Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: RcQ+CGVAVVumflmw2sbx47gIPIcfD5Bx8HfWXwKmA3k=
Subject key identifier: 8B:5C:45:68:36:56:27:ED:D6:D9:69:E4:E4:EF:53:D6:DF:30:C1:F4
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 0198D54E258F74ADAEE9AF9CEBBC12D69816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: M5Yb/5F6EwYUXBbJcaqodjRSEKJExL56igX0x9K1PRw=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:25:8f:74:ad:ae:e9:af:9c:eb:bc:12:d6:98:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=8b5c4568365627edd6d969e4e4ef53d6df30c1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:41:21:a6:db:d6:b2:44:f7:71:9f:f3:61:
d1:78:82:1b:31:ab:df:95:1b:48:92:62:75:38:32:
23:27:b2:01:7f:76:63:3c:50:ef:ce:75:42:02:aa:
83:2c:12:22:d0:65:75:69:f6:40:a3:25:f9:34:a0:
03:46:88:ec:76:af:2e:01:42:f0:b4:47:91:cc:97:
6e:7c:9b:95:b8:99:2d:02:05:d6:40:c9:a5:be:d0:
06:40:5f:4d:09:74:e5:72:b4:87:fd:2d:99:0b:a0:
85:75:ab:45:f9:1f:37:af:eb:ee:a3:4c:7b:ca:cd:
7d:2b:5f:5e:78:5d:64:95:0d:99:19:f3:e7:bf:f7:
5f:53:a0:26:4c:93:70:4d:1a:c1:24:f3:af:5f:2f:
73:05:db:a7:6d:23:a1:e4:24:92:11:67:3f:e6:f0:
c0:68:35:6a:f7:8d:5d:8a:8c:6d:ec:11:75:f4:02:
2a:fa:83:b1:7d:03:bf:bc:bb:7f:76:d2:67:db:32:
ca:57:d8:ea:0a:c8:be:6d:f8:27:28:cf:bb:8e:b4:
71:c2:32:58:06:29:6a:f3:74:20:cc:34:da:2f:64:
dc:ca:15:ad:b2:99:e1:f1:ce:fa:9d:ce:62:5e:c0:
38:ec:d5:53:e9:ef:7f:95:dd:4c:90:5f:c8:0e:6c:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:45:68:36:56:27:ED:D6:D9:69:E4:E4:EF:53:D6:DF:30:C1:F4
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:44:b8:cb:bc:7e:92:d1:a4:d3:d1:ab:20:b7:89:93:09:
36:ae:13:66:cd:e4:fe:dc:9f:0f:25:a0:c2:9e:f6:f6:b7:85:
a3:fb:24:ea:3d:fc:45:58:72:ba:00:c0:ed:4e:9f:f5:be:53:
fc:74:00:3a:a5:07:b4:f5:de:95:97:5e:d5:3a:0e:76:7e:19:
3a:cf:27:bf:4d:53:e2:c0:d1:d7:1e:17:99:5b:db:4c:04:ba:
99:7b:83:f8:24:b1:87:47:0c:35:06:c8:34:bf:3c:53:9e:eb:
00:56:ec:7b:52:e5:7a:33:93:19:22:a5:df:aa:93:72:20:bb:
ab:4b:5c:82:47:26:7c:15:a1:89:d3:90:2b:4d:e1:a9:70:d4:
92:0c:af:d7:6f:83:01:f0:b2:ac:e2:0e:57:cb:ab:71:64:a8:
8d:69:ac:8b:a8:72:c5:88:45:e4:01:d6:61:fe:d6:ee:e9:9e:
76:b1:24:b0:88:b2:f0:ee:53:43:23:4f:89:42:b1:3d:5c:94:
91:50:b8:2f:4b:84:e0:a0:e3:82:71:91:dc:97:15:d4:1d:a6:
88:f8:62:64:0f:10:71:61:1e:c4:55:00:f8:f6:e3:ef:0a:e4:
f8:aa:15:cb:60:4c:96:c0:38:c4:31:76:d9:0e:4e:d4:72:5f:
1b:9f:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:25 2025 by rpki-client