
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: 8x0iSzKs4zi+8PRAh8oIVZZqo/GsYw3hIufQSVufBm8=
Subject key identifier: D0:DF:AC:FD:8B:DA:69:82:A8:68:22:C9:3E:20:6C:18:02:CB:48:A2
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019873E1C6744019659006E8B4197E84823D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 13D2
Signing time: Mon 04 Aug 2025 07:00:32 +0000
Manifest this update: Mon 04 Aug 2025 07:00:32 +0000
Manifest next update: Tue 05 Aug 2025 07:00:32 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: e3UtrGZhPz3an/q3c6wilqiH4M+pt/CHaQANB03BIdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c6:74:40:19:65:90:06:e8:b4:19:7e:84:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Aug 4 07:00:32 2025 GMT
Not After : Aug 5 07:00:32 2025 GMT
Subject: CN=d0dfacfd8bda6982a86822c93e206c1802cb48a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:3f:bf:8a:5b:8d:9a:56:fd:1c:df:f0:a8:
f5:4d:22:f4:b2:4c:91:51:f1:c2:41:0d:56:95:d3:
99:27:7e:ff:69:7a:40:ea:c0:99:68:77:8b:be:f4:
3f:8e:5c:0c:9d:4b:a8:c9:4a:e3:53:1f:fe:a1:70:
4a:83:13:b0:11:ed:db:01:6b:e5:8c:7e:ab:90:7c:
50:55:5d:5f:16:bf:f2:26:bf:5b:46:9a:5e:62:aa:
48:6f:6a:e1:28:53:b1:89:50:83:aa:bf:9b:18:57:
bd:56:9c:9f:ef:c5:db:32:cf:9a:06:db:db:44:f0:
a9:17:51:dd:29:16:17:d3:e3:50:66:57:e7:fc:f4:
7a:31:6b:3e:c0:3e:02:d1:e1:b9:31:1a:e4:45:15:
b5:16:5c:be:29:cb:65:bc:3d:84:b2:91:a6:37:8d:
17:f8:26:30:38:12:4c:71:50:3d:d6:51:07:1c:db:
8e:b8:e1:ba:58:b9:ff:35:bf:f6:0c:36:91:22:58:
ac:19:60:15:21:39:06:14:9f:a7:d9:fb:8b:de:0e:
f1:fb:33:73:b3:20:7f:44:81:89:b8:3e:60:13:66:
5e:9d:4b:00:f0:a8:f6:8e:0c:7a:c7:76:ed:8c:25:
66:83:9f:72:ec:91:45:41:c1:bb:04:c1:13:f4:28:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:AC:FD:8B:DA:69:82:A8:68:22:C9:3E:20:6C:18:02:CB:48:A2
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3b:97:be:15:12:f6:c8:4f:20:68:92:e6:8e:80:ec:9d:fa:
04:81:9e:1f:f2:00:c4:d7:37:d2:9c:76:40:76:24:aa:c2:c1:
9b:2a:50:87:37:79:26:61:4e:d0:34:8d:d2:f4:5f:a9:76:f2:
73:5e:cb:85:e0:80:36:42:64:6e:e3:f4:34:87:9d:25:f0:1f:
17:6b:bf:ee:96:e9:e7:7c:88:15:7a:88:da:e4:3f:31:eb:40:
72:17:a2:b0:47:62:77:4e:84:03:c0:77:83:03:53:54:65:54:
12:91:e3:c3:74:2e:61:81:39:bc:48:c7:66:2e:55:f5:12:28:
2f:63:6f:15:60:7f:75:44:61:0a:b6:fe:fa:86:5d:fe:43:db:
5f:1d:60:a3:63:27:a6:43:6b:47:da:65:a7:a5:e8:1b:6d:c9:
f6:12:8f:10:4b:ea:b8:2b:47:a5:c3:0f:7a:db:ea:11:2e:7a:
41:47:ac:83:ce:8d:0d:12:de:29:ae:3f:1d:16:67:43:6f:fc:
63:aa:c0:51:e3:99:5a:75:c8:18:01:d8:95:10:6c:82:12:4d:
0d:31:3d:58:d2:59:14:92:38:93:3c:b6:6a:ea:5a:3d:ed:a3:
a9:00:fb:fb:0c:cd:4c:84:d3:0e:5f:20:b4:62:f2:5e:56:a9:
e6:b7:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:38 2025 by rpki-client