Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: j3923lxd/rIlWLFbm6JoDuZHbYXBh7lXhIi0uVfayoA=
Subject key identifier: 2D:17:65:98:13:3C:EF:CE:3C:B7:4E:73:55:31:8C:96:FE:E1:86:2A
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 0198D660A3EE2CAA802CA0FAB3CC419D57BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: E9
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: F5frp2p4sedPRa+h1Ad+l9IIr/TheuDIx15bjO+StM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a3:ee:2c:aa:80:2c:a0:fa:b3:cc:41:9d:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=2d176598133cefce3cb74e7355318c96fee1862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:48:bf:42:a6:d5:fe:83:81:36:01:de:9e:
cc:ff:b8:ab:36:5c:ba:79:09:34:ad:26:e5:c4:e7:
de:7e:28:85:d0:f3:e8:9d:d0:cb:49:4c:a4:51:3d:
9d:ed:5b:7a:6a:09:52:df:9b:71:54:31:61:08:0b:
90:8c:d4:88:2e:fb:7c:a7:8e:01:b7:fe:c1:aa:2b:
83:b2:da:be:83:f5:57:d7:9f:f0:b4:64:be:37:3c:
0a:10:a9:24:00:52:70:8b:42:1a:c4:dc:82:c5:df:
b4:5d:a3:df:09:4c:57:2f:af:a4:fb:ac:4a:17:b9:
c5:3e:9c:4c:67:81:6f:bb:f4:3c:78:b7:2e:b1:23:
b3:e9:df:91:91:83:61:0f:aa:dd:50:ef:cd:07:d3:
9b:e9:e0:1e:98:67:b6:55:a8:f5:04:19:18:aa:cd:
66:ac:e7:3e:14:fb:45:b0:07:d0:4a:0a:3d:d1:77:
3f:80:5a:5e:43:24:17:a0:3b:04:ed:70:01:d7:7f:
10:e1:ee:dd:a3:30:dd:e6:60:91:ea:a4:79:48:c8:
a8:f7:85:dc:e9:90:43:89:6f:d3:8a:56:bc:91:ed:
19:f4:8f:d6:e4:5b:a6:a2:73:a3:8e:94:8c:d4:16:
b7:13:ef:27:26:c3:a0:96:0f:a5:f2:d2:b3:70:a0:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:17:65:98:13:3C:EF:CE:3C:B7:4E:73:55:31:8C:96:FE:E1:86:2A
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:21:36:dc:40:c9:1f:bd:84:7b:4b:21:a4:da:32:35:9a:
c1:9e:70:91:d7:3b:42:39:6f:7a:85:30:ae:87:ee:9a:d6:ae:
20:bb:fc:88:1e:0e:75:9f:71:a3:20:05:3b:c4:c0:34:64:65:
15:1d:85:8a:5f:8c:91:b5:e7:e7:f4:be:3e:b0:d6:5f:e9:71:
1d:d6:3c:7a:36:02:1a:56:dd:69:21:98:00:97:45:be:86:e6:
4c:15:dd:7a:36:d7:2f:e9:53:ff:f7:33:cb:ee:70:d5:24:98:
0c:33:4c:23:63:95:3c:d9:20:5b:e1:30:86:14:75:50:c7:3d:
70:10:f9:f3:80:a2:c3:be:fe:58:29:e9:d7:20:79:b7:76:2e:
5f:a4:4e:76:f7:ef:a1:87:40:9f:29:e7:11:d2:bb:c5:fd:29:
22:60:06:2f:86:67:81:a5:14:6c:77:f2:e6:49:2d:55:7a:fa:
44:04:2e:0f:b7:b9:6f:0f:65:6f:cf:2d:01:55:35:c8:bc:61:
33:d8:37:bd:a3:2b:0c:cc:3b:fa:7c:90:09:2e:53:8b:9c:76:
6b:6d:03:7f:fa:90:91:2b:ea:07:51:0d:45:82:c4:bd:bb:de:
48:57:2d:7a:c8:af:6d:cb:cd:ae:25:67:49:06:03:36:5b:0f:
f5:82:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:32 2025 by rpki-client