Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: cFmlsZ7PFxfnDf2psThsUtgqCGBhTMjDKNkPWsS6dUA=
Subject key identifier: 03:47:CE:70:96:FF:6F:62:9D:E0:28:A8:CD:76:CC:78:EC:77:A9:8C
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 0199FC218DF48FD2FEB37E67327B7EA4BCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0BAC
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: ETVPLHc_dvqJDflGIPJgHzJaWt8.roa (hash: Jimm5bhH1qmUZnAAKaN20vij/bbKy4j6GEesqJVn7gk=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: Tsuz2O0VUjHFqd5jIrQVZ8H7TMNo0GC9D6MK4q7bY74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8d:f4:8f:d2:fe:b3:7e:67:32:7b:7e:a4:bc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=0347ce7096ff6f629de028a8cd76cc78ec77a98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:89:20:52:dc:dd:b6:52:1a:33:89:e3:c1:
f9:b5:27:b0:ed:49:3a:72:fc:e8:df:27:3e:21:26:
d1:c3:e4:30:60:e4:d3:7c:ac:6e:a7:e4:c3:a9:55:
ef:91:53:61:de:b1:65:17:a5:8d:c7:c6:ab:10:be:
20:bb:3a:92:8d:c8:90:fa:9f:14:3d:72:f5:ec:a6:
0a:52:62:f1:29:53:cf:5d:9e:c2:28:99:72:a9:ac:
57:7b:18:a9:64:a2:a6:17:ea:f2:74:13:3d:42:24:
11:b2:6a:15:58:57:5e:0c:01:95:a5:21:f9:09:44:
02:90:de:7d:f7:87:15:fb:72:72:6f:83:c2:36:1c:
e3:e7:37:3a:cf:e3:2d:a3:ff:32:22:f7:58:c1:36:
35:17:93:07:93:9d:15:45:14:2e:6e:aa:78:bd:cc:
65:ea:92:8f:8c:d8:e8:ee:70:a5:86:cc:08:26:da:
29:77:73:ab:29:e5:1c:58:c1:c4:9b:2a:fb:95:7e:
e6:64:6f:7c:f5:64:b7:64:cb:8b:1d:c0:97:05:44:
aa:7d:66:ab:bc:e2:1f:f0:9f:3b:13:f6:18:f2:03:
4c:c8:5b:bc:0b:8c:58:d4:97:58:a1:2c:21:8c:ad:
a9:63:fb:c0:b4:ed:d8:11:ed:8c:b6:e2:40:45:54:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:CE:70:96:FF:6F:62:9D:E0:28:A8:CD:76:CC:78:EC:77:A9:8C
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:84:40:c1:23:43:e0:d6:cb:2c:59:5a:2a:ad:41:fc:82:
32:cc:be:c1:23:db:3f:a1:d8:50:ff:50:05:29:20:c0:cc:30:
18:0c:c5:3d:cc:0e:77:f8:38:d7:13:51:b7:b1:69:69:41:1a:
bb:f7:82:ef:76:ae:48:00:89:48:b5:2d:b1:b8:d8:59:2b:2e:
d0:71:d5:61:e0:78:ec:4f:77:19:3f:ee:5b:8b:6c:5e:5e:45:
9a:d9:c4:0b:9b:94:7f:63:70:fd:40:8d:19:aa:f4:93:31:d4:
1b:47:e2:67:57:74:0d:2c:db:d8:4d:60:7c:8d:51:cf:8f:3f:
fc:4d:e9:0c:bd:49:0a:af:16:83:cc:68:b2:74:d9:86:23:2a:
cf:55:03:28:6b:2c:79:8b:7c:79:87:70:7a:c1:a8:ba:1b:c2:
9e:44:7c:86:3e:e9:90:37:98:b2:e8:c6:2f:c2:89:52:80:37:
15:99:6c:75:4b:ad:65:10:86:52:5a:8d:0e:84:d1:9d:21:45:
f2:9d:a7:b6:27:1e:f3:58:f6:81:7c:cc:68:7d:01:05:05:5d:
05:08:59:93:2b:f5:4e:1d:9d:7e:34:78:3d:95:0d:a8:92:ef:
a4:6a:6d:2f:dc:22:99:3a:05:b3:0a:f8:04:8c:f5:da:f6:03:
6a:e8:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:00 2025 by rpki-client