Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: 687eGyna2JvCJuaTFVOoiKk+hT35R7bshW/YPvTbGYw=
Subject key identifier: BB:BD:F5:F4:C8:FF:A0:5C:06:E9:3C:89:24:C9:4F:30:64:79:1F:CB
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 0197C26DC7C4BC4DA54C4231385034EF58AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 04E3
Signing time: Mon 30 Jun 2025 20:01:03 +0000
Manifest this update: Mon 30 Jun 2025 20:01:03 +0000
Manifest next update: Tue 01 Jul 2025 20:01:03 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: pGsZEXmphSHp7CzcBEOnni74PzYEe6t54fIQG8NWBEI=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:c7:c4:bc:4d:a5:4c:42:31:38:50:34:ef:58:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Jun 30 20:01:03 2025 GMT
Not After : Jul 1 20:01:03 2025 GMT
Subject: CN=bbbdf5f4c8ffa05c06e93c8924c94f3064791fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:f0:ee:18:0c:20:61:d6:1a:04:7a:54:25:
62:8a:a7:30:39:b1:13:67:c5:a0:85:ec:99:2b:2f:
fd:2f:77:6e:74:b0:49:f0:ed:f2:15:14:26:11:e5:
7a:3d:cf:f5:37:db:2a:0e:96:67:66:c0:c3:d0:9c:
7f:97:25:ce:1a:c6:af:ae:fd:6b:ac:5e:19:25:51:
70:63:fd:35:56:89:6a:3e:b7:81:2d:b9:41:5c:a7:
3b:8e:63:51:0d:92:ab:28:78:9b:3d:b9:a0:f1:9a:
e0:f1:82:f7:42:dc:cd:b8:33:35:21:0d:f7:f3:f5:
3a:12:f9:ef:ac:42:b5:b8:6a:55:28:e2:4c:83:2a:
af:17:d7:d1:04:b7:b1:1c:24:35:d7:59:32:3c:42:
38:06:e0:a0:68:d1:16:60:a8:6b:98:ef:80:a3:04:
6d:5e:7d:28:ba:5a:df:56:db:8c:09:11:f5:c8:77:
07:1e:27:5b:11:76:10:8d:54:6e:9e:c5:44:9b:50:
11:f2:6a:8a:34:6b:26:b4:9d:cb:fd:21:85:95:91:
bd:30:4d:17:9a:6c:c8:a4:42:91:40:06:d6:77:88:
98:28:4c:63:72:6f:7f:de:b1:40:83:84:f5:aa:63:
68:df:6f:f3:a0:f0:ff:3a:ad:e9:41:c4:a6:00:2c:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:F5:F4:C8:FF:A0:5C:06:E9:3C:89:24:C9:4F:30:64:79:1F:CB
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:b7:3f:11:d0:59:68:3d:1c:7a:da:a5:8a:be:89:c4:36:
9c:d7:18:94:3b:9b:09:36:c9:5a:4a:f8:d3:88:6b:e3:8e:74:
57:cf:cd:ea:2b:e4:04:1b:0d:d5:a6:81:66:ec:63:64:0d:45:
ea:e0:0b:52:eb:38:0d:4a:9a:e0:b3:8d:05:93:13:b2:dc:bb:
8f:5a:d6:ce:c0:c9:85:81:c5:f4:ac:10:6f:a1:34:e9:6f:b5:
9f:9d:fb:2e:13:fd:7d:f8:cd:97:11:bf:a4:6a:81:f7:b6:b8:
f9:b6:67:0e:c2:88:76:6b:89:52:c9:05:5b:d2:0e:be:66:ca:
27:be:2c:24:fc:a3:48:fb:1e:7b:56:8e:2a:41:71:06:e8:a9:
95:ea:79:63:f4:45:ac:cf:43:21:19:86:f9:5e:39:3e:06:61:
1f:d2:68:eb:fc:4e:3c:67:58:82:1b:ee:5a:17:5f:9f:2b:ca:
99:21:a1:a5:08:75:a5:20:6d:c7:cf:f8:84:57:8d:b5:85:07:
d1:1f:76:5e:5a:f1:fc:cd:42:39:3a:ba:49:bf:c1:8b:e5:99:
85:4f:76:23:7d:94:84:c5:f8:e1:97:02:9e:90:fd:6e:d7:5c:
ec:f5:da:16:a4:c8:f8:fd:b1:12:0a:cc:e6:ec:3a:27:70:61:
63:ea:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:35:29 2025 by rpki-client