Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: h8gb0dG/dHA1rpOtP1I+gwOoh6vd0C/zQRqbQSquEs4=
Subject key identifier: DD:D7:14:B2:82:26:BB:57:ED:3F:1F:CE:94:0D:7B:29:65:D6:48:01
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 0198D4E08F3E6F11D2396ABFA2FD65E482C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0560
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: grVV2Rl7n0BkygIG2bwYf+A6J16GVa1f+o/l+PzyiMg=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8f:3e:6f:11:d2:39:6a:bf:a2:fd:65:e4:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=ddd714b28226bb57ed3f1fce940d7b2965d64801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:9b:dc:a0:77:fc:d5:08:0f:99:5c:5e:8c:
dc:03:62:6b:f0:a6:3d:45:8c:33:4e:62:31:55:29:
03:81:fe:48:0f:e7:1f:91:26:4d:42:6c:65:b4:e4:
7b:60:8d:a9:7f:ea:92:d6:f3:24:b5:77:c6:13:8a:
c6:4a:4f:3a:22:bc:44:b4:8b:92:33:1f:9d:73:6a:
06:06:1b:e7:57:b2:63:94:55:b5:af:35:aa:87:1d:
13:37:15:94:50:e9:03:46:97:e7:da:3f:9f:de:26:
fe:e0:39:89:07:a4:30:8b:8b:fa:d6:e9:f2:b3:a9:
47:43:c6:8a:22:5f:f6:cb:1a:bf:af:d1:4f:c7:ea:
5f:6d:e0:33:aa:a5:ae:a1:26:8f:85:1c:a5:25:e6:
fc:bf:6f:24:7b:b0:b1:5d:72:2b:df:9b:d2:22:c2:
ad:9b:7f:54:87:05:56:9b:71:26:62:d9:97:a9:ee:
bc:c7:12:0e:73:34:ab:f8:72:34:de:9b:b1:08:30:
e7:6c:d6:bc:11:14:bf:d0:aa:0b:63:f6:c0:20:ac:
eb:f0:e3:cf:4d:c0:81:14:91:75:99:8d:ab:01:5a:
56:a2:2e:51:53:56:17:d9:29:04:62:ac:1a:b0:ce:
2e:56:ce:1f:7f:46:56:9c:d0:d9:f0:8c:fc:a4:60:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D7:14:B2:82:26:BB:57:ED:3F:1F:CE:94:0D:7B:29:65:D6:48:01
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6b:9b:1b:1d:a3:4f:df:34:3c:3c:21:e0:2a:1c:23:4e:ed:
92:34:bc:e7:65:68:b4:94:c8:fa:86:db:22:ff:6e:fb:da:e1:
e0:81:45:4e:22:ba:52:8e:c2:a1:4b:d8:08:c9:15:99:ea:41:
69:13:07:58:73:98:e9:33:f2:69:a3:54:59:42:07:86:c1:e6:
95:12:13:d5:57:b2:00:86:45:e6:6a:05:29:e4:0e:06:0b:0a:
95:c0:74:f9:e9:ee:6a:71:e7:ab:03:80:65:5d:70:25:db:eb:
53:44:de:72:82:6c:b2:36:1a:e0:bc:84:21:4f:59:94:c4:92:
47:31:42:9f:a3:3a:72:93:80:3a:c3:fc:55:c2:a5:4e:fb:82:
99:8f:9d:90:ad:45:a5:57:6e:f7:20:24:f8:10:d0:ec:26:de:
2f:c9:97:13:a7:60:f0:0f:35:f8:3a:2d:fe:2f:fb:a3:4a:71:
40:e3:b2:51:67:ab:22:57:26:86:9d:b1:db:5d:ac:b0:db:57:
64:00:46:fa:26:0b:a1:ae:d5:a2:ef:27:ce:26:ef:ed:6a:e7:
4b:12:70:55:6a:22:f9:94:ce:72:c3:0e:a6:93:2a:30:61:e3:
2e:df:66:c1:03:81:b4:90:4c:32:e1:93:cc:79:6e:9c:66:7e:
8e:f4:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:50 2025 by rpki-client