Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: pWa22B9JUrDru6yoQPnEAjAg+bnhafe74P+megCxJcU=
Subject key identifier: B9:93:59:FB:A2:9E:94:86:48:63:83:A1:B8:0E:EE:A8:8A:CB:B3:A0
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 0198D5F188ED53FF6FD895318F975DF019E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 0742
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: WNg1tRaAvkiLLSspBa3uuQom+LBKACfdZJEZ0TDP4vc=)
2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:88:ed:53:ff:6f:d8:95:31:8f:97:5d:f0:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=b99359fba29e9486486383a1b80eeea88acbb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:44:d5:92:e0:5b:6c:eb:fa:6d:d7:c0:40:
e7:94:60:fb:b7:7d:f9:f2:f2:e1:7e:cf:84:27:44:
01:43:2f:2b:78:d2:98:00:78:08:2f:9b:f8:0e:4c:
d0:26:53:25:96:ee:b1:de:c4:26:24:af:58:af:09:
90:ec:b5:4f:6d:88:d9:20:6f:45:cd:95:5f:52:39:
ad:42:bf:6e:62:84:69:ac:b7:aa:3e:09:dd:21:96:
b1:29:bd:39:97:69:d3:3a:17:6b:d9:81:57:5d:4c:
44:94:e7:3c:cd:2a:46:05:d8:bb:60:92:6b:2e:bd:
e3:57:cd:55:92:06:f9:68:db:0f:43:80:8b:c7:a9:
45:a6:c7:21:c0:71:51:18:76:17:7f:c4:7d:38:03:
e1:52:97:0c:91:e6:fd:80:d5:e5:21:3b:db:4a:93:
74:d8:4c:8b:1f:17:70:80:a4:dc:ce:9a:85:f9:c1:
72:dd:64:e3:08:82:cc:dd:48:3a:d8:16:12:81:e4:
5d:3f:55:9b:15:37:45:55:1e:c4:3c:18:5c:65:d0:
76:0b:5f:f6:a4:cc:a9:3a:dd:a2:1d:25:8b:48:af:
7b:4e:df:84:11:e5:1c:31:6b:c8:7e:8e:d4:77:28:
d6:e5:e6:c1:ea:dd:04:9f:d7:3a:a6:5d:71:be:b6:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:59:FB:A2:9E:94:86:48:63:83:A1:B8:0E:EE:A8:8A:CB:B3:A0
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ce:e8:7c:25:f6:09:d6:91:66:fa:33:d9:71:ef:80:dd:52:
55:28:db:5c:10:f4:da:5f:63:e8:98:9e:2c:d1:d0:39:b8:cd:
05:49:c3:e2:d4:81:28:8d:8f:4d:9b:94:6f:eb:e8:cd:1f:ba:
0a:32:71:57:69:d1:0d:1f:fb:f9:72:51:08:da:61:2b:d5:bf:
a0:32:75:91:2a:89:13:a9:06:6b:dc:04:7e:fb:64:e6:22:a1:
82:6b:ad:22:d5:1c:30:08:2c:6b:94:48:90:40:6a:bf:05:e2:
c1:60:fd:d0:60:3b:a5:ad:99:43:0d:ef:75:20:8e:11:96:ad:
5e:33:07:18:5a:5c:a9:0a:21:65:2e:9b:48:8e:97:56:be:ba:
f1:0f:94:cd:96:b9:3c:e5:cf:d7:53:cf:55:7a:41:c4:3c:42:
48:af:a7:e7:7f:9e:04:5f:75:e5:c5:38:a3:bc:9c:e2:9a:52:
17:33:c1:d0:8d:56:cb:98:d4:8f:45:e7:07:83:8e:68:46:51:
f5:9f:a3:ad:ce:80:2f:9a:42:cf:8e:9c:11:d0:09:de:b8:84:
1e:ff:d9:94:76:e3:9e:98:8e:86:09:13:5c:b8:39:96:4f:54:
0c:08:33:0c:ec:1c:eb:29:48:82:a3:f9:85:69:9c:b5:46:e9:
33:f0:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:46 2025 by rpki-client