Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: TpU+6knoAPUHUj3XOFmLtuj5Sj8Wp07jZBMy8O8X6As=
Subject key identifier: ED:31:6B:40:0E:00:95:1B:87:6A:9D:92:11:BD:DF:FF:2E:87:C6:B4
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 0198D5BC2B03DD7D381C425CC2E34E6EF3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0BA2
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: gp2mRXoYdYqyZJtpArNs1rim42xfFH8WntwKB6IkNhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2b:03:dd:7d:38:1c:42:5c:c2:e3:4e:6e:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=ed316b400e00951b876a9d9211bddfff2e87c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:7c:ca:d5:83:bf:e6:df:40:76:6f:43:47:
93:8e:52:71:de:c1:aa:30:02:a7:16:d8:f3:c1:9c:
a3:a3:12:bf:a1:05:d8:4c:76:4a:d2:4e:85:8b:7d:
b6:5d:bc:c5:b6:87:24:3b:71:da:45:05:39:e4:90:
8c:77:60:12:07:47:82:3f:64:d3:18:e5:c0:90:6f:
42:b6:75:78:a3:43:34:be:e7:8b:10:94:3a:32:dc:
70:f5:f8:4c:42:50:df:cd:51:65:a2:eb:14:f2:9f:
f3:81:94:95:44:5c:0a:33:29:af:cd:00:ca:5a:31:
87:a1:1f:d2:17:c2:a6:4c:85:4e:e3:85:c3:81:2e:
d7:72:ee:0d:13:6c:48:ad:08:9a:2a:3f:b7:3f:9f:
d5:97:83:c1:ee:cf:51:5d:db:b4:c6:f0:61:3c:d0:
43:19:1f:a5:4b:90:82:ae:2a:9c:23:bb:d0:93:a7:
a7:62:60:f0:5b:d5:dd:c8:a3:b3:d0:2e:58:bd:3c:
cf:db:ea:f2:3e:90:ef:fc:95:25:4e:f5:0e:90:cf:
75:58:2a:fb:49:2c:17:cf:5b:3c:34:38:94:c0:83:
86:c2:d0:5c:78:0c:01:97:26:85:67:18:55:2b:df:
1f:1f:87:65:1d:58:52:6e:e3:f8:8e:73:9e:39:ab:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:6B:40:0E:00:95:1B:87:6A:9D:92:11:BD:DF:FF:2E:87:C6:B4
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d0:e7:4b:a9:02:92:4f:d8:dc:8f:20:6d:d8:89:1b:30:a3:
1c:c5:db:f5:30:84:d8:34:2a:d4:62:5d:c9:ee:bd:a5:56:6f:
f0:36:0c:67:39:1d:6e:16:d6:af:d7:00:5b:07:e7:20:b9:24:
d1:2c:cb:38:15:c1:bb:14:db:67:40:51:30:c0:e5:c8:6f:1f:
33:2e:ee:fa:49:7a:ea:d0:a0:de:9d:d5:70:4d:ea:66:81:c2:
67:2c:e0:c1:57:3b:96:05:ff:dd:85:67:c2:b7:91:34:9f:43:
b6:b0:c8:c2:1c:e5:5f:e9:fd:46:6d:1b:a2:38:3d:20:40:5b:
83:ca:46:08:ff:a2:51:47:d4:36:0e:6a:1e:0a:a6:d6:72:57:
12:52:94:ad:12:52:0a:8b:21:df:5d:48:05:a5:cb:e7:ee:71:
f5:19:d3:d4:69:8b:8a:cb:67:77:14:3b:18:84:37:d7:76:92:
56:d8:c2:0e:4c:61:a6:45:ca:cd:2f:41:3e:58:83:ed:13:b8:
5c:56:79:cc:27:d7:4c:bb:09:f0:07:ed:e8:d5:12:ec:ff:18:
58:3e:60:b2:9d:8d:93:c9:38:f0:34:fd:7c:5c:ab:b5:ce:a3:
fe:08:6e:7d:08:af:30:30:40:bf:d3:a3:4c:56:ff:72:37:0a:
fe:ea:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:49 2025 by rpki-client