4aUUzlNQsS614SQ7Z7wIvFyZCbxTheiv5k9lK7d3aWo=
Subject key identifier: 94:8E:9F:5F:4C:AA:C4:90:69:F5:8A:0B:F0:05:65:C8:19:3B:F6:A8
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 0198D5F1C438B4363CD71D87A9CE287474F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0D53
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: E26iAbvgBx1AsClN2blU1UotiTGLiQqxosnvuEpSzaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c4:38:b4:36:3c:d7:1d:87:a9:ce:28:74:74:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=948e9f5f4caac49069f58a0bf00565c8193bf6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:e4:cf:f1:a5:5d:f0:ec:77:cc:70:3f:ff:
5c:26:50:ad:5d:19:d4:35:09:f2:34:47:62:c7:87:
6e:ae:32:44:44:27:3f:e1:25:2d:7f:49:e5:bc:39:
d1:31:ed:48:d6:30:53:a7:f9:b1:65:37:1a:c2:d8:
a9:88:ce:08:e4:56:6d:8a:49:ce:4b:6c:8b:98:d7:
8d:74:00:03:74:2c:66:12:f3:8e:ee:e6:d5:31:de:
63:6e:38:32:6a:2b:38:82:22:c7:26:06:5e:e8:f5:
b9:5c:ca:68:62:f7:27:10:0f:8e:df:1f:5e:f8:2b:
43:bc:46:6e:55:68:5f:5b:49:9c:19:31:b2:8e:02:
9a:d6:a1:04:c2:1f:22:24:85:fd:d9:09:bf:10:4f:
84:19:83:1d:5f:24:ba:e8:10:ec:e4:a8:0a:39:7e:
48:79:55:4a:d3:4c:d7:ec:55:65:af:c0:c8:82:5a:
a7:03:5b:19:a7:09:64:dc:a8:3c:91:0b:22:2d:d5:
16:6b:21:07:dc:f4:09:52:de:3a:fa:5d:1e:07:62:
1a:8b:a1:73:1d:a5:ec:50:ed:63:3f:c2:5f:1c:b2:
c9:49:d5:28:30:55:e2:65:17:f7:fe:07:5a:76:d1:
d7:dc:89:2f:9c:8f:c7:ce:f5:fc:c8:4d:45:7d:e5:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8E:9F:5F:4C:AA:C4:90:69:F5:8A:0B:F0:05:65:C8:19:3B:F6:A8
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:a5:6c:c9:1e:a2:fe:b6:ea:40:ff:01:58:b9:5f:97:5d:
8a:9b:e2:9d:5b:13:81:39:93:8a:0c:82:24:bb:14:82:1f:54:
4f:d9:b0:d5:10:53:6c:90:ed:c7:42:70:84:98:a3:cd:b5:0d:
7c:3e:ed:79:c2:24:b9:5e:77:38:73:2a:b1:bb:07:18:d9:d6:
b8:ea:68:7a:f4:6c:da:29:5e:cb:5e:e7:46:ff:98:77:eb:fd:
50:c8:cd:02:d8:56:ad:07:72:4f:a0:c3:b4:92:e8:8a:f2:9c:
a0:38:54:7c:11:d9:05:c3:e7:a8:53:e9:ec:70:25:6d:a5:cb:
7e:62:3c:c6:38:6b:44:68:e7:23:c0:ae:35:2b:46:e9:a9:d0:
d3:bd:0a:a9:9b:39:c6:14:20:df:a6:2e:6d:5f:ec:98:07:ec:
2a:e6:a0:e1:2b:bf:2b:b0:02:7e:a6:2d:c1:87:e8:2f:86:d3:
01:61:1e:c8:d1:8e:eb:91:9b:84:81:37:2e:a4:17:b8:57:b1:
94:7c:ad:fd:32:ce:77:1e:8b:39:3e:1c:6d:ea:28:91:d2:16:
44:12:37:8a:ae:8b:80:3e:62:84:ca:02:fc:44:f0:84:a0:ca:
33:8c:b5:a7:39:5f:76:c2:8c:48:12:7d:f1:04:79:82:41:57:
95:42:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:21 2025 by rpki-client