Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: m2OgAwTZJeTWJ1eosvYeQba3aFA8vQHeHThnUDzemyU=
Subject key identifier: B0:B4:EA:6D:18:BE:E8:1B:24:83:C8:DE:11:68:95:B5:21:84:00:DF
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 0198D5F16E7E148384202882F2B5D1F2E64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 1380
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: UoerdTmlPE14I8CjtL83Bk7j6a/XspX5k6fF2BwksbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6e:7e:14:83:84:20:28:82:f2:b5:d1:f2:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=b0b4ea6d18bee81b2483c8de116895b5218400df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:f5:8f:10:78:60:4b:db:76:61:60:5a:4f:
68:9b:68:1b:c8:5b:6c:f2:b1:8a:83:78:1e:0b:bd:
68:56:f1:b8:f7:22:96:c7:bd:54:70:9e:3b:e1:60:
a9:c2:3e:19:7a:ae:3c:c0:c3:67:f5:ad:ad:fd:54:
05:28:d9:4c:96:5e:40:0b:25:fd:06:cc:90:2f:10:
68:c0:22:96:d1:0f:21:91:6c:84:76:0c:96:72:f4:
cf:16:41:e0:7d:1d:6e:83:69:3b:2b:5c:c7:68:6d:
b7:8b:a0:f7:db:e0:cd:1f:61:d8:e8:da:99:dd:fb:
d5:37:37:ef:10:1e:ca:b8:6c:0c:d2:12:36:e8:a7:
e8:cd:46:f4:cb:af:95:61:38:94:fc:98:f3:51:db:
ce:04:93:c9:01:94:f6:4a:c5:c3:ee:4b:c5:20:92:
2b:98:b2:2b:ee:de:c0:9a:93:e7:da:22:e3:b5:42:
7d:e4:84:29:80:7b:5d:ee:43:78:a7:96:f0:df:e8:
e7:01:0f:10:ad:91:2d:07:0d:d5:57:c6:d0:05:05:
1e:3f:1c:56:ca:d1:d5:86:6c:ab:2c:a7:44:b3:0c:
82:93:e8:2b:fc:24:e3:d7:1d:ca:c4:b6:30:85:a4:
b7:6d:60:ba:d0:08:14:64:e7:67:b3:35:41:e5:b8:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:EA:6D:18:BE:E8:1B:24:83:C8:DE:11:68:95:B5:21:84:00:DF
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7e:af:11:44:20:45:f6:53:53:4f:1b:ef:4b:65:56:1a:7b:
dc:6b:7a:b8:60:a5:ad:8d:93:51:78:53:bb:54:62:31:ab:89:
fe:60:a8:1a:a2:12:39:a1:9c:13:56:8f:94:c8:95:ab:07:a3:
f6:9a:d5:b7:62:34:bb:e2:15:b4:b0:3b:01:14:8c:96:2f:40:
ac:fb:63:05:02:77:48:1d:61:ce:86:68:e6:7d:75:d3:27:96:
80:98:f9:4b:cd:57:51:8d:1b:95:66:65:61:c3:df:74:43:98:
d0:8a:5b:cf:42:af:10:e1:47:54:a9:d8:0d:57:63:ea:c2:16:
84:89:00:a0:4b:95:59:35:dd:11:f0:20:f1:d9:f5:ce:00:df:
a3:2c:5f:77:0c:cb:f3:51:c7:f5:71:ef:ec:90:4c:32:79:ce:
95:ed:8f:b2:08:25:07:f5:54:50:e2:02:1e:79:8c:00:6e:ce:
e3:1e:8f:64:25:77:d0:da:88:48:ef:c0:20:e6:0a:95:cd:23:
71:4f:97:7c:39:4a:44:81:b1:90:a3:b1:48:e6:ec:17:7d:cf:
6b:ff:e3:13:ab:6b:17:ae:1a:db:b7:f1:42:43:b0:bd:85:53:
42:b7:4f:21:b5:e7:8d:4a:76:68:08:f9:87:cf:5b:44:88:81:
dc:97:b1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:27 2025 by rpki-client