Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: 51Pod8cNaTRlD4qizxjvhQLUXaf4Q3hdVe6+euHl8Vs=
Subject key identifier: 23:C4:45:67:FA:7C:22:D0:87:FB:97:CF:E9:B2:22:2F:8F:2A:41:27
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0197B82141CE8FDF4C02523F2A6F933D462D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 131E
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: w/v+Do0Ka72L8YdMVQ6Cv+7WHij052ThiNnuZ9EpoiU=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:41:ce:8f:df:4c:02:52:3f:2a:6f:93:3d:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=23c44567fa7c22d087fb97cfe9b2222f8f2a4127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:2d:04:0d:b0:1f:38:cd:8d:f1:ed:71:c1:
b7:5b:46:50:cd:b1:68:cf:50:93:c8:7f:cf:b3:7d:
59:f7:57:45:53:21:ba:f5:a4:06:2c:da:d9:96:3d:
a2:12:cb:01:88:b3:cc:51:8a:08:55:4e:cd:01:9f:
c1:c1:84:85:74:f4:f2:fd:76:b3:b5:d6:97:03:fa:
42:59:73:b8:95:00:6a:24:1f:d7:01:bc:1e:17:d1:
64:48:6b:37:2f:51:90:e6:fc:ba:43:c5:88:81:2f:
ab:61:fa:18:b0:0a:42:02:17:de:0e:ab:10:3d:00:
f1:1a:8d:3f:79:28:3e:cd:d3:46:05:7f:14:43:eb:
65:82:f6:8a:77:c9:28:10:66:b8:d6:38:47:7f:1f:
e5:99:1f:a4:48:09:44:12:1a:33:92:44:ae:90:8b:
76:29:bd:13:1e:8a:e3:52:0c:c6:0a:c6:d2:23:b2:
68:44:2e:c8:d5:2f:d2:c4:f0:3c:3e:21:ba:fd:fa:
4b:c7:74:72:06:81:32:c6:85:ee:ed:22:71:5d:09:
6f:fd:39:8a:65:ed:69:31:25:fd:8b:73:64:7b:52:
92:c8:b3:37:5c:99:4c:11:e4:70:c8:21:98:c9:97:
14:4b:b4:8f:e5:6b:b2:f2:26:78:e9:49:a2:2a:a2:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:45:67:FA:7C:22:D0:87:FB:97:CF:E9:B2:22:2F:8F:2A:41:27
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bb:80:8a:69:de:34:09:ce:d0:40:48:fe:0e:0b:1d:db:21:
53:ad:b1:b4:1c:83:d6:e3:23:b4:44:76:43:f9:6e:64:96:14:
be:cf:1f:a6:f0:ac:52:cc:13:df:8c:83:24:70:cd:ed:c9:e2:
63:e2:af:b9:fa:65:d0:40:6b:42:ed:9d:50:7e:ab:71:14:2b:
3f:86:d0:10:ca:63:71:d8:c8:10:07:38:34:34:e2:c8:5c:2e:
4b:90:12:02:3d:bf:cc:a1:6d:85:1a:8e:40:4b:97:0d:d1:76:
79:0d:c5:59:3c:c7:8f:50:55:b1:6a:bd:b7:f9:58:87:9b:ce:
19:2b:90:f6:25:0a:39:d3:0e:7c:3a:85:e2:e2:18:0c:b1:ad:
03:55:ce:ea:cc:fb:1a:49:31:82:95:33:08:49:43:92:93:4a:
81:e0:3a:10:c4:83:30:a0:f5:c3:f8:b3:a7:4d:89:32:67:ad:
d8:19:e6:10:53:ab:16:d4:d7:91:4c:6c:ef:1f:e4:a3:a5:ba:
c6:e2:f1:54:7d:cc:2b:90:df:4e:75:94:c1:92:ed:7f:6f:b0:
55:1b:39:77:8d:7e:9c:56:ad:ac:0c:1a:df:bf:02:b8:e6:b7:
81:55:af:4f:aa:28:2f:03:a3:0d:5d:12:15:5e:d9:5b:fa:73:
a0:d3:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:36 2025 by rpki-client