Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: GXfETiZB4FHOuWrgqWaP7jH9v8JYV3KPeRvZIMBZdB8=
Subject key identifier: 0B:BE:BE:D7:BD:BA:07:93:88:5C:4A:95:54:AB:71:76:24:3E:59:28
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 0199FFC8CFA40F3A9D515FA248ED914568C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0DD8
Signing time: Mon 20 Oct 2025 04:02:54 +0000
Manifest this update: Mon 20 Oct 2025 04:02:54 +0000
Manifest next update: Tue 21 Oct 2025 04:02:54 +0000
Files and hashes: 1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: 91xNHDrs9rnZteNSAWkkyLnc5KfCcZ992p8Jng6rDbM=)
2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:cf:a4:0f:3a:9d:51:5f:a2:48:ed:91:45:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Oct 20 04:02:54 2025 GMT
Not After : Oct 21 04:02:54 2025 GMT
Subject: CN=0bbebed7bdba0793885c4a9554ab7176243e5928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:8a:1a:a9:7f:8f:1e:f8:b9:28:9d:1a:b5:
e6:4d:5a:d9:2d:c8:57:59:22:7e:7a:ff:55:38:18:
7b:de:db:ea:6d:c2:73:97:b4:88:11:6a:3e:b8:38:
c4:89:d6:3b:fa:b5:73:7d:1b:8e:4b:85:4a:cd:81:
93:dc:a3:9e:10:32:bb:d3:e8:47:13:a6:a9:47:44:
cf:6a:0a:97:bc:85:81:f3:e2:1f:94:fd:ea:b4:aa:
50:91:29:aa:9b:a4:42:99:e9:16:24:c8:5e:6d:a2:
ef:ec:98:64:ca:93:55:19:59:84:33:cb:67:0b:43:
7d:de:31:a8:3f:0d:d3:74:b1:2f:e7:67:00:e5:b3:
3b:62:24:8e:d1:1f:8f:03:0c:b1:69:97:32:9e:a0:
56:82:67:80:9c:10:a6:7a:67:1c:9d:ee:2c:70:2d:
8c:65:bd:fe:6f:94:6f:a4:a0:42:13:5a:69:dd:c2:
ca:56:0a:3c:15:63:b1:3d:e7:1a:ab:8a:93:07:f6:
f5:26:69:c1:1c:fd:34:02:6c:fc:a8:4e:92:aa:6f:
8c:cf:3a:63:e4:7f:e0:ea:e0:95:c6:ca:23:5a:8f:
24:cd:82:62:b9:e7:d5:cb:c2:c9:da:f7:1a:c4:1e:
85:cc:21:9c:66:56:76:75:14:cc:90:51:76:01:4a:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:BE:D7:BD:BA:07:93:88:5C:4A:95:54:AB:71:76:24:3E:59:28
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:2d:1e:2f:5e:64:6d:27:23:65:bb:99:c8:53:51:89:48:
47:cc:79:c9:b9:fe:e1:eb:e3:f2:92:0b:0d:cd:b3:53:f2:d7:
47:c6:3e:c1:71:1a:49:67:e4:1e:2f:2a:15:5d:8d:3d:35:8d:
32:95:d8:6d:ae:0a:d1:f7:84:a5:5a:0b:2f:d2:fb:16:6e:c8:
5b:35:04:7d:5a:4e:f5:df:85:4b:8d:03:71:3b:52:a2:75:1d:
c5:77:fd:bf:a0:f5:b5:6b:6b:69:67:54:1d:a5:5e:d4:8a:9a:
64:21:f7:31:5b:f5:5d:f2:5c:2e:85:b2:e3:d7:9b:43:19:e5:
cf:52:40:10:0a:ad:dd:bf:f9:6f:f3:c5:53:f3:13:12:03:ba:
51:3f:b6:02:e8:95:f7:b6:1d:13:37:4b:0f:75:4f:f7:e3:ba:
a2:17:23:82:a9:e5:8f:ae:3b:8b:a3:9c:cd:a9:99:4b:ff:b9:
a3:2f:25:e4:83:28:e6:01:72:f4:a0:0b:be:a7:8a:64:09:ea:
83:6d:5c:54:97:01:17:26:3e:c8:c9:cd:ce:55:5c:ce:47:93:
8d:44:27:5a:17:fc:b6:0a:4f:a2:66:76:05:69:f7:4b:82:87:
d8:da:4e:fe:95:30:8d:fa:ab:eb:27:70:fd:75:7a:0e:15:e5:
0a:c8:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:19 2025 by rpki-client