Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: xIBpvNgr3ZAy2HQu5hgeofrHnEfoudgLnTGMefMQzos=
Subject key identifier: 46:D3:8B:61:15:48:C4:D5:B6:50:36:48:1E:55:18:0F:CE:26:13:91
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0198D5BC2C758DBCCDFCED84247CA29FAAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 0225
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: G4e94kSsy1mp7cTTJIrMGqL+mplII8O9kWGRzMXsjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2c:75:8d:bc:cd:fc:ed:84:24:7c:a2:9f:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=46d38b611548c4d5b65036481e55180fce261391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:fb:93:b3:e3:c5:f1:2f:79:1a:3a:36:c5:
84:40:75:d4:b5:f7:e3:a7:41:d7:e5:7b:3f:43:27:
21:5c:6e:4a:3a:0c:10:1b:5a:4b:d5:77:9d:a0:1c:
66:2a:d5:0e:ae:40:7d:75:b6:bc:91:82:e7:aa:34:
81:bc:e9:f9:02:0f:1c:9d:9f:a3:d5:36:3b:b4:e9:
0e:d9:41:e4:b5:fe:61:68:08:b2:6c:8a:35:d3:b1:
3b:01:d5:56:d8:d1:0e:7f:92:50:30:b9:bb:3f:7f:
1d:cf:56:6f:d3:96:52:29:01:d8:d7:30:e8:26:f0:
09:11:4e:90:cc:75:0c:c2:e5:49:4f:e3:fc:ce:59:
07:1e:51:49:6b:34:d6:bf:1b:9e:36:9f:4e:f3:11:
b2:61:fd:99:2d:3d:9b:5d:c4:81:b3:5c:a3:5f:ac:
85:9d:5d:8b:b7:67:25:89:d1:b8:b2:fc:62:8f:c7:
c4:c2:06:3a:80:83:16:51:99:5e:12:9e:e6:e0:86:
eb:37:4d:e1:a4:df:b0:e0:02:7c:b2:23:58:6c:1e:
2d:bd:66:64:f8:43:b9:1d:f6:b0:9c:92:0e:10:75:
d8:5e:cd:19:ba:03:78:2d:31:fc:86:cd:a0:dc:26:
41:1f:63:3f:70:38:0b:e8:77:b6:cc:a5:b9:58:f5:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:8B:61:15:48:C4:D5:B6:50:36:48:1E:55:18:0F:CE:26:13:91
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c3:50:56:59:73:4a:ef:af:dd:d9:b3:bd:2e:88:12:31:64:
b9:5f:d6:72:d7:c2:6a:a8:cd:9e:d7:41:99:c2:e5:4d:38:98:
1c:5d:b6:5c:dc:a1:6d:f1:5f:48:cf:cc:b4:a8:44:27:bc:2e:
14:ea:1a:e1:cf:c0:54:2c:f2:6b:55:82:3d:81:fc:b9:ba:cb:
1f:6d:5a:fa:2e:5b:b4:b8:56:94:e5:e6:56:f0:89:ca:af:b5:
29:ba:33:1f:f0:50:08:f0:1d:13:6d:89:e7:b5:63:b4:28:a2:
79:aa:22:7d:53:3d:ee:8a:b9:cf:b3:84:ce:bb:a3:7c:f8:21:
92:47:1b:6e:5a:92:8e:b5:2e:8f:f9:4d:71:15:7b:c7:c4:75:
0b:c7:96:bf:54:f2:9a:15:d4:76:14:f7:e2:e3:8d:5e:6c:1b:
ea:00:54:21:58:03:23:6b:99:4a:af:8e:fe:03:ef:34:8b:4e:
21:c7:6c:fa:24:24:25:74:34:df:6f:dc:38:16:e4:69:7e:f2:
77:96:15:36:68:63:5a:fb:c9:fa:a6:d8:c6:3d:05:e3:22:11:
b0:c4:b6:73:6a:1a:21:6b:df:2d:c6:79:20:de:43:6c:88:4e:
f4:ae:ad:10:19:8a:f8:44:be:8b:77:a3:f1:56:5b:95:cb:ed:
fb:ec:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:47 2025 by rpki-client