Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: a7901R5wOlF8Q4flHFRFF25wCB43QaPZquyYLOZaftg=
Subject key identifier: FB:F7:E1:E4:6A:52:BB:F6:B9:9A:45:77:19:9D:0C:22:CB:D2:AC:20
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 0198D4DFF71F46DA827A589E7E15F88F3DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: S1glMRFsIOuyDiBuDNOO4d33VAf5AD5Szcu0rzIWxLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f7:1f:46:da:82:7a:58:9e:7e:15:f8:8f:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=fbf7e1e46a52bbf6b99a4577199d0c22cbd2ac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:f7:53:d8:06:36:9a:75:61:ea:f1:27:e8:
20:db:1d:58:57:ea:3a:6e:4f:0e:5c:16:b0:9e:8f:
a9:3d:d5:ef:04:02:45:97:42:7b:5a:cf:16:7b:4c:
f8:ae:ab:cc:bb:91:ce:79:b6:44:d6:54:6b:0e:00:
88:a7:39:2d:d1:2f:04:d7:a6:6e:8e:00:29:ba:06:
4e:29:ac:32:3e:56:2b:cf:74:5e:b8:48:4a:81:bb:
18:ba:d4:9a:da:22:78:52:50:be:3f:a6:87:3d:83:
4c:f0:86:c8:6a:7f:01:05:62:00:dd:4c:01:10:4a:
11:49:e6:bb:1b:0a:5e:27:44:e8:d5:a0:25:d9:b7:
6f:46:ef:0b:80:1e:07:52:7d:58:7a:e9:68:7c:a7:
29:db:24:e4:ce:7b:6b:f1:5d:41:eb:7d:23:d5:40:
b0:88:b3:8e:d3:60:0e:ce:b4:1c:ab:19:d4:4b:c1:
16:18:73:51:12:96:8f:9a:87:ca:8e:bf:39:bb:ae:
34:14:95:00:7e:db:34:fe:0c:0b:cd:07:ac:3d:35:
4c:ac:a7:05:1d:40:f5:c6:bd:35:db:fd:30:5c:b3:
78:4b:cc:77:50:92:1a:4f:be:83:bd:7e:99:a0:8b:
d3:4b:96:4c:20:e5:a4:a8:98:a7:8c:ae:6a:f4:3a:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:E1:E4:6A:52:BB:F6:B9:9A:45:77:19:9D:0C:22:CB:D2:AC:20
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c1:e2:c6:a8:49:a4:81:3c:0d:d9:1d:79:18:74:26:6f:60:
47:ae:33:17:51:f1:55:fe:a8:e7:91:0c:03:97:d9:5d:d6:31:
a6:1a:86:3a:ef:8e:3f:3f:47:f7:58:97:5a:3b:0c:ed:40:c3:
06:43:54:1b:0f:be:48:b5:3b:b9:5f:0f:fb:97:9c:9e:20:00:
0b:e2:91:06:3d:f8:75:41:14:40:7c:e3:84:6c:1c:32:57:8f:
5d:37:66:4f:05:87:4a:ac:be:00:28:76:3e:7d:a6:3e:ac:13:
d0:27:18:fa:12:ca:ce:b5:22:af:99:eb:5a:b0:0f:1a:2c:34:
99:e6:d9:da:d0:ed:11:aa:2f:d3:e9:e8:93:97:cf:35:d0:26:
c9:09:82:f6:02:43:a2:cd:56:e6:94:d2:c9:ad:3c:7a:c9:71:
77:ec:95:ae:5f:cf:70:2b:d0:0e:7f:a5:69:e0:a8:ae:7c:f8:
a5:44:49:8f:6c:df:0b:2a:4c:aa:cf:31:e0:cb:c7:3d:6a:ed:
a3:17:78:a0:db:cd:4d:5b:06:50:5a:d4:0a:bf:63:3c:9c:ed:
20:5d:7f:30:e9:b5:32:03:2e:e2:dc:e0:d8:3f:aa:8b:8f:9f:
1c:00:87:50:75:e7:b9:f3:7b:36:3d:09:85:a0:23:fe:c4:28:
8b:6f:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:30 2025 by rpki-client