Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: DC1CGcff/HgNPYLHr9BS0a2h1ifS5fV/XqjHMaaKBsI=
Subject key identifier: 3B:58:D8:65:8C:F8:48:10:58:8F:24:5A:5F:31:85:FC:E4:37:CF:CE
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 0198D5F1D3E5143A493B1E88D1EF5E10B366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: EFHgGXe3A96Z0G2d0vCLstdsgxyCDw3dpHAsChVfwvo=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d3:e5:14:3a:49:3b:1e:88:d1:ef:5e:10:b3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=3b58d8658cf84810588f245a5f3185fce437cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:06:90:db:ac:24:2b:49:a7:22:a8:a7:95:
2d:5f:f8:a7:17:f8:ea:be:05:c4:a7:e7:a1:7e:a7:
8d:ad:b0:4a:03:05:83:39:b2:57:96:76:be:ec:99:
0a:ec:8c:bc:62:87:b6:b8:a4:83:64:21:41:44:d5:
e0:2a:2b:3e:42:55:cb:02:95:ad:02:fd:63:dc:d5:
ad:e3:a7:8a:35:cd:10:5a:e4:68:7c:a7:10:93:96:
07:46:6a:b2:16:23:a3:21:17:3f:95:69:e8:ec:ba:
3f:0a:f1:16:82:ec:34:27:7f:f1:8b:d0:21:b3:20:
8a:81:a6:a5:c5:86:58:7a:80:eb:3f:06:8e:2f:3b:
9e:18:7f:f1:8f:c2:18:16:31:c0:6d:e8:08:18:0e:
f8:a9:dd:cd:1b:1b:f9:df:9b:e9:88:ea:d3:04:74:
81:73:30:3a:bb:06:85:82:20:35:bb:f3:fb:12:c1:
ff:99:dc:55:f9:87:49:0c:b0:ab:f8:5a:a3:e6:b9:
9a:50:29:14:2a:d9:ca:a8:75:df:f9:d6:f7:b7:55:
89:0e:31:f5:e5:d3:b1:e9:57:56:8f:68:df:e3:16:
8f:25:90:ae:fb:c9:ce:97:28:16:da:81:66:b7:8c:
3f:55:d2:58:69:7b:eb:a8:ac:e4:27:c7:ed:4d:5a:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:58:D8:65:8C:F8:48:10:58:8F:24:5A:5F:31:85:FC:E4:37:CF:CE
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:7f:c0:96:77:34:b1:83:02:5d:36:b7:4c:a0:23:ff:99:
71:3b:26:d6:51:27:e8:0a:00:e1:60:c4:77:72:94:89:a6:b9:
e5:a0:bd:16:51:98:19:7f:f0:36:8c:99:ab:65:7b:b5:fc:9a:
fb:76:8a:d0:ab:7a:fe:02:2e:1d:e2:0d:c6:f2:40:d1:c1:15:
4c:3e:0a:eb:da:6a:f4:28:1e:b5:c0:9c:7a:15:ea:27:7a:19:
d2:81:de:d0:be:d9:44:f1:eb:02:d8:63:2d:a6:08:c7:20:7f:
a3:46:87:1a:7c:54:30:d4:d7:6a:d9:85:9c:d4:f5:0c:8d:e8:
dd:90:3b:95:73:81:a3:f0:89:82:96:de:05:fe:7d:d5:7a:a6:
e2:90:6e:d5:bb:b9:90:e8:aa:3f:05:51:4f:d7:3a:01:50:77:
f2:0a:a2:db:2d:b4:d4:01:e2:c8:99:6e:6e:1d:e0:89:ce:4b:
ec:9e:4f:ff:55:58:15:c2:f6:8f:4d:76:80:14:7b:aa:db:8c:
1f:7e:ed:b5:0e:80:84:a6:a1:c3:81:33:6b:21:22:07:61:db:
ca:92:11:dd:95:ec:7b:e2:d3:33:da:a1:0f:d1:e2:18:b9:81:
18:99:44:2d:39:00:41:cc:8d:d3:70:fd:25:90:f0:f3:f9:e2:
50:6b:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:46 2025 by rpki-client