Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: DBnRIIk1SXcKMYu9sAR/rXQMJ3RT8dLuC+CfQ2hT7M0=
Subject key identifier: E4:3F:E7:86:C9:E1:90:C7:04:9A:B2:7D:A6:97:30:DC:88:E6:D8:66
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0197B70F4D751CA1EDFEF5910653C80B674A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=)
2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: eH3j872sfHQBdTZGfqWzlkSUy9X3hiG9o/UsNU9NIlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4d:75:1c:a1:ed:fe:f5:91:06:53:c8:0b:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=e43fe786c9e190c7049ab27da69730dc88e6d866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:0f:18:a1:b2:7b:1b:63:5f:bf:85:d7:08:
92:ee:12:8f:1f:cb:b0:a4:a4:2f:c6:f1:ad:20:3e:
c7:12:a2:df:72:81:03:eb:44:76:ce:17:ce:46:20:
f6:45:ca:ce:7c:72:7b:4e:fa:45:0d:3a:63:8f:a8:
36:71:2e:8a:1b:24:d4:19:e4:74:17:35:04:e2:4f:
9b:87:2f:87:23:87:50:4e:db:e3:8d:88:3c:16:fa:
89:96:fd:68:4a:2e:17:4e:d6:0d:2a:dd:73:07:83:
cb:48:f8:77:da:2e:23:52:a0:ca:0e:d9:28:ca:30:
bc:d0:08:c8:9b:a1:58:aa:cb:76:eb:66:f6:92:c7:
21:86:78:6f:6f:8c:4a:34:ec:04:ad:69:86:4b:f7:
f4:a3:19:ab:65:68:ce:df:31:72:76:da:5c:6d:bd:
ae:a4:29:f8:f5:a9:0b:ba:30:93:ec:c4:7a:38:5d:
c4:a3:87:c7:6b:b8:c7:be:9a:3f:74:29:ef:7f:b0:
5f:5a:b2:d1:48:2c:a9:96:61:45:7d:e9:e3:66:a0:
95:de:20:d6:a6:ee:ba:9c:8c:78:1e:14:80:ed:b0:
98:31:76:14:8c:f5:aa:53:f8:cd:22:0b:80:34:1d:
78:80:3c:d7:ac:dc:e7:f5:2e:cb:cc:d6:40:07:03:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:E7:86:C9:E1:90:C7:04:9A:B2:7D:A6:97:30:DC:88:E6:D8:66
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0e:a2:6a:8c:06:2e:5c:5d:af:d1:a2:29:76:82:51:38:cc:
84:62:16:e3:20:04:b3:cf:f3:70:da:f8:d2:dd:0e:58:bf:ab:
69:5f:08:07:1e:04:c3:4b:f0:d3:2a:9d:6c:29:47:ca:8e:51:
e1:03:4b:76:40:47:34:e3:30:37:e4:7b:a4:95:f1:de:70:a7:
52:18:74:2d:b3:55:75:4f:9f:ba:5d:d6:54:4d:73:02:99:c0:
4c:b8:b7:50:f8:2d:04:30:de:cf:50:7e:78:8a:a9:4b:61:40:
f9:ea:d3:ef:2e:be:12:7f:00:6b:1b:52:4f:3f:37:ab:b7:b1:
d5:92:d0:03:32:49:b8:be:30:48:b3:07:1d:ed:08:20:e7:33:
2a:c2:a5:18:df:72:f8:6d:09:2c:eb:4b:34:5d:2a:03:6e:e5:
b3:8e:7a:2d:7e:90:0d:03:3f:7d:5a:aa:0c:b8:41:0d:ae:51:
29:e5:29:58:86:af:af:1d:ba:89:cb:27:0b:cf:23:a1:4a:87:
77:f0:27:07:23:45:58:5d:2e:71:99:ae:d0:c4:9f:cb:98:7a:
0b:04:4e:9f:c9:49:b0:0f:a3:f0:6c:f9:a5:3c:83:78:71:33:
86:69:54:21:58:a2:d8:e8:6f:44:da:2d:2c:c4:ab:d5:49:87:
13:35:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:27 2025 by rpki-client