Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: 8duv1bQ+SRW78Y17pvL8usWa6WTrdmId9wkpqm4VQ5k=
Subject key identifier: 5B:3C:EA:5A:5C:80:D4:4A:F2:DE:A4:DC:4D:C7:B5:F9:84:4A:1C:EE
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0198D9999A8398067717319813BADE9FADEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 0560
Signing time: Sun 24 Aug 2025 01:02:59 +0000
Manifest this update: Sun 24 Aug 2025 01:02:59 +0000
Manifest next update: Mon 25 Aug 2025 01:02:59 +0000
Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: 2jH0MCSv9X3LhrSdii+wjzsi7jJyAo2EE30CXEy1Rhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:9a:83:98:06:77:17:31:98:13:ba:de:9f:ad:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Aug 24 01:02:59 2025 GMT
Not After : Aug 25 01:02:59 2025 GMT
Subject: CN=5b3cea5a5c80d44af2dea4dc4dc7b5f9844a1cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:62:aa:40:a5:09:89:48:b9:09:4c:83:33:
00:95:47:a3:db:53:65:18:b9:33:a3:78:52:06:31:
f2:2f:6a:45:31:e4:5d:3c:14:72:cf:e3:e8:c1:70:
58:3c:1d:a6:af:52:3a:34:64:d3:df:95:13:c5:60:
a2:2e:86:98:9d:a6:e7:d2:f6:a8:2e:5a:12:a2:29:
6a:da:7c:44:b5:80:0b:3c:a8:09:11:ee:fe:6a:b7:
f8:49:39:98:39:98:49:a5:45:75:4b:55:6c:f9:32:
3a:d5:fa:48:16:03:dc:5b:a5:95:44:27:e5:19:1b:
cd:21:5f:4e:11:3f:e9:a3:97:ab:ab:ad:bf:ec:e7:
93:80:c4:8c:6d:71:9a:e9:52:c3:13:c1:25:ee:27:
75:94:2f:37:26:7e:bd:8f:58:23:22:71:26:66:49:
7d:19:db:10:d1:6f:62:7b:8e:d2:85:f7:0c:ca:5e:
6c:4b:3c:57:8b:70:fc:ba:1d:79:cf:62:6d:3c:2c:
d3:db:26:7b:e7:ec:b1:3d:6a:33:05:32:ae:2b:9e:
cd:70:63:19:43:f0:40:7a:28:82:89:e0:74:0c:d7:
b9:65:82:84:ab:1b:e2:42:5d:83:a9:58:a5:e9:c4:
a2:56:5c:82:12:d5:17:06:34:16:52:b5:70:80:3d:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:EA:5A:5C:80:D4:4A:F2:DE:A4:DC:4D:C7:B5:F9:84:4A:1C:EE
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:71:3a:70:2c:7b:f3:ae:49:89:23:ee:36:78:ce:5b:0a:9b:
d4:7a:dd:96:71:4c:61:80:28:a8:d7:a5:3a:63:47:7e:63:ca:
b4:57:8f:0a:00:95:64:31:5e:9d:7a:51:1d:fa:23:55:c6:c1:
8c:48:f3:05:ee:e3:07:9c:47:78:a9:f6:8a:27:57:62:a7:14:
0c:35:14:11:d8:be:72:c7:b8:fc:b9:ac:36:95:dc:fd:c8:e3:
be:13:d3:48:9f:55:e3:9d:e6:1e:9e:64:ab:03:ec:d0:6b:3a:
2d:b2:95:3a:5c:d6:32:57:62:5d:b7:57:b1:d7:94:28:5d:0e:
f2:99:ba:36:d1:7e:09:5a:7f:54:e6:60:96:58:c7:97:a0:cc:
45:5e:3d:9f:8a:73:e8:29:72:1d:e5:4e:6d:01:15:3a:58:b5:
f9:2b:86:39:20:1c:7a:fa:97:33:f5:ae:bc:60:94:74:9a:91:
a3:58:34:b7:6e:09:02:a3:dd:2c:d3:0b:25:15:c1:80:5d:b7:
59:cf:b0:7a:4d:66:d4:3c:86:8f:d2:90:af:92:a4:81:b0:2e:
c4:0e:d8:99:fe:2b:33:0f:db:59:02:da:ff:b1:fd:92:89:d2:
1b:fa:b9:e9:2d:9e:7b:ec:d3:c3:f8:07:bb:70:31:7f:0d:78:
a3:34:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:58 2025 by rpki-client