Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: KETfYJIa2Z+leGZMVieoJlqH3J3j4wBh39oC//Fmvc0=
Subject key identifier: 9B:F0:39:5D:D8:E4:84:72:8D:AC:58:34:3B:D3:F6:6A:9F:8C:EF:98
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 0198D54E497A92C5FA4DB6EC092D86A4B563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: BtSid5d2hX7cY5fLYUKAWnTVQSbPd2yiSrbGx2o9/HU=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:49:7a:92:c5:fa:4d:b6:ec:09:2d:86:a4:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=9bf0395dd8e484728dac58343bd3f66a9f8cef98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:81:ce:c5:01:86:79:5d:10:e3:d3:b7:c8:
7c:45:e1:bd:86:2e:7b:df:36:05:cf:61:8c:86:c9:
3f:a3:56:bd:34:8f:d2:f0:dc:15:b9:e6:d7:20:0c:
f5:7f:46:32:01:f8:05:31:77:80:62:8d:f0:bf:c4:
db:69:79:e4:30:32:f5:97:65:80:c4:12:a9:77:8f:
67:ca:fb:c0:70:dd:0b:3c:98:f5:20:93:bb:f1:fe:
d5:e2:87:b8:26:ca:4b:b8:f8:46:e0:2d:6b:28:34:
3b:f4:62:56:78:f3:ab:20:6c:71:4f:48:b4:cc:04:
46:b7:86:e6:5a:4e:91:ec:8d:15:a5:f9:dc:a0:0c:
42:db:a0:0a:5f:92:b7:78:b1:26:39:1e:09:05:d8:
a3:fd:fe:e7:79:fb:6c:e7:cd:fa:7c:57:1c:75:8a:
29:44:01:40:29:b7:91:f1:a5:7b:dd:d7:6a:4b:61:
24:c7:50:da:c8:bd:af:91:de:b4:61:f0:34:34:1f:
ac:f7:d0:5b:35:23:a0:6d:95:d9:43:53:67:17:fa:
19:5f:73:fc:6c:c0:a5:1c:6d:9b:de:2a:12:0c:a1:
50:0a:a5:4a:11:c2:a1:b0:87:dc:e6:6f:3f:bb:da:
10:c8:2d:cc:62:b8:4f:22:4e:07:b3:8e:9d:97:28:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:39:5D:D8:E4:84:72:8D:AC:58:34:3B:D3:F6:6A:9F:8C:EF:98
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ed:92:48:5f:4a:3f:6c:7b:84:82:62:e7:6b:e3:85:35:40:
11:dc:0c:aa:10:5f:60:e0:1d:83:d7:3f:65:6e:69:d8:03:a0:
e0:31:82:a5:b7:82:48:09:f1:3c:ba:43:9f:94:37:58:b5:fe:
2c:56:bc:ed:08:29:21:a7:7d:13:e9:ba:c4:bb:76:a0:2b:8f:
3b:77:94:85:48:a7:df:c6:83:53:da:e6:f3:a1:66:1e:bf:78:
2d:d5:da:8e:de:5a:fc:6e:14:55:5e:16:b8:00:c1:67:f5:52:
58:77:40:6c:98:ac:77:c6:1c:9a:c8:75:af:17:cf:0e:20:fd:
b3:8e:31:67:1c:ce:9a:30:8e:c5:1d:7f:9b:b6:1f:e5:ae:72:
99:fa:bc:8a:77:9e:c0:e5:60:14:cb:ab:1d:18:13:9b:58:b1:
83:44:37:e9:70:49:c5:32:f8:66:98:b3:5a:64:a5:22:d2:2f:
02:90:9d:5b:db:67:13:89:c3:2a:a3:0d:16:6a:88:cc:2c:ac:
25:5d:02:79:f8:20:9f:64:bd:80:4a:6c:c8:28:bd:e9:01:d3:
3b:f5:3d:50:0e:73:5f:55:dd:03:78:02:f9:21:df:20:d1:a0:
2e:84:0e:f4:c4:62:6e:1e:be:53:d9:33:74:f0:9b:31:51:2c:
1e:2d:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:50 2025 by rpki-client