Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: AIkDBeBW9T8maMIjRVoV/jT/7FdCfkzsr29i7jp0M58=
Subject key identifier: 82:CB:A1:1D:67:BA:94:42:3F:0C:72:EC:B8:BB:86:6C:31:56:2B:B2
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 0198D6CD9D1194FDA59452495CA09D15BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: /5zZv6o62GsY1ikKl000Ubu6H39DzTzVg41z+qPYU70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9d:11:94:fd:a5:94:52:49:5c:a0:9d:15:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=82cba11d67ba94423f0c72ecb8bb866c31562bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:7b:15:8d:53:8d:5d:b6:0f:b3:e2:14:69:
59:82:8f:ec:8e:59:64:e2:bb:c8:51:90:1d:2d:9d:
6c:82:41:65:30:26:2f:9e:d9:9b:1c:6b:6e:6b:f5:
48:3e:c6:30:42:c4:79:2c:3b:3d:d8:b8:90:e4:d9:
ba:af:5e:29:c1:71:30:03:19:98:f9:55:5e:ec:1c:
e1:8a:46:4b:36:98:67:9e:99:41:8d:04:e3:b7:a8:
ff:fe:71:3d:d9:4b:d2:bd:4a:c8:72:ce:94:3a:47:
1d:a1:0f:c6:b0:07:e9:aa:25:74:99:ef:ce:b8:d8:
df:f4:37:dd:53:94:eb:ca:3f:cc:42:05:ad:81:d9:
07:57:9a:aa:27:6c:eb:96:84:b9:37:5d:6e:0a:46:
2a:a6:c1:58:64:eb:52:81:52:34:ea:b7:45:c6:22:
66:85:f5:7e:c6:55:65:9b:55:b6:83:a0:be:18:24:
5a:af:d0:01:de:c0:94:e0:8f:08:ad:0c:10:e5:65:
8f:3a:d9:7e:73:6f:c2:46:da:69:c4:2c:72:a7:dd:
cb:3b:3d:b2:78:a6:c0:d3:8c:bc:c6:bb:89:db:6a:
49:4b:b3:18:d6:0e:a5:b3:74:c8:d7:4b:d8:f4:a0:
d2:a4:89:66:3f:70:e1:2d:4a:d6:3a:9b:d5:a1:14:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:A1:1D:67:BA:94:42:3F:0C:72:EC:B8:BB:86:6C:31:56:2B:B2
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:30:69:b6:f7:b6:fe:e1:9f:4f:7b:66:c1:b1:33:7a:46:
7a:6f:c3:6b:4f:1c:4a:69:5b:01:bf:87:67:6d:8d:76:f9:9a:
63:9e:40:0a:65:f3:d5:6d:6d:95:9e:c3:06:b1:e7:fc:f3:fb:
9b:ca:6f:2f:d1:75:0c:85:0d:94:69:95:01:b6:7c:00:0d:8e:
0c:f0:ed:ee:09:a8:80:53:76:d2:84:24:32:67:97:80:92:0c:
52:af:6d:f6:5d:39:fb:77:21:ea:29:58:cd:72:4d:74:ad:f1:
ab:48:b2:d6:9f:4b:9f:e9:2d:e4:f3:35:75:1b:bb:81:67:cc:
54:f1:7f:1c:59:4c:e5:d1:2e:98:29:ae:23:dd:21:59:3f:9f:
68:3a:8f:61:6c:9b:99:d6:3c:b5:4b:6d:bd:14:76:f0:ea:0c:
af:10:d1:cb:9a:ce:fa:e4:6f:cb:ec:9c:44:b3:13:27:92:f9:
e8:d4:7d:cd:6a:4c:a7:f5:2a:0d:81:38:fe:90:7d:de:ae:e8:
48:84:bc:d7:6a:1f:81:01:10:22:ce:e4:1a:ae:73:47:7a:43:
c8:42:60:f0:2e:23:87:e1:93:07:1d:79:2d:13:a9:60:e1:46:
23:94:43:67:8b:49:bc:14:22:8b:a2:22:85:ff:ea:8d:5f:39:
64:1f:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:17 2025 by rpki-client