Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: GMuKhQh8Rizgu2jZzd+DXXa8iLPXXOj2DVtnahCIhDs=
Subject key identifier: 43:30:CE:8F:EC:40:6A:B5:E5:4B:C5:F8:7E:13:5E:E8:BA:32:48:13
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0198D583C87D610594234ED4AB5ED188D08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: 64DMoRIlQ049M/V+g1Vmq11QYXAGe+5gBlkMqHmZBpA=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c8:7d:61:05:94:23:4e:d4:ab:5e:d1:88:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=4330ce8fec406ab5e54bc5f87e135ee8ba324813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:78:37:d4:15:8d:02:d9:59:86:98:2a:6e:
44:48:83:16:d2:f8:cc:1e:26:c4:be:e9:c9:f9:8a:
be:98:d8:e6:d3:4d:a8:90:a0:96:7a:e3:16:24:95:
82:e0:34:6a:10:ad:fc:64:97:4a:53:cb:0b:00:c8:
0a:c5:2a:a8:5e:56:8a:f3:3a:73:f1:db:9a:11:3a:
a8:15:b1:00:ea:7a:13:44:db:11:3b:90:41:ff:a5:
30:46:4c:7a:51:f8:03:92:26:c8:92:32:1b:44:8d:
f8:e3:bd:ee:cf:4d:07:39:d5:d2:b0:b8:af:02:44:
4c:22:65:b5:56:13:52:31:7b:6c:c7:6b:66:a4:99:
91:94:62:e3:e8:9a:2c:89:64:a9:e3:0f:1c:c7:06:
79:f3:96:66:11:8a:f6:77:10:41:20:30:fe:96:7a:
6d:60:82:d6:72:c9:b8:f2:96:fe:1f:dd:2a:e2:9c:
de:6d:38:49:3d:12:6c:44:b6:fe:bc:dc:e4:5c:62:
96:32:08:70:de:37:37:fa:88:d9:59:c0:7f:cc:93:
23:b9:83:a2:53:3b:47:39:d2:da:23:f1:98:80:21:
04:d5:b5:c3:10:ad:f9:ac:df:61:51:ea:e6:b3:9d:
6b:fa:cc:0c:c3:67:bc:3e:1f:62:c4:c7:e6:68:9f:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:CE:8F:EC:40:6A:B5:E5:4B:C5:F8:7E:13:5E:E8:BA:32:48:13
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:15:51:9a:66:9a:a3:b5:c1:e0:d4:2d:66:33:75:9d:6b:
cb:9e:c7:3c:d0:49:7c:9b:b6:09:20:dd:eb:14:9f:e8:92:fd:
2d:6e:e2:7d:7c:4b:f0:0c:c5:bf:25:22:cd:90:8d:69:0e:b5:
85:91:7f:86:f3:2e:b0:0b:2c:ea:11:d5:99:ca:f5:55:d5:f9:
54:b2:3b:da:06:3b:18:e3:f6:8b:6e:a1:a6:4f:05:a8:83:b1:
d3:f0:c6:88:9b:f5:6d:1c:88:5d:51:10:87:9a:3f:cf:5a:61:
29:f0:22:55:90:e5:c6:07:06:c6:cb:b1:d4:65:70:74:1a:98:
09:8e:29:09:30:59:f5:af:f2:08:cc:77:46:ad:6f:c5:7a:52:
e2:04:10:41:e9:97:94:3f:35:ea:f2:cb:36:bd:c8:a7:84:4c:
8f:ad:ad:2c:87:44:84:7a:2f:14:77:bf:4a:5f:48:01:5d:06:
1b:50:70:52:2e:cb:b7:f0:fc:00:99:7b:0e:be:b7:dd:12:14:
47:9d:86:d6:de:30:ea:09:22:cd:7f:33:1d:29:c1:31:9c:d0:
7a:78:64:4c:fd:c1:b6:3e:5f:fd:29:6a:20:b6:8b:25:99:75:
2e:a5:45:dc:56:17:1e:18:d1:d7:24:08:fb:9b:c4:78:6b:50:
7b:83:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:45 2025 by rpki-client