Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: 6lLUgz5WacAH3o/V1UTfa9zrc7AIPLaQmsN7Gu1nreI=
Subject key identifier: 1C:51:70:54:0D:DF:5D:C8:2B:03:56:E7:87:5D:02:C5:E5:2F:2F:BB
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 0198D5F1AE789754AE543BA60398CD6A65A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0976
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: MHImQ6wBvQeKyNExe5TadPeGAP8goFKAFzJpDEOq9n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ae:78:97:54:ae:54:3b:a6:03:98:cd:6a:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=1c5170540ddf5dc82b0356e7875d02c5e52f2fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:38:39:48:75:01:4f:27:f8:c5:22:83:af:
3d:c5:6d:18:43:4a:5c:ca:52:35:21:10:cf:43:39:
05:38:db:2c:32:17:76:f6:e0:d6:7c:e0:58:d2:58:
29:f4:79:9c:a5:54:9a:86:34:dc:74:86:e1:9b:1e:
27:9b:d1:e2:a8:77:ce:6f:9f:45:53:4d:9c:c9:b4:
cc:1b:67:63:08:9b:83:cd:8c:c1:2f:00:c5:41:ab:
7b:1d:53:25:74:fc:5e:e0:77:94:03:f7:78:a2:3d:
72:40:90:68:53:70:fc:bb:e9:5c:ad:91:15:9b:70:
d9:a3:51:30:e7:40:d3:a8:84:8b:66:87:44:f1:92:
e6:29:2e:e4:1d:0c:77:0a:b8:17:91:ca:b5:83:5f:
9b:c0:ba:a8:01:46:be:ab:88:a0:ec:95:79:30:b2:
09:22:2f:9a:54:12:f0:47:1e:c8:9c:dd:6d:ff:01:
d0:79:7d:04:3a:75:6c:2a:45:8a:a5:f5:a3:9b:4e:
ce:45:da:e8:61:1b:cc:18:34:aa:a8:94:46:66:fe:
f1:1b:f7:cb:c1:00:04:ad:b9:fe:b7:6f:87:6e:4b:
63:fe:db:a9:0e:5c:f8:cb:f4:a4:f1:7c:5f:86:4a:
dc:cf:42:07:d2:6c:33:2d:c0:db:fa:e9:1d:14:a8:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:70:54:0D:DF:5D:C8:2B:03:56:E7:87:5D:02:C5:E5:2F:2F:BB
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:ac:09:8a:5c:92:f6:76:e0:dc:9e:52:b3:32:59:9b:ad:
25:f6:05:38:dc:88:01:49:ea:ab:6f:2d:f2:a9:40:fb:96:6f:
ed:4e:10:1b:d5:a9:e4:5b:f8:41:4b:92:ca:65:3b:55:b7:98:
c8:62:80:b1:12:56:67:f8:e1:89:76:6f:b9:c3:e0:76:e3:35:
2a:25:11:a4:fa:af:ce:8e:88:29:a6:3a:73:44:bf:ee:ed:fa:
83:e9:e0:42:53:7c:06:00:5d:f4:ac:bb:90:15:9a:95:c8:dc:
6e:6e:90:c0:7a:5b:71:16:90:58:06:9d:45:d1:33:ee:50:3d:
da:81:f8:36:3a:fb:12:e2:95:aa:9d:a0:6d:98:78:0f:01:75:
6f:68:1c:a8:c8:2a:0a:ed:49:13:62:30:bb:7b:09:13:d7:bb:
b0:72:8b:2a:b6:22:17:2a:0c:09:83:46:2f:84:cd:c6:8a:d1:
a3:81:a4:a2:eb:a4:7f:41:11:c5:db:07:b8:bf:7f:4f:a9:5e:
60:e4:b2:7e:e6:f1:de:3a:44:39:b4:ca:36:23:e4:ad:d1:34:
b5:4f:99:8f:f6:75:14:0f:5a:16:bc:7d:f7:22:f7:5f:cd:69:
10:b8:a3:04:3b:8d:df:6c:85:82:cb:78:3e:41:70:7f:59:18:
0a:71:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:11 2025 by rpki-client