Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: U4+aem/v2SYPpAuJGK3v2F7NxcEgOs9Qe4tEJgK/i5A=
Subject key identifier: 66:64:71:FE:4C:89:E9:AF:7F:34:6F:83:55:69:A9:1F:24:AB:31:62
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 0198D73B82599E06664DA5F2AC4FB54AEA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: CMK8sKs0nntU/q5VV/n8UMAmTXVTsug2BDGKGMrw7g0=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:82:59:9e:06:66:4d:a5:f2:ac:4f:b5:4a:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=666471fe4c89e9af7f346f835569a91f24ab3162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8b:7e:6b:24:f0:3c:22:a9:50:e4:4c:27:cf:
e6:65:88:a9:77:6e:3b:a1:5a:b9:3c:84:f9:13:e3:
ae:7f:c5:6c:af:2c:46:e8:c9:73:39:34:73:89:0f:
23:ba:fd:38:b3:10:a5:cf:20:e5:d1:e2:58:f9:0b:
70:0a:7b:ab:2c:47:90:01:eb:21:18:25:65:87:4e:
81:f1:6f:cb:94:02:73:8d:cf:d5:e6:24:86:77:3e:
cd:c4:9d:6e:e0:d2:bf:a5:1b:60:35:67:9d:95:d2:
07:ce:f8:81:03:5e:a1:ca:97:91:55:66:2b:d3:81:
9e:3c:e1:a2:2f:41:e6:35:3d:b4:3d:7d:e4:48:6b:
45:5d:34:9f:46:37:67:9c:75:1f:6c:75:60:c4:a0:
df:22:e4:e3:c3:8e:d3:29:f5:08:08:0b:ad:a6:90:
78:b6:fe:fe:d8:b7:d2:dd:2a:ab:e2:2a:c6:5c:bc:
55:7e:82:d3:e5:a0:e5:28:a5:16:4a:15:3d:cc:4b:
c2:43:fe:b8:5b:c8:78:9f:a5:1f:ab:4f:97:c3:fb:
31:51:d1:97:5b:4c:b9:45:28:af:bb:a4:fd:ab:68:
40:bd:a4:26:27:94:3c:4c:55:c3:b4:d8:aa:99:d7:
61:68:ca:ff:85:b4:9d:28:ce:c4:58:67:25:ef:f7:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:71:FE:4C:89:E9:AF:7F:34:6F:83:55:69:A9:1F:24:AB:31:62
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:3f:62:81:ae:ea:70:79:5c:ef:3d:6b:6e:48:1e:7a:0b:
23:21:42:a9:c2:75:92:22:d0:9b:a9:5e:7c:29:1f:ac:de:7e:
ed:2a:8a:f4:d9:ac:b9:9d:7f:e0:ab:1e:76:ef:48:1b:2f:5c:
4f:43:6b:99:47:86:27:f2:26:da:a6:51:01:15:a9:df:f1:6a:
ce:6a:26:c1:32:a1:8c:b1:34:c6:5b:8d:73:af:cf:52:40:7d:
79:a7:a4:e6:83:44:d7:89:1c:11:db:ad:75:d7:ba:0b:ef:e3:
34:8f:97:d2:13:01:49:a6:a8:40:83:b3:22:3f:59:0a:5b:37:
76:6d:75:8a:b6:87:5a:3d:d2:83:9e:7f:04:2e:48:ce:a8:8c:
54:3f:6b:cb:03:2a:69:43:38:49:38:5b:12:e5:2e:a6:bc:af:
89:2b:9f:1a:0c:ed:d6:a7:f9:7a:c0:d2:28:a0:f7:a4:82:76:
37:8e:57:19:7a:65:b0:33:cf:06:8b:2e:81:33:3e:8e:61:5d:
3a:f8:45:a8:5a:9e:21:0c:09:db:65:fe:3c:92:9e:59:5a:40:
a7:61:d9:63:ce:ab:8c:77:87:71:54:88:26:13:21:08:0c:ea:
58:fe:00:da:04:8d:86:e2:91:5a:92:f1:9e:5c:9e:ed:1c:19:
bd:33:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:11 2025 by rpki-client