Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: Blr9yQ/wl1HWZYlfJsNTaZA/8QotX374R5GYeGlh808=
Subject key identifier: 6B:95:AD:D0:5F:86:3A:73:7C:0D:7B:1F:75:EC:4F:C7:98:ED:4C:B0
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0198D515E6CD6B8CC4B873D78A9D5A47B1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 11F6
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: B1NNEXAa3A1/n8xAF+VXzPCatH7AEDYbci5oqD4yhjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e6:cd:6b:8c:c4:b8:73:d7:8a:9d:5a:47:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=6b95add05f863a737c0d7b1f75ec4fc798ed4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:29:80:c1:b2:69:d8:2e:b5:54:be:9d:42:
05:a7:17:e2:57:d5:12:40:23:b4:04:ba:64:36:39:
e5:a1:a2:95:a4:7d:69:c5:9d:ee:74:c1:ea:d6:27:
4a:98:ad:0b:5e:fa:66:17:23:73:be:da:11:7b:7d:
7b:34:d2:04:15:c3:e4:ca:b7:0c:28:0d:86:17:37:
bf:4e:00:57:3c:a0:d4:3d:c5:68:7b:73:c0:46:fe:
cc:66:5f:2c:5f:67:3d:bb:8f:0a:8b:30:8a:73:bb:
17:88:4b:55:6f:6e:94:ae:40:13:d1:a0:6e:e6:6a:
80:ed:fe:6e:5f:dc:72:9b:cb:92:b6:2e:3d:6e:91:
f6:4a:b4:73:fc:c9:c1:5c:4a:9d:f8:51:8c:87:21:
30:e3:3d:e5:15:e4:29:06:13:d8:13:5d:c7:af:c4:
d4:cc:36:dc:bc:aa:ae:34:80:c3:5a:9a:6e:f4:22:
a7:56:82:60:53:e9:12:ad:7f:a2:74:b0:48:36:47:
af:9a:af:05:3e:80:12:b3:65:26:22:10:38:87:8d:
cd:35:fb:67:20:2d:69:0c:35:c1:27:ff:a0:cc:34:
45:69:cc:da:1f:d4:1f:c0:88:d9:14:49:a7:8c:e3:
de:58:a7:dd:b4:c0:e9:1d:20:02:60:8e:40:8b:aa:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:AD:D0:5F:86:3A:73:7C:0D:7B:1F:75:EC:4F:C7:98:ED:4C:B0
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:c0:fc:8a:cb:5a:76:93:74:1f:0f:59:08:37:92:29:66:
d2:c5:05:a1:f3:0d:93:91:6c:2c:7e:61:3a:f9:60:f8:d9:a1:
8d:9a:99:a6:b4:0d:9e:21:9a:d6:fa:88:8e:ff:df:e1:7b:78:
cb:e0:c0:25:09:3c:f5:60:db:f7:f2:e8:07:50:6a:7f:ee:0b:
ef:45:14:ef:8c:27:a0:51:cf:3b:4c:db:54:aa:4c:ae:19:ac:
8f:bb:d1:43:4b:83:c1:f7:ed:97:a6:11:a5:08:b8:aa:bb:ce:
c8:7f:86:df:b1:7d:0c:bd:b9:f5:bc:7b:05:52:d7:1f:e4:d6:
a3:0a:2f:89:48:33:b3:93:61:bf:27:c0:fb:d5:e6:e3:2b:81:
de:ac:09:62:51:c3:f9:a4:5b:38:d1:56:0c:c3:5e:d5:34:ad:
b7:28:cc:28:66:32:3e:84:c6:f2:34:bb:11:c8:f7:94:61:6f:
85:a3:65:00:d1:80:bd:c6:5b:67:10:0c:92:e2:73:16:9b:42:
ad:be:30:7d:4b:57:a0:cb:fc:b1:9d:3f:7a:8e:8f:70:37:0a:
a9:81:b8:0b:b5:4e:07:f2:ee:ae:99:3c:c0:39:4c:78:ed:ed:
16:25:9c:a1:b2:59:21:6b:14:d7:ad:f4:e3:84:b7:fa:a9:54:
e2:57:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:51 2025 by rpki-client