Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: r9VnM9Zo/qKtzzZWJeWLDxoX363vtSJp5B0RqO7GxLg=
Subject key identifier: 03:7C:79:FF:00:F7:8E:2D:B7:F0:23:19:8C:A9:48:31:C7:4D:49:81
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 0197B632BB3D20A4A5319A8566B0CA4A1FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0CBE
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 24VMnEDnGItjWF5JCVLqLLz1h2VEjrlaz5+iGL/t8G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bb:3d:20:a4:a5:31:9a:85:66:b0:ca:4a:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=037c79ff00f78e2db7f023198ca94831c74d4981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:f7:5d:ac:85:67:11:63:b3:5c:0a:95:f0:
2c:b6:22:8c:31:72:00:ec:2b:32:c2:01:23:eb:3d:
e0:04:55:23:a7:76:0b:dd:ad:1c:15:14:76:73:81:
86:73:a1:1b:26:a7:7e:9c:43:a4:d8:05:21:28:cd:
60:0f:8c:bc:e9:fd:b9:3f:b6:7c:c8:01:a1:5b:72:
57:39:7c:b4:6a:58:4c:ce:c7:96:80:50:38:74:37:
c0:71:f2:05:96:9e:ca:d1:4f:79:73:5f:16:08:5d:
e9:eb:10:dd:47:d4:f0:55:e0:55:06:47:d3:8c:e5:
40:80:09:47:b7:e0:b7:33:c8:b6:eb:92:8e:62:a8:
b4:fd:af:c6:e3:41:2d:bd:18:b0:79:12:f8:ae:14:
27:03:ca:16:af:98:08:48:72:bf:a1:d3:dd:d7:33:
31:f8:fb:4a:f1:bf:cc:42:e4:cb:30:d7:54:a2:db:
ac:34:5f:ac:84:ab:aa:65:7a:96:7e:68:df:f0:b7:
be:86:43:10:1d:1f:7c:0e:3a:f8:d6:58:35:07:01:
6f:90:aa:3d:66:99:3c:16:12:46:5d:24:c0:75:4c:
06:e0:4d:e4:3c:01:9e:c5:fe:19:92:a0:cb:dc:13:
38:5d:82:07:10:cc:49:e3:af:49:ba:ef:aa:6f:c6:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:79:FF:00:F7:8E:2D:B7:F0:23:19:8C:A9:48:31:C7:4D:49:81
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4c:3f:2e:23:b7:03:78:b9:5d:c3:0a:06:d6:ba:9d:1f:f7:
46:ee:8f:58:24:81:6f:c4:58:06:c2:b2:3f:da:3d:7e:50:83:
d5:6a:c5:61:ec:8d:fb:82:26:f4:ed:ad:cd:8e:40:4c:21:01:
25:5c:2b:73:17:d9:d8:e7:9f:66:c6:f5:e7:56:b6:d0:16:43:
93:a2:be:b2:d2:9f:12:cf:32:03:71:2d:5d:8b:24:bc:4d:ff:
66:b1:b8:83:69:98:0c:85:32:84:71:8d:a4:06:f9:ed:29:d4:
28:cc:6c:07:90:d4:6c:fb:b4:a7:14:f9:78:f6:45:23:f3:5f:
33:d1:af:e5:ce:2e:f7:19:e3:24:6c:83:15:52:66:a7:6a:3e:
c6:9f:98:b4:f1:5f:af:e3:7d:ed:b1:14:49:1f:e9:31:13:4c:
88:3c:bb:2b:1a:7b:3f:64:e2:7d:41:a3:f9:14:b2:c7:28:fd:
7f:43:1f:e4:e4:4c:a2:b9:fe:44:31:a1:da:af:4c:a6:6a:bf:
93:11:ff:13:4c:10:28:5d:14:a8:d2:37:d3:5d:6f:40:69:31:
ff:d2:cc:b0:ea:9a:4a:ea:a0:9f:df:9d:2f:7f:1b:1f:73:27:
1f:c3:10:b4:28:ed:e3:66:3d:a3:56:3c:07:2e:7f:0d:00:4d:
fe:1d:71:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:29 2025 by rpki-client