Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: QdZh63b/G1lIx3KOkOMUztkL6ZjKXk6KACYllByf/zc=
Subject key identifier: 4E:5C:F6:FB:EB:B7:3C:25:76:07:DE:E8:BF:13:49:DE:E9:DE:93:E9
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 0197B70EFBB461D253255B6C1A737D0BA352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0180
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: 8uAfhAFyzc52cgI50DcCVZrwAGM+IGPmq8xKUbgGIsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:b4:61:d2:53:25:5b:6c:1a:73:7d:0b:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=4e5cf6fbebb73c257607dee8bf1349dee9de93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:3d:c9:6f:15:9d:1c:6c:9f:7f:c3:4c:c1:
13:8c:55:7e:88:22:77:f3:9c:f5:13:1e:74:1d:fc:
86:1c:be:f5:ea:05:64:75:72:4f:8c:d9:0a:75:f1:
69:92:49:1f:6b:a4:63:1a:86:07:56:8e:8d:66:2a:
8b:fb:ed:09:cd:d4:41:a8:ad:aa:8e:4a:f8:7e:20:
bc:97:09:e3:fd:6a:60:5e:dc:58:83:bb:82:63:e3:
4d:13:41:8c:b1:24:8d:b7:f9:fc:4e:37:fb:65:3b:
0f:81:43:38:0b:3e:13:ce:72:88:e2:4f:2a:5b:99:
a5:63:11:6e:db:e0:27:a0:64:50:f1:8a:de:2c:e9:
2b:bc:e8:94:58:74:7f:e5:89:43:cd:55:68:a5:b0:
ca:90:2e:6f:d1:30:fe:98:1a:89:d2:20:e4:47:65:
01:83:b6:b5:83:8b:0d:85:e5:c7:f9:9c:a0:f9:b2:
f2:e9:b3:9b:41:2c:5a:70:16:65:97:52:29:ec:d8:
3f:b6:88:8b:15:64:7f:04:78:b1:ca:bd:0b:9f:e9:
78:05:ed:4e:2b:54:21:d6:72:9e:d6:c4:f7:95:ea:
3c:cd:90:b6:32:65:f3:09:1b:44:25:a3:16:80:5e:
bc:37:3a:39:81:bb:9a:df:a4:1b:78:29:38:07:fd:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5C:F6:FB:EB:B7:3C:25:76:07:DE:E8:BF:13:49:DE:E9:DE:93:E9
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:0c:87:f4:35:3c:32:69:5b:5c:f8:cd:51:6b:e8:c3:18:
55:d1:a7:50:a8:bb:06:22:4d:d5:f3:0c:be:e1:3a:2f:09:9b:
40:d3:36:96:eb:d3:ae:24:b3:93:ac:18:8c:64:4d:72:79:c9:
27:d1:bf:95:d9:dd:d3:35:9f:bf:ef:a7:53:01:ba:9d:1a:ba:
18:84:9f:3d:ab:25:2f:19:88:80:3c:a8:97:6a:ba:9f:06:46:
83:21:f9:2b:57:2d:92:14:2e:b5:b7:f0:4a:4b:6c:e3:69:9d:
53:58:ea:1c:02:15:d7:a8:64:02:b0:09:b5:d7:f0:49:3c:a8:
d4:51:dd:66:fe:11:e3:39:50:fc:2c:6f:5f:f3:92:78:4e:17:
ff:65:d3:61:56:eb:b5:4d:df:4b:f6:6e:2a:2f:99:60:c7:7d:
f0:0d:79:da:3e:39:d5:0a:a9:4b:8a:7a:92:d4:1e:2d:86:33:
38:0d:1d:59:53:02:35:10:7d:79:74:fe:4a:af:32:98:85:6d:
1e:d4:4b:7f:37:77:20:52:f6:93:3d:11:61:dd:07:7e:df:ed:
bf:51:a4:73:a0:7d:36:99:34:40:0e:c9:ab:30:4d:35:16:17:
c3:b7:91:74:da:fc:42:00:0d:ba:0d:34:be:21:db:f5:33:37:
8e:14:fa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:51 2025 by rpki-client