Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: CaJdDwWzFHpbfZJMMz+ZfaFX6bgtdVc8kvhGUbUDddU=
Subject key identifier: D2:58:D7:0A:7F:2C:96:41:13:2B:40:34:64:BB:6B:3F:D0:7C:D3:01
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0198D54EA15A5B9E286ED2AB3DE9995D4FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 11D0
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: HWGZeylWUNPmwnUnAPjpJbWqMlsuRUxysY7U6TrAGLw=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a1:5a:5b:9e:28:6e:d2:ab:3d:e9:99:5d:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=d258d70a7f2c9641132b403464bb6b3fd07cd301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:16:c3:fd:1d:97:2e:ba:d6:e5:14:76:1e:
2c:37:7f:4b:22:9d:19:a3:a0:de:0e:5c:fd:0c:a6:
fd:3b:d5:aa:05:3e:d5:fc:1a:77:83:21:33:71:ea:
2c:a2:7e:e2:86:24:4d:a8:2f:ca:6e:11:39:26:30:
94:ab:5b:42:87:db:87:b7:43:1f:a0:2b:eb:50:68:
55:03:0e:99:57:d9:a6:a0:4d:74:5f:57:25:49:99:
11:a3:28:66:9d:63:d3:89:e2:5b:e5:5a:56:30:b3:
fe:b0:74:41:89:e1:f5:b0:cb:bf:64:14:4d:bb:15:
67:1c:a1:5c:a7:60:bd:cf:5a:dd:66:d8:b3:ac:80:
b5:e8:37:6c:10:58:1f:a9:30:db:91:82:b8:9f:4f:
8a:c1:01:30:0d:ae:21:0f:63:cd:59:08:e5:21:ae:
c0:ee:cf:80:99:4e:5e:7a:f5:2d:2f:6e:a2:59:15:
5a:aa:18:61:49:cb:8f:37:9e:76:6f:63:8c:f3:02:
2c:4e:d7:fe:c3:bf:7e:55:ad:c0:8e:db:48:28:55:
7e:09:39:cf:61:88:67:77:4a:ad:f3:d9:da:1e:9e:
d3:89:ae:b0:e2:21:bc:e0:e8:3c:22:d8:42:7f:f4:
52:4d:0c:be:69:62:39:d8:f7:88:02:cf:33:44:08:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:D7:0A:7F:2C:96:41:13:2B:40:34:64:BB:6B:3F:D0:7C:D3:01
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b8:3e:2e:18:9d:bc:cf:82:05:78:9e:c6:a1:43:af:ae:ef:
12:e5:29:95:ad:a9:5c:b3:1e:b0:04:47:c3:76:dd:ad:d2:63:
3d:50:49:e4:bb:ff:53:95:b8:13:1c:af:bc:bb:0a:15:c0:34:
1e:25:f4:35:1e:3e:91:07:d5:84:3a:1b:c6:05:d5:0a:ee:e8:
91:1f:0b:e4:15:74:e6:c0:aa:19:6e:1f:f5:7e:50:23:f4:b8:
18:f3:6c:58:64:3c:89:43:4b:1f:6a:66:1a:a3:44:88:c1:5a:
69:73:57:4a:60:bc:6b:db:90:1e:ae:a0:52:1c:ac:7c:8f:7d:
8a:33:33:c8:bb:2d:78:29:d4:81:83:e8:7a:c8:c5:50:5c:75:
ea:d6:75:43:21:48:49:b8:16:f6:ab:44:06:5d:ad:c5:3a:29:
a5:a0:bb:79:ee:b2:88:6f:4e:00:bf:47:7a:54:fc:f9:64:bd:
75:2d:aa:64:a3:d7:90:81:da:7c:37:ef:a6:48:aa:3b:94:7d:
0e:0b:5b:a4:fe:60:37:18:5b:38:17:06:75:b4:cb:11:5b:06:
c5:c3:d8:58:d1:b2:bc:32:9a:e2:13:d3:f5:10:8a:5f:1c:5b:
c2:49:68:ef:c0:56:91:d0:0c:0d:88:2f:43:54:81:b2:c7:36:
d7:be:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:55 2025 by rpki-client