Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: qbOtgCvAGikZJarD+e24R4DA6mUseGQXdoOPVKqn4Nc=
Subject key identifier: 5A:04:64:5F:2D:AA:AC:0C:B8:06:1F:67:BA:B5:59:51:BB:7F:62:E9
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 0198D4E08E0DCA765DBC6CBA990D22877897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 06C3
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: u0ciD4nqnxpJEw/XcxvB7ng4IL2X33TrSxhjuglglT8=)
2: stpDfm6iNdDYaLxAEW54ErOGA3g.roa (hash: 0TvfMldTzQqqOzNlOoBnIsJUFfnXCRYAaac2mQAq9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8e:0d:ca:76:5d:bc:6c:ba:99:0d:22:87:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=5a04645f2daaac0cb8061f67bab55951bb7f62e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:35:08:a4:f4:9f:58:f5:35:96:f0:93:4f:
aa:0e:27:f3:81:f6:a1:c9:03:f9:cd:5d:11:1a:17:
fd:47:cc:34:dc:e7:f3:a2:bf:d6:5e:73:59:cf:64:
8c:35:13:bb:16:96:41:ea:c3:7d:12:c9:1b:3c:28:
93:92:22:2a:fe:2b:f7:4c:ed:b6:39:7e:05:b5:1b:
2b:22:be:02:cb:85:e3:ab:f8:4e:cb:4c:90:33:5a:
08:82:db:9a:51:1c:01:28:18:93:a4:f1:6b:d6:fb:
2a:1c:42:70:65:0d:44:4b:81:25:b4:d0:75:81:6c:
b2:4a:ef:9e:4a:df:dd:55:f5:46:7e:27:2c:5a:80:
94:3b:c0:4a:1a:94:35:b3:9f:e8:d2:35:e5:8e:a1:
41:ae:02:82:c0:65:e6:de:92:9f:17:21:65:86:42:
75:48:5f:5d:20:ad:5f:ff:94:78:ef:31:a7:5f:44:
dd:e0:ee:8c:f9:37:3d:ba:75:00:2b:83:18:5d:30:
25:08:43:be:1f:11:5b:b3:b2:bb:d6:f8:08:a3:42:
62:5f:25:9d:31:b0:92:56:ec:b7:3c:d6:29:81:ec:
75:0d:03:28:ca:fb:0a:37:a9:14:bd:dd:8b:66:ad:
4d:a2:61:8f:ec:90:f6:38:2c:db:48:d6:04:e7:00:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:64:5F:2D:AA:AC:0C:B8:06:1F:67:BA:B5:59:51:BB:7F:62:E9
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b8:be:f4:3f:d0:de:4d:04:7e:5d:cc:2e:7e:c9:3d:2b:fa:
2c:cd:be:26:5b:8b:3d:5f:81:69:15:78:fc:21:00:a3:dd:42:
1d:67:4c:da:2b:4b:66:73:2a:23:16:49:df:d7:98:f9:bf:fd:
52:0c:3c:fc:45:8a:c7:c7:85:3e:2a:57:9b:57:19:33:c3:67:
f8:c7:18:0c:11:48:4d:86:b5:8a:28:00:34:55:6d:95:a5:da:
56:79:f3:45:92:30:17:6e:3a:19:31:5e:8e:e2:bb:ef:a8:f0:
20:25:c7:c6:eb:f7:9f:cb:e4:06:f4:4b:2c:60:e3:74:cb:51:
3d:38:38:bb:2c:06:d2:02:4b:b2:53:15:28:2a:16:3d:ad:42:
8f:14:44:6d:f9:2b:de:b2:bb:9b:59:1c:16:b1:7b:e0:2b:30:
c8:b8:bd:c3:f6:66:07:19:b4:e6:74:98:5d:ea:4e:f0:d0:91:
a8:10:86:90:b1:c6:2b:52:a9:d6:a1:b0:86:29:a0:1d:b3:84:
1a:03:f5:17:53:44:69:ad:25:46:5a:da:72:b7:96:48:62:ef:
8b:fb:54:b8:87:46:cb:70:86:b4:61:d4:c3:5e:80:74:4e:f8:
1c:36:e5:0a:8a:41:4f:cf:52:33:28:98:c7:03:8a:bb:58:10:
3f:f0:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:22 2025 by rpki-client