Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: mLZIW3j7yHJiHWmJAEofSqgB59ENNM0vTDP6tRXFdpM=
Subject key identifier: A1:A4:5B:79:61:91:6B:A9:E3:1A:1B:0F:27:A1:B8:C0:E9:38:4D:AD
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 0198D6CD9EF504AF3D3317D3A3363949B819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0215
Signing time: Sat 23 Aug 2025 12:00:56 +0000
Manifest this update: Sat 23 Aug 2025 12:00:56 +0000
Manifest next update: Sun 24 Aug 2025 12:00:56 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: LBvXVGGhtPECZYVl1gLo6Q9frvmcvaKtFI4sGNdyLds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9e:f5:04:af:3d:33:17:d3:a3:36:39:49:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Aug 23 12:00:56 2025 GMT
Not After : Aug 24 12:00:56 2025 GMT
Subject: CN=a1a45b7961916ba9e31a1b0f27a1b8c0e9384dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:5d:35:4b:ed:54:ab:5a:d9:15:4f:40:f1:
2f:ce:b0:bf:1f:c5:26:a3:7a:f7:f3:8e:97:44:57:
dd:9a:f6:81:cd:e1:63:6d:6b:69:80:69:04:6f:8c:
d8:a5:2b:aa:6d:e9:6c:d7:a6:c0:bd:b7:61:63:b0:
fd:de:3d:7c:3e:d9:3c:e2:2a:5f:ca:54:88:6f:4d:
ad:a3:56:09:c7:89:b5:f3:62:59:a5:70:fe:29:8f:
b4:44:39:8e:31:8a:36:5e:49:16:d2:6f:47:02:8f:
a0:9f:af:34:1e:ba:41:5c:55:a6:ea:96:6b:6c:40:
1d:5b:81:c4:82:b9:80:0b:e7:9f:e6:9a:50:b0:c4:
ec:2f:05:f5:4f:ca:2e:ef:b7:75:c7:f2:a0:d8:88:
46:36:ef:0a:4a:b2:66:6d:55:2a:ca:19:e9:3a:51:
59:83:49:9c:ab:17:fb:0c:ba:08:8b:1c:05:54:6e:
50:56:98:7b:13:ec:eb:7c:da:8b:4f:ac:d1:67:18:
e2:12:cc:27:a8:a4:fe:37:7d:dc:87:c3:cf:69:67:
6d:bc:26:9b:37:0a:7b:1d:a8:b2:85:64:2d:2f:b3:
5d:ce:f0:19:41:fe:37:e7:94:ba:f7:93:ec:8c:f3:
ca:0d:0a:16:f1:f8:6c:07:53:c3:57:6b:8c:c0:43:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:5B:79:61:91:6B:A9:E3:1A:1B:0F:27:A1:B8:C0:E9:38:4D:AD
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5b:16:bc:4d:61:65:aa:ba:1f:30:91:03:c1:53:3d:a8:e0:
85:04:32:59:e2:eb:09:9d:2a:92:aa:a1:7a:d1:1d:cb:03:9f:
b1:a4:c4:fa:81:aa:e9:e8:44:ca:ea:1c:8c:b6:fb:47:f6:e1:
93:02:c7:e2:7b:fb:0d:4b:a5:d4:6c:d2:30:72:35:81:20:6a:
ef:ec:07:a1:9d:a9:3c:df:28:d2:6b:36:4e:62:59:d2:1b:18:
f2:0a:94:cf:01:27:2d:0e:b1:d2:aa:44:c6:9e:28:f9:88:f2:
da:d4:e0:29:cf:d6:b7:ab:96:94:6b:0d:78:f8:e1:f2:1c:a1:
89:18:cf:a1:cb:1f:85:2b:97:80:11:88:2d:df:06:e8:1a:ef:
e6:55:92:c9:72:8c:cf:f9:21:b3:be:7f:5d:d2:33:f3:15:7e:
57:30:ee:32:07:6c:7b:a4:f3:24:3c:61:b7:20:de:70:be:c4:
1b:21:07:53:23:47:49:1a:59:da:5f:19:bf:7b:9b:fe:4d:86:
47:00:e9:01:4a:b5:ca:e9:c3:2f:60:d4:3c:ba:4a:4a:9c:89:
ae:f0:cc:a8:95:a2:71:e6:e6:64:14:17:5d:a9:11:94:87:df:
dd:aa:61:64:d1:32:6c:b3:6c:83:f3:3c:66:34:b6:57:f5:68:
d7:c9:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:56 2025 by rpki-client