Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: 5rHZ9EPztNVGIQQn8Dmcn5c1CNGOoZo5ZFapkbE16Bk=
Subject key identifier: 78:B7:0D:BD:2C:34:C6:CB:E6:F7:DF:1A:32:6A:33:C5:4D:A4:FE:23
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 01987B2D8879C48259584F75D49964A6C843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1383
Signing time: Tue 05 Aug 2025 17:00:38 +0000
Manifest this update: Tue 05 Aug 2025 17:00:38 +0000
Manifest next update: Wed 06 Aug 2025 17:00:38 +0000
Files and hashes: 1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: kzmbGoW7jXg1AMotI0r4UIEvzZILcAPsqu5ccfG8vxs=)
2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:88:79:c4:82:59:58:4f:75:d4:99:64:a6:c8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Aug 5 17:00:38 2025 GMT
Not After : Aug 6 17:00:38 2025 GMT
Subject: CN=78b70dbd2c34c6cbe6f7df1a326a33c54da4fe23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:58:be:cc:f0:29:68:4b:f1:e4:71:09:aa:
66:d8:a2:47:de:5b:52:d6:c4:20:e5:50:28:bf:75:
0f:db:42:a8:5e:4c:f6:7a:60:f3:8b:d9:94:07:0a:
f6:d6:65:55:cc:5b:9f:65:7e:3b:69:fc:5a:65:0f:
a5:f5:07:80:59:c9:ac:44:f9:4d:c5:71:ff:7f:0d:
1b:73:56:9c:22:cb:ca:7f:0f:4d:98:4b:8a:91:42:
5a:8b:94:e4:cd:51:af:36:32:4b:ff:f1:fb:7e:75:
79:ed:cc:ab:1d:dc:b0:83:79:d0:ee:08:91:28:f7:
5d:20:ae:75:70:b5:74:3d:e1:5f:e6:b9:94:d2:7e:
77:03:50:bc:3b:92:05:d1:a0:b1:ab:de:0c:85:d7:
b6:70:72:77:15:f4:54:87:18:0d:50:9e:62:d3:67:
5f:4d:67:26:96:4d:9a:61:72:32:1c:f9:42:ca:3c:
55:45:ce:ad:50:43:47:98:04:ca:06:1d:20:c6:41:
8d:43:bc:3e:fc:b1:fe:48:77:57:0f:01:63:1e:96:
eb:68:35:87:75:7b:aa:89:33:7f:65:25:d7:7f:a3:
84:b2:1c:35:55:5f:25:fc:68:cc:93:ba:ee:79:91:
d3:61:a4:55:d0:b0:0f:f4:08:9a:a2:b6:ba:44:21:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:0D:BD:2C:34:C6:CB:E6:F7:DF:1A:32:6A:33:C5:4D:A4:FE:23
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:d8:cc:f0:0c:56:29:df:40:b6:91:54:f3:53:5b:08:06:
22:0e:64:0c:1a:44:07:99:a7:19:8f:6c:79:4a:02:d6:bf:2b:
dd:47:86:29:b4:84:05:57:24:28:51:1b:35:be:fb:30:9e:0a:
a0:26:48:aa:44:bc:5b:36:73:ab:ec:c0:d7:4b:76:cd:c1:aa:
ee:00:f8:8f:5b:a0:d7:11:75:13:80:b1:3a:ce:20:14:fb:8a:
78:06:d4:4a:5c:84:7d:8a:bb:75:85:73:f3:72:5f:41:07:cc:
0d:cf:1c:fe:96:c5:ee:98:79:3c:03:eb:d3:62:a6:12:f8:e8:
b7:8b:2b:4f:97:5b:2a:06:6c:3a:27:89:bf:a3:8c:65:78:9b:
f1:da:37:2f:7f:81:74:24:4a:08:03:3f:3d:5a:4e:6e:36:cb:
b6:ea:09:cb:af:35:89:6b:45:29:05:86:e2:8a:3d:58:a1:69:
83:14:48:a2:4e:0c:7f:6c:50:b2:39:bf:94:80:40:96:41:35:
7a:59:af:7d:17:de:d0:c4:15:b5:e1:ee:83:89:44:e0:a9:6a:
ef:60:f3:0d:36:56:ec:0b:6c:97:b0:e1:56:b7:23:9e:81:17:
12:2c:ef:e2:3d:46:35:b5:21:4c:ef:1b:68:b7:85:78:a7:52:
fc:85:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:45 2025 by rpki-client