Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: DZAzPYG5ZnhF9UvOXSj/ek2JgnbiFai7BJeE7ZDNARY=
Subject key identifier: 7E:06:5E:A5:AB:28:37:F0:73:69:FF:0C:13:28:04:53:F8:9F:E7:B6
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 0198D4E0D3C20BBDD4DBA1C575DE86E2DCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 025E
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: GzMz/C8TBab2F+7FjwUyX+5lzPTdJKkiCVqYXvxbJ1w=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d3:c2:0b:bd:d4:db:a1:c5:75:de:86:e2:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=7e065ea5ab2837f07369ff0c13280453f89fe7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:79:72:ad:c6:90:c6:a8:1a:e3:94:db:92:
89:a0:f0:ed:51:8a:1c:ee:dd:fe:dc:b8:a0:49:3b:
5a:1d:7b:1d:96:83:42:9a:d9:b0:f0:7a:64:56:42:
3f:a9:ba:1b:79:43:8b:db:17:f1:52:69:94:f2:bd:
10:0e:cb:9a:66:0e:22:58:17:6d:96:a5:29:48:ab:
0e:de:cc:b9:e9:eb:87:5e:3e:99:86:8c:18:ec:b6:
86:f0:24:e5:00:94:a0:65:a1:7a:11:52:c5:f0:1c:
bc:f2:a0:c9:c9:46:e5:4a:89:20:d1:8b:63:d7:23:
9d:9e:cc:34:3e:fc:c5:c8:68:f4:7d:1b:1c:35:fb:
c6:90:00:35:de:47:47:ee:cd:d4:03:00:5a:5f:45:
e1:ee:c2:9a:29:1c:91:3e:f1:72:4a:e6:4e:37:f8:
4f:fd:5a:a3:06:b2:8a:47:f9:e3:47:1e:e0:75:33:
4e:dd:c5:e0:ec:b9:41:9e:a2:da:a5:ea:71:75:64:
0a:d2:37:eb:19:76:28:26:e2:32:d4:a6:49:12:44:
c3:98:82:cd:74:00:a7:ac:c6:50:6e:b9:39:26:89:
c8:bb:16:5d:4d:18:44:fc:0b:37:ee:ff:2c:88:dc:
2e:d6:b7:ef:3d:ec:89:e0:e4:aa:91:f8:94:cf:af:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:5E:A5:AB:28:37:F0:73:69:FF:0C:13:28:04:53:F8:9F:E7:B6
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:69:f6:ec:d2:3e:0a:bc:2c:55:a1:bf:ae:8a:2a:79:4b:96:
f5:7f:47:7e:6c:1b:4f:08:de:84:e7:4c:fa:34:48:50:18:9e:
31:06:c8:92:11:52:21:6c:4e:51:6c:6b:5d:3d:e7:77:1a:fb:
8c:0d:45:5a:f4:0e:bd:99:b3:86:56:ad:b6:b0:1f:e6:e3:82:
1f:79:02:de:2a:1f:8e:a5:88:5a:48:47:f9:b4:3e:80:ce:c3:
79:c3:f1:35:a7:2f:6f:2a:3e:53:04:3e:19:99:d5:45:34:8f:
60:c2:46:a5:be:07:77:dd:96:82:83:eb:95:86:72:be:68:7e:
c3:c4:95:84:ac:19:30:d9:89:50:57:ef:ad:52:fa:96:c2:72:
66:50:25:ab:b8:e7:13:ac:0c:61:4a:6a:95:54:6a:0b:99:72:
72:64:62:30:0a:2b:e6:3c:58:59:4e:73:0d:4d:28:10:2a:92:
fc:c9:9d:87:7a:f0:a4:42:38:07:79:d1:07:b6:99:d2:7f:1f:
72:a2:c4:ea:d8:5e:5c:89:e0:91:7c:6c:fc:2b:7e:35:f9:21:
01:46:fe:0e:74:e5:3b:64:b0:39:68:b4:10:3d:79:8c:5d:9d:
b5:6c:cb:3a:14:05:f3:54:7f:dc:2a:64:10:bd:86:94:5e:cd:
73:07:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:25 2025 by rpki-client