Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: 8/9MttXwTpyYrerKoQbmZSghXFtqc38lYIKPdC4W+hE=
Subject key identifier: 8D:F9:BE:96:D9:8E:57:BC:4D:1F:6C:23:94:D2:E0:F8:B4:7C:79:33
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 0197B7EA1C604FBF51C3C269BE292E198670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0B0E
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: I/PYI9hekbW+nDtZZPsv5yTdJuXkaTzqGh/MQifaccE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1c:60:4f:bf:51:c3:c2:69:be:29:2e:19:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=8df9be96d98e57bc4d1f6c2394d2e0f8b47c7933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:f4:19:ff:45:7b:af:4d:1d:e5:a2:5d:c0:
c4:04:96:53:40:9a:ee:66:d1:f0:e0:e7:2a:35:d2:
15:dc:7c:a2:10:0b:f8:cd:31:fb:c5:a3:f3:42:bb:
c5:82:9e:e3:41:9e:d1:f8:4a:c5:03:a4:5f:16:77:
e1:92:89:4e:11:57:37:da:7e:01:79:72:32:8f:f6:
2e:11:5f:65:07:3a:df:5b:30:cb:5f:24:aa:71:ae:
6b:56:78:02:a3:dd:ac:fd:a9:14:de:b9:c2:46:f8:
31:d8:76:41:9b:9a:47:b2:93:2a:c3:10:84:63:49:
63:9a:c3:48:6a:b0:14:27:24:38:6b:aa:99:c2:e6:
ae:36:ab:61:96:60:87:d0:34:26:62:21:e8:f5:d0:
fb:f5:97:dd:d2:5f:9f:c6:3c:43:c0:a5:1c:cc:de:
0e:84:3d:3d:12:e5:ce:f3:ec:6a:34:63:f5:5c:ca:
d0:02:1e:87:9d:c6:c1:b8:d5:6e:dd:cf:12:ab:af:
b1:f8:60:78:42:bf:d5:ad:2a:da:15:27:24:0f:45:
16:cd:4b:04:63:63:8a:dd:7d:06:62:c3:5a:fb:48:
bc:2c:29:39:c7:48:37:d2:bd:f5:25:73:3f:40:ca:
d7:50:12:78:25:e1:8b:50:c9:cd:db:46:06:8a:f6:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:BE:96:D9:8E:57:BC:4D:1F:6C:23:94:D2:E0:F8:B4:7C:79:33
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:02:9c:53:22:2e:5d:53:87:20:0b:7c:04:cc:41:46:5a:
39:c0:3c:22:be:6d:26:b2:94:09:9b:dd:56:4d:ff:82:52:4f:
96:7d:7a:ae:9d:25:a0:06:6f:51:f0:56:02:62:d6:07:69:3c:
b2:15:a9:eb:d6:ba:97:d4:c8:87:53:d0:3f:40:e0:bb:3a:1b:
6d:0f:49:66:34:e9:d4:ee:92:e6:ef:56:ba:5d:e3:31:0a:4c:
78:c7:66:e6:ef:f1:09:05:3c:b0:de:e6:25:21:d4:c2:31:c5:
e0:b5:51:be:b9:2c:0f:a8:a2:ab:01:ff:d3:e4:d8:ff:ae:fc:
a0:93:27:34:2d:dd:61:f3:a0:47:4f:60:f7:90:81:de:9f:fe:
f1:6f:d8:eb:47:97:08:26:1a:91:16:c6:3a:6e:57:e3:b2:17:
70:2a:12:0a:fb:0f:c8:fd:c6:f5:d8:88:22:17:06:9a:b8:47:
fd:1a:9d:19:3f:c3:68:ed:b2:66:d9:51:74:14:12:17:99:15:
4d:d3:e3:5b:ca:93:88:c1:a0:0a:73:fe:a2:21:9e:c5:de:43:
2e:f1:79:06:8e:dc:14:bb:6f:94:6f:99:c8:11:1b:b2:41:e1:
55:04:18:34:0b:6b:c4:a6:b3:5b:8d:02:44:aa:09:5b:cf:d4:
10:4c:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:38 2025 by rpki-client