Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: zOVyyCFConu082Dt4Q4few9+5FV/Sa5YC8FYCBLHo8c=
Subject key identifier: 9E:AB:3E:23:FB:12:8F:1B:A4:3E:D1:51:09:5F:EB:DF:2E:4F:2F:CA
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 0198959239B86AA1F4E12563C0D992F8866C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 134B
Signing time: Sun 10 Aug 2025 20:00:44 +0000
Manifest this update: Sun 10 Aug 2025 20:00:44 +0000
Manifest next update: Mon 11 Aug 2025 20:00:44 +0000
Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: pbWZXv/qeQXvcjtPw1sWy6ObV/W/QtbwBg1jrosU0Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:39:b8:6a:a1:f4:e1:25:63:c0:d9:92:f8:86:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Aug 10 20:00:44 2025 GMT
Not After : Aug 11 20:00:44 2025 GMT
Subject: CN=9eab3e23fb128f1ba43ed151095febdf2e4f2fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:75:56:6b:8d:08:2d:d2:12:50:83:85:02:
fd:42:0e:51:ab:19:d2:9e:2c:44:cb:ab:70:0d:43:
85:81:57:4a:77:35:29:e5:bc:11:ba:b9:fb:ff:6a:
7a:21:c9:8d:b9:21:97:89:4c:73:10:69:f8:ee:88:
47:ef:7f:82:77:98:18:91:d6:a8:49:8f:62:b7:1f:
ab:63:d5:89:c1:2e:36:f1:9d:6e:b9:8e:51:eb:35:
59:62:c0:0e:3b:97:31:65:35:7a:fe:71:a8:18:70:
a8:54:55:7e:7a:01:90:cd:30:18:64:c5:80:c0:9e:
6f:c2:5b:77:b4:29:33:c4:dc:3e:8e:c1:6e:27:97:
9a:a0:cf:0f:83:1f:2b:68:75:94:23:08:f3:47:2e:
2b:48:ab:33:ac:cb:d8:41:40:2d:6f:4c:22:08:cb:
cb:ca:4d:7a:93:c8:84:19:bb:4e:01:c4:a1:bf:34:
12:43:a4:75:d1:72:07:f7:12:a1:ef:5d:6c:47:46:
05:b8:dd:fe:90:b2:70:f5:c1:43:03:b8:d3:19:fd:
1e:71:16:06:ec:f8:41:ac:06:07:70:69:55:99:a8:
fa:9c:95:d9:f4:cb:b2:c9:20:3e:1e:64:78:55:2a:
37:1a:62:aa:16:f2:da:5b:ea:74:11:2c:04:5e:49:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:3E:23:FB:12:8F:1B:A4:3E:D1:51:09:5F:EB:DF:2E:4F:2F:CA
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:9a:dd:25:35:08:20:82:57:be:21:51:9e:61:0c:3c:ec:
8d:ef:60:9e:87:c0:4c:c1:b9:27:81:90:88:a3:0e:d8:6d:34:
1a:a2:37:f0:fa:5e:b7:3d:87:b3:94:dc:d6:31:86:cf:84:86:
f4:3f:2b:42:a6:30:d5:46:0d:23:d3:9c:e0:dc:1d:53:4b:ee:
1d:c2:9a:9e:b7:f6:92:3c:d9:b6:bf:ee:c7:19:e5:7d:92:09:
05:a8:fa:8f:1c:8f:6b:47:84:d0:66:97:65:13:3f:a3:72:b3:
f0:77:11:f4:03:06:a9:de:e3:3b:e7:a0:d2:39:67:59:c6:bb:
03:1d:cf:a2:e8:42:b7:38:01:f7:c9:59:7c:f3:b0:04:b1:0d:
36:67:8e:ed:f3:57:a1:aa:b9:36:9e:52:14:5d:24:c7:08:72:
c6:9c:3f:8c:3b:37:d4:f3:92:5b:fb:cc:cd:19:a7:45:b4:65:
c7:df:ca:78:1b:53:ac:e5:2d:53:ad:e8:fe:47:ac:c5:f0:19:
20:4f:54:49:59:fd:85:be:f6:5d:bc:50:e1:7e:80:38:ab:2a:
d5:f4:08:aa:11:86:06:f7:6a:d2:5d:4b:68:92:cf:46:4e:ae:
75:de:6d:bd:06:ca:60:cc:e5:13:ae:9d:26:63:cf:07:3e:c1:
57:d7:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:36 2025 by rpki-client