Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: 9Tf+SelLy128Y405fcvORC8yF9Ug342XGT0b/AHjZjg=
Subject key identifier: A6:6D:C4:25:19:CC:B4:B7:DC:AD:F2:90:6C:4E:39:E9:0C:90:3E:00
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0198D698668541D546F5D847C6FC44487132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 05EC
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: ZhZcRI9ugVGkNqA5K+Et2MRlRZ0Yu4dhQfP1TVUg49U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:66:85:41:d5:46:f5:d8:47:c6:fc:44:48:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=a66dc42519ccb4b7dcadf2906c4e39e90c903e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:a0:0e:c7:f5:88:28:db:b2:12:49:26:c4:
3c:15:4a:28:6e:69:12:4f:5b:69:7b:dd:cc:0a:cb:
62:97:d9:68:0d:6f:d9:52:0b:ea:e5:1c:72:42:0b:
b3:bd:16:11:3f:df:a2:c0:3e:8e:a7:90:5e:de:4c:
d6:5b:1f:7b:24:3e:55:49:a6:7e:fc:2a:91:4c:d5:
62:3d:2c:a3:e2:61:3a:aa:a0:9e:d5:61:6b:48:43:
d1:6c:22:90:e6:02:64:30:6a:52:ce:ae:3a:85:f2:
ad:bc:57:10:fe:36:b1:5d:c3:e3:bb:5f:8a:82:58:
a5:b6:4f:08:f4:1f:8d:4c:8c:a6:aa:78:17:9b:af:
2d:c9:8f:f6:67:94:8e:83:96:67:45:9e:dc:01:b1:
99:9e:5e:20:c1:e2:58:e9:5b:df:a3:d2:e6:0f:c8:
05:d3:ea:33:e2:12:72:0b:21:d2:dd:24:26:04:09:
69:8e:36:65:0c:78:02:45:40:e1:e7:71:6d:d1:48:
a5:9c:7b:1c:87:f2:e6:c5:06:6c:53:41:71:ba:d4:
68:b5:aa:cd:83:05:be:68:a6:6f:f2:fb:ab:12:85:
8a:f2:f4:00:cc:87:54:7d:8b:28:9e:ac:68:6c:c4:
9b:e2:f3:ce:bf:24:ce:6d:26:bd:db:61:63:35:5b:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6D:C4:25:19:CC:B4:B7:DC:AD:F2:90:6C:4E:39:E9:0C:90:3E:00
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b6:cc:16:d4:be:62:73:60:00:f0:8e:b1:c5:8c:73:01:e7:
d1:0f:3c:14:8c:2a:aa:25:d0:11:93:d8:5f:97:cf:78:71:3d:
6b:cb:38:06:83:d0:10:77:c2:0e:95:9a:e8:7b:fb:5c:be:99:
10:e9:8c:58:82:08:89:07:8f:a7:07:75:81:a4:3a:48:db:44:
c1:1d:cb:97:28:dc:35:63:49:80:ed:53:ac:b4:e5:05:8d:b5:
26:b5:f8:96:39:88:02:2a:10:57:16:13:72:4a:4e:21:88:6c:
ef:c2:aa:1b:c2:04:92:32:03:be:ff:8e:22:97:ad:3b:77:de:
18:c8:ee:83:01:b4:4b:01:5f:3c:35:98:29:48:bb:58:45:66:
34:43:5e:cd:93:bd:0d:84:ab:ce:55:3f:48:32:ba:75:a4:7b:
36:2a:af:9c:b2:15:31:e5:55:26:e4:96:fe:07:d8:09:91:f3:
0f:95:a7:1f:3d:99:d9:39:37:aa:f9:16:6e:6f:57:99:cf:ef:
fa:54:4e:67:99:13:ff:29:85:fc:cb:12:6b:4c:7b:57:7c:a5:
b4:89:1b:ac:5f:5c:a0:ed:d7:c6:53:01:c2:3c:f0:21:e2:a2:
e2:45:4d:a1:92:ff:32:9d:25:ca:0c:90:cf:8b:71:eb:34:31:
fd:ba:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:45 2025 by rpki-client