Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: L8ERd69LR1vn332aZZDFp7F1lgSUfUodyqYRSX3Wpp4=
Subject key identifier: DF:19:9A:E5:C7:EB:D1:F0:32:F2:21:14:12:DE:2A:3B:E5:44:04:89
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 0198D515D32EF6817D88F398252D9E4F2302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: x4IWGanNc6uIDShu/W7Dw7QhzDsl3ccmXhbJe7bODjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d3:2e:f6:81:7d:88:f3:98:25:2d:9e:4f:23:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=df199ae5c7ebd1f032f2211412de2a3be5440489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:97:a4:b0:62:30:1e:d5:42:ca:88:f2:c5:
99:7d:7b:db:c3:f7:1b:ad:79:70:29:23:8b:5f:24:
3c:d6:0c:c6:55:7b:15:0d:39:a0:ae:2c:74:df:f0:
4c:65:5b:67:9f:a1:27:83:c3:9c:bb:d1:71:69:d3:
33:7c:ad:d2:19:9e:0e:35:96:12:ba:ec:66:ab:86:
ef:72:e1:1e:9f:2e:62:dc:49:23:ca:18:4f:a0:b2:
d7:28:52:4d:1b:1f:c9:5a:a4:9e:0a:92:8d:12:af:
5f:ce:eb:ec:6a:4e:89:e5:77:42:64:4e:cc:d3:6c:
f0:6e:b4:e8:6d:32:e1:d3:68:09:47:ea:d9:4d:21:
32:ca:6f:23:16:ba:8d:04:7c:29:a3:fa:2c:62:69:
bb:d2:d8:c1:a4:fe:ef:d2:59:14:8a:37:d2:9a:06:
74:b1:dc:c7:ff:68:12:8a:e0:b4:55:47:fe:b9:54:
49:79:d2:3a:33:ea:9b:a4:de:b8:45:36:b5:e8:2d:
78:1e:93:66:2f:8d:27:d0:e5:a6:10:16:2a:2d:d2:
dc:56:07:00:74:3e:52:40:a3:76:b6:36:5d:a7:89:
d0:f7:79:a8:c1:ae:7d:b8:26:bc:69:f7:04:5d:60:
05:a8:23:26:aa:fa:58:80:0f:63:39:e5:fa:4d:5a:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:9A:E5:C7:EB:D1:F0:32:F2:21:14:12:DE:2A:3B:E5:44:04:89
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:df:49:37:c8:88:b1:09:58:1d:2c:5a:b8:69:5f:b8:d6:16:
0e:11:59:f6:c1:10:68:cf:3d:42:b6:f5:5d:4b:db:5b:59:8c:
b1:6e:7f:53:27:86:83:4c:92:db:12:47:17:f9:75:bd:e0:e5:
e1:31:25:65:91:e3:59:12:6b:21:51:ea:6f:2b:7a:e1:fa:c0:
a7:8e:af:b5:76:c8:42:07:28:9d:2d:ab:23:11:d1:9f:22:af:
41:54:c7:92:09:23:4f:94:ed:52:ed:89:3a:6f:e7:3c:28:f3:
70:b1:0b:af:0f:aa:f7:92:c3:fe:aa:73:9a:91:a6:d7:1b:de:
c8:3c:b7:75:01:55:58:04:0e:6a:74:99:2f:10:04:be:ad:6d:
16:aa:62:fc:68:aa:4a:fa:fa:18:85:ee:2f:10:52:1e:a4:36:
76:14:1c:73:10:8f:2b:dc:63:13:aa:84:ad:f6:a6:c6:8e:97:
17:06:60:f8:78:84:47:09:bc:a9:73:3a:71:dc:98:3f:21:8a:
f5:1d:64:e4:39:2c:4a:d7:4f:f9:3d:5a:0e:df:00:d1:0a:99:
fc:ee:dc:1a:43:6a:19:eb:8c:17:08:78:2b:9c:74:5e:33:92:
a8:c8:55:2b:18:85:00:04:e0:fb:ac:d6:88:be:71:29:a4:6f:
01:a7:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:47 2025 by rpki-client