Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: AV4u2osI6/i3mmw3gx8Iyyqp1QfomLInzBPTh6N5x9Y=
Subject key identifier: 2A:65:81:32:CB:23:83:FB:AE:38:75:4A:11:11:F9:D9:76:C5:D7:8F
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 0198D4A7DE24A0ABCAEE74D5D21EC8BEE71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 06DD
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: W430Ui1UXQ7RABZnwSKy29vShdY.roa (hash: +4VlsCd7wKYkqzPPZYOuuES1Ou2/8oSAmx6WikA3M3E=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: I31p88QZCyhDKgJn7UteLGs0ygtxp+WXt+sx8suXV3w=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:de:24:a0:ab:ca:ee:74:d5:d2:1e:c8:be:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=2a658132cb2383fbae38754a1111f9d976c5d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:67:c8:2f:93:9f:20:6a:08:eb:8a:ff:3b:
f7:59:ab:3a:13:ac:e8:af:3d:0b:14:72:1e:bc:01:
da:ec:08:81:11:13:aa:fb:5a:68:47:fc:14:af:de:
39:44:0b:f1:0f:8a:91:22:e3:2c:8d:01:83:d1:fe:
5e:b1:11:b7:52:7a:2e:2e:5b:bc:d5:4e:02:c6:af:
57:c8:ff:4a:ed:71:d2:38:e9:ba:0a:21:4f:34:15:
a6:9a:4e:80:df:af:ff:2a:64:28:e1:c9:ce:14:58:
6e:17:91:fd:e6:d6:36:2f:59:6d:4c:af:41:ab:3c:
c4:67:0e:cc:69:d5:6f:fe:46:c5:cc:0a:5b:03:cc:
4a:ff:42:b5:d9:bb:f0:8a:a6:50:97:d2:dd:b4:e6:
5f:bc:45:d8:8f:08:76:15:33:c9:81:bf:8e:64:40:
bd:66:41:ff:6e:af:3d:1f:18:d2:f9:4e:cf:f0:ca:
69:a5:e9:32:c4:a5:61:50:55:d3:b8:12:70:54:07:
47:b4:b3:11:f0:2a:60:fe:a4:44:a2:db:ff:50:0f:
d1:fe:ac:3b:0d:e1:80:f5:85:e3:fb:00:75:fa:c6:
9b:47:0b:39:8d:0e:fc:de:70:bb:1e:ae:7e:79:f6:
e9:75:42:fe:c4:33:46:ee:7f:81:15:3d:3d:b1:c8:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:65:81:32:CB:23:83:FB:AE:38:75:4A:11:11:F9:D9:76:C5:D7:8F
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:8e:49:5d:d8:0b:fe:aa:fd:61:36:eb:a8:28:f5:dd:09:
8d:ac:11:0b:a3:f1:89:22:fb:95:49:c6:3a:55:bb:7d:81:51:
af:c5:ba:04:e1:da:d8:a9:ad:ab:3b:bb:a1:4c:1e:0c:57:9d:
d4:44:b8:60:4e:0f:23:ee:88:ab:cb:d3:2c:34:e0:ad:e3:8a:
9d:f6:99:50:36:f4:4a:20:d5:7f:6c:a5:3f:d0:b9:3d:5b:31:
e3:fe:14:79:75:39:33:5a:f4:a8:cc:5c:89:d4:b9:df:dc:64:
b7:f0:31:e2:35:81:b6:be:16:43:96:58:24:fa:be:de:35:8b:
7c:c9:fd:75:a6:2d:42:55:8a:3d:42:f1:7d:0e:84:52:2a:bd:
50:f8:b4:15:78:15:86:b5:37:7b:41:ee:b6:50:ec:db:d8:be:
95:d2:cc:33:df:16:b7:d2:86:90:72:14:73:1e:77:d1:e6:2a:
6e:74:2c:1c:3c:62:eb:1e:49:a2:66:a7:47:8a:98:8a:a2:61:
11:85:ae:02:58:ed:2c:48:dc:86:f0:fe:d0:e9:8b:ef:2f:7c:
64:ef:07:5f:4b:31:c8:4d:19:8a:e6:3d:d4:a1:8a:ec:c2:da:
7f:79:30:5a:79:3a:fa:54:c6:97:92:e0:cd:32:98:90:b9:ff:
2e:db:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:33 2025 by rpki-client