Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: 50lqhJ9Gu232qLc1M1loyjkqaTsIuCjYLYN17je2yu4=
Subject key identifier: EC:24:DA:96:DD:CB:18:D3:08:D0:98:7E:9C:E2:76:25:C5:A3:47:2B
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 0198D4E087D43BFC0C7757ABBD98D1F01D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 12F4
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: WrHtiNcofaawuzILUfxpm/svxPMBbV8LGoLuLFkOKws=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:d4:3b:fc:0c:77:57:ab:bd:98:d1:f0:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=ec24da96ddcb18d308d0987e9ce27625c5a3472b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:93:9b:fd:1d:bc:ce:ac:0f:38:2e:9f:a1:88:
ac:91:df:d1:d8:81:8d:d2:4d:ec:53:59:cb:72:30:
86:3a:7c:a6:8c:65:99:9c:49:bf:64:49:ef:a3:08:
ae:c2:77:29:cb:9f:c5:68:7e:70:d6:7e:2f:4e:85:
e6:2e:88:76:dc:97:0a:c6:5f:bb:77:a3:f1:b7:78:
7a:e7:2b:10:3e:4c:27:05:9b:29:41:e7:1a:2e:0c:
a8:85:38:36:e0:db:19:f5:82:66:a3:1a:ac:2e:76:
d6:08:90:22:cd:18:eb:80:7a:08:12:98:59:9d:18:
7c:9c:03:5b:70:47:bf:ee:c4:4e:8a:ac:8e:be:3e:
93:27:7a:0e:91:34:72:18:95:be:da:48:42:c2:fd:
22:74:9b:5b:8b:f9:4e:2d:85:87:75:74:ea:b4:20:
21:4d:d0:15:1f:40:8b:c1:95:dd:97:c1:9a:16:75:
15:27:0e:fd:31:80:ed:f8:f7:a8:4b:a5:22:d1:6c:
43:6c:20:ad:84:bc:c4:0d:37:58:95:4c:df:19:a4:
4d:47:57:b1:9c:63:00:44:05:23:56:d1:91:ba:bd:
e9:33:ea:5d:8c:e5:b9:d9:f2:9c:04:ed:4e:34:e5:
7e:db:1f:4d:27:ea:f7:7b:ac:c2:ce:c1:6d:d6:e1:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:DA:96:DD:CB:18:D3:08:D0:98:7E:9C:E2:76:25:C5:A3:47:2B
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:29:86:2e:8b:23:5a:05:27:74:52:fb:ab:b3:dd:1d:b8:ec:
83:72:b7:44:54:6e:7c:3b:8a:e6:b2:56:0b:5d:83:e3:53:93:
67:99:71:4f:f0:69:06:0a:2b:8e:8e:76:b7:ac:b0:c0:94:a5:
25:50:23:22:1a:f9:59:d1:fe:d3:8a:ba:b6:c6:8d:a3:d8:c0:
96:b2:58:45:7c:90:d1:19:fe:65:8f:e7:26:a4:ea:8c:c7:8d:
65:d6:a5:23:d8:ac:d2:30:1f:16:b9:34:95:cc:ac:89:81:24:
29:a7:a4:31:88:60:bc:86:19:ef:93:cd:a9:bf:fa:ae:87:95:
b5:13:40:55:19:67:36:3b:5e:eb:a4:e0:b8:52:fb:59:ff:ef:
f4:80:5d:04:2b:db:b9:2b:ba:34:c3:40:24:56:50:32:52:a2:
e4:66:eb:b2:31:3b:8f:41:bc:99:b7:50:05:78:d1:17:f6:a3:
ab:1b:4f:74:8e:5d:84:0d:59:29:d1:dd:41:5b:3e:dd:c4:77:
fe:ae:74:c8:35:61:87:ee:27:d9:53:be:a4:d9:e5:34:20:bf:
ce:78:05:78:36:9d:43:1f:b1:44:bc:42:6a:55:39:e9:a3:d7:
f4:c3:82:df:10:ca:ba:62:b4:c2:5a:e8:5f:88:4b:b3:95:4b:
dd:c3:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:45 2025 by rpki-client