Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: FA23lRBxFzQpn26nBdZg63zlTKEmP/+rYwFsa9akEWg=
Subject key identifier: 3F:9E:C9:57:DF:26:A7:BE:F5:A9:A9:C4:4D:72:04:3D:E8:35:76:AF
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 0199FCC69B872476603C62F65F57914F2B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: Gf24MMGJsdCdTTSwK5+Zs143IQsRcZOtNAmmEVILK88=)
2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:87:24:76:60:3c:62:f6:5f:57:91:4f:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=3f9ec957df26a7bef5a9a9c44d72043de83576af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:81:a6:b6:ef:70:6b:a7:44:38:a4:03:b2:
b9:31:8a:90:93:e9:97:cf:17:3b:8c:0d:6e:be:4f:
f3:e3:b1:be:1a:33:e6:61:f9:9c:5d:9e:ce:28:66:
69:15:b9:a1:c6:72:24:3a:9b:7e:e8:24:f8:04:98:
48:09:a5:31:de:d9:17:7b:95:dd:6e:c3:c1:c4:95:
a5:e8:19:54:26:65:cf:61:99:25:b7:b3:a4:34:eb:
a8:cb:f6:92:d1:f1:ec:42:d5:3b:57:f3:67:57:83:
70:64:6d:7c:25:68:52:71:bf:0c:d3:64:84:ec:6b:
29:c6:a2:66:3a:8e:6c:e4:bf:25:61:d2:71:a2:fe:
60:3a:b8:c8:d3:e4:4e:5e:34:50:cc:f2:75:9c:7b:
27:ca:a7:b0:eb:ac:64:82:87:43:41:b6:62:24:7f:
7c:1d:0d:79:f6:d7:81:05:35:c4:aa:03:26:59:8c:
1c:60:eb:c1:e0:a8:51:6e:6f:d5:ac:51:fe:36:8b:
bd:18:c7:87:0e:b5:e7:50:b7:66:08:51:1e:4a:34:
a9:4c:6f:64:2a:db:df:57:e4:c4:92:80:44:63:41:
05:ca:08:8e:80:60:5b:a6:3f:99:ea:39:93:31:c5:
5c:76:99:49:26:9c:ab:d4:26:c0:db:96:c7:a2:af:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:C9:57:DF:26:A7:BE:F5:A9:A9:C4:4D:72:04:3D:E8:35:76:AF
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:9a:35:e3:31:d0:98:b0:13:b8:d2:f2:1d:f7:c4:c8:74:
7a:e2:49:23:84:6b:e1:7d:32:ed:94:0d:98:45:b7:0e:96:cd:
85:98:cc:db:6d:45:2e:ea:c5:0f:39:97:5f:a9:70:76:c8:05:
83:ec:42:92:7b:2b:ef:12:38:64:75:71:e9:0c:88:00:cc:8d:
e4:5c:e6:f0:76:42:61:59:df:d3:45:36:fd:37:05:a1:6e:9f:
e4:74:03:84:e2:9c:30:b1:0d:3b:b1:b9:70:60:b4:76:bf:2c:
a4:39:00:df:79:61:3a:7b:91:0b:e9:7d:22:7f:ca:f5:e6:c4:
58:99:a3:be:f3:c0:48:5b:3f:7c:a9:45:ca:9d:f1:35:8c:a4:
a9:d5:72:2d:83:6c:9a:69:2a:10:50:cd:87:26:c2:21:e2:0f:
d5:c5:b8:f3:32:60:7e:ac:0f:91:4d:e8:0c:46:0a:dc:dd:44:
82:10:12:fe:e2:84:8b:81:58:af:69:79:90:54:06:80:bf:c7:
6d:4f:5d:ac:be:b9:4f:44:6f:ba:99:c0:9d:3e:83:be:05:a0:
a0:a8:e0:77:32:80:3a:05:30:ff:2e:d5:58:3f:fc:6f:6d:ad:
7a:52:b3:2f:29:38:0b:cb:d2:f7:c0:a2:2b:93:61:f9:04:84:
84:d1:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:46 2025 by rpki-client