Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: PJ3EMn+vRxZO9uFqt9Eyg6lgfGnlkH/In8GdHrgcTso=
Subject key identifier: 4A:9D:B3:6C:C5:7A:57:77:41:87:74:66:EF:D6:88:97:C7:6D:3E:25
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0198D660F2FCCAD8724FF8E42699BA76E3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: 8yAgvEVusjLWmf38vHYLwiXICj/oDt9vDhO41Nd0H1s=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f2:fc:ca:d8:72:4f:f8:e4:26:99:ba:76:e3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=4a9db36cc57a577741877466efd68897c76d3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:44:c2:cc:a7:b6:9c:e1:f6:21:bd:4c:ab:
a0:ca:79:b1:68:b4:1a:e4:57:f4:a9:45:1d:01:c6:
ce:eb:89:95:47:c0:7d:8d:95:ae:89:db:3f:82:e1:
9d:b1:03:a5:0c:97:49:9b:94:0a:14:37:e7:19:c2:
2f:d9:40:a1:b3:64:23:09:ea:ff:9b:0a:be:72:c4:
88:c0:02:01:55:24:68:4a:bf:4c:c8:02:40:5f:cc:
57:81:03:87:b6:24:06:d4:83:e5:31:13:b3:45:3f:
c0:87:d8:7a:aa:bd:6c:1c:61:4f:a9:26:f9:5d:f1:
57:ed:38:f4:e5:a7:16:68:35:7e:3e:1d:ee:7f:84:
34:d4:63:e3:96:a8:30:e0:24:23:57:e0:43:a4:7d:
53:e9:53:69:e1:d2:b1:5f:cc:87:06:df:b3:e6:af:
37:b3:c6:3a:fe:df:8e:0a:24:b8:40:6e:81:9e:d3:
eb:a0:5b:ed:c9:ae:07:c7:2e:0d:1c:0c:3c:65:13:
4f:c9:34:bc:a3:8d:b9:04:58:e2:32:d9:30:35:5d:
fb:5a:93:80:9b:f8:10:34:e8:0d:96:12:fd:ad:7a:
81:ff:5e:c9:43:03:a3:ba:05:01:5c:40:95:5b:aa:
ad:3c:95:d1:b9:1b:e3:54:5d:15:85:76:d1:f8:ec:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:B3:6C:C5:7A:57:77:41:87:74:66:EF:D6:88:97:C7:6D:3E:25
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:3a:c4:ca:24:8a:7f:3b:f2:14:eb:00:91:87:29:c5:59:
b2:53:f7:ba:bd:2f:6b:ee:56:95:d3:0a:a5:50:d5:e1:15:ed:
15:a8:16:62:62:a8:0e:4b:3d:39:36:85:da:99:0f:8f:50:6e:
da:dc:2e:03:bf:3d:c2:f3:4b:be:ad:80:09:cf:1f:d5:54:98:
95:19:5f:91:2f:ad:e3:57:c1:4f:72:ba:5e:56:31:59:51:61:
25:6e:e1:f8:7f:40:27:d2:09:40:fa:bc:d9:c9:d0:92:56:c0:
44:37:be:66:f9:7a:a5:f9:33:a0:28:3d:fd:18:67:f6:b2:75:
9b:84:f4:9a:0b:ce:0a:16:c9:99:ce:92:fc:5d:57:01:2c:41:
46:09:79:e8:93:19:47:05:8e:0b:b8:86:cb:a8:55:be:18:43:
d3:d4:6c:37:40:f0:bb:86:b3:6d:c7:13:48:34:93:bd:a2:38:
ef:11:4b:97:e2:3d:47:b6:44:86:92:78:29:8d:ea:a2:52:66:
58:1c:95:e7:8a:f6:af:85:7a:7b:a3:d9:b5:e5:16:5c:8d:ef:
c4:7d:a5:32:af:c1:87:46:7c:09:89:91:39:c5:2a:a1:64:ba:
66:b1:b2:1b:9d:90:c8:54:70:5f:68:bf:49:f5:c7:c9:09:e9:
4c:79:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:28 2025 by rpki-client