Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: NyuMTFtNp0IiPsiI05D/qeFQ3PMICkmh7ap8tJRjqQQ=
Subject key identifier: DF:11:20:6D:F5:D5:B0:08:B3:4B:16:81:2E:7C:C3:01:F6:C7:EC:8C
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 0197CA5E74C753C2C2CB9ADAA1D18CFA595E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1251
Signing time: Wed 02 Jul 2025 09:01:17 +0000
Manifest this update: Wed 02 Jul 2025 09:01:17 +0000
Manifest next update: Thu 03 Jul 2025 09:01:17 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: kysob5heuot+900J2ivbYz02o+9jpbODQRQZ0ZbAczU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:74:c7:53:c2:c2:cb:9a:da:a1:d1:8c:fa:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Jul 2 09:01:17 2025 GMT
Not After : Jul 3 09:01:17 2025 GMT
Subject: CN=df11206df5d5b008b34b16812e7cc301f6c7ec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:de:c7:5e:b9:7f:61:c0:a1:4a:0c:53:e4:
a9:ec:43:43:64:11:b6:fa:f4:8d:68:39:86:44:da:
a2:1c:42:dd:3e:b7:9a:b6:40:ff:10:8b:a7:6a:f8:
76:70:f5:13:4d:34:74:b0:bd:46:cd:88:d1:30:87:
de:59:8b:dd:45:49:9c:4e:e7:0a:35:7d:6f:7f:e5:
cc:f8:28:05:81:b3:29:68:af:23:66:3b:68:2c:4e:
81:47:d0:e4:6c:73:91:20:e3:4d:3f:e5:0c:41:2c:
6f:b0:83:87:7e:04:5a:7d:05:49:39:08:a8:18:70:
c6:6a:bd:01:f7:c4:cf:4d:dd:14:f2:ee:0e:8c:20:
ae:b8:f8:09:4b:d0:cd:78:aa:ce:a7:31:74:0e:d6:
44:76:6b:77:b7:09:95:7f:21:37:ef:65:7b:40:33:
cd:41:d4:42:f1:8d:2b:fb:d6:49:9b:e5:67:b7:25:
97:85:10:f0:8c:a8:a0:cf:e9:a8:b1:d4:c6:66:d9:
05:79:b0:9b:54:21:a2:7f:8b:89:c6:d4:fb:c5:ab:
3c:d7:4a:3f:9b:24:1f:6f:61:70:5f:09:e3:83:be:
10:0c:fe:96:28:0e:4b:2c:85:98:25:38:a7:b4:77:
41:c9:73:9a:c3:f3:29:4f:0a:65:0f:2b:a5:9a:02:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:11:20:6D:F5:D5:B0:08:B3:4B:16:81:2E:7C:C3:01:F6:C7:EC:8C
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:34:cc:de:5a:93:c2:de:22:60:50:d8:73:36:38:31:19:26:
55:18:d3:53:82:57:22:9a:15:4d:df:e9:51:a6:a5:c2:3d:4c:
7a:3e:96:72:97:ec:4a:61:60:41:0d:80:65:e6:44:88:91:9d:
fd:46:fe:80:8f:31:00:66:e2:1f:1d:d8:46:13:47:a8:8a:26:
b3:4b:13:05:48:a3:52:6c:8f:06:e2:6e:26:df:7c:c9:57:8c:
f6:34:69:3e:3a:f6:42:11:e4:cd:78:39:66:15:6a:40:2f:4a:
51:5b:63:ba:45:41:49:61:73:ec:cf:dd:8d:61:fa:90:c5:53:
85:83:45:79:67:70:13:09:65:99:d9:2b:ca:2a:65:af:e1:2c:
f9:f3:2e:6e:34:18:e2:f1:b8:15:45:24:60:82:4b:90:48:7c:
39:14:51:69:c3:b6:5e:dc:da:ab:de:4a:ac:33:0c:38:cf:da:
e3:9a:d9:1d:fd:c1:22:ab:b8:b9:b8:72:23:6b:b9:5f:6b:40:
6b:8f:e9:f4:6c:3d:20:70:d8:c4:99:5d:f4:85:14:2a:85:60:
66:c3:bd:a1:19:95:c6:37:a3:a3:e1:43:1f:e5:3c:29:ba:f4:
4d:4d:57:8d:7c:97:44:9b:f2:c1:ed:b4:a6:7d:c4:f5:06:21:
6e:7d:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:19:34 2025 by rpki-client