Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: 0nfs3Ck5D0+PSKCSd3vb5dNAwX3mpyf3K3di+0UX9tA=
Subject key identifier: F1:F6:DF:5F:14:18:D0:6A:FB:35:64:D5:92:84:96:A2:06:B6:B4:79
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 019882B0EF1D0A23E39063C214FD29AE36AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 14B2
Signing time: Thu 07 Aug 2025 04:01:30 +0000
Manifest this update: Thu 07 Aug 2025 04:01:30 +0000
Manifest next update: Fri 08 Aug 2025 04:01:30 +0000
Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: 28owajCIUqmDTQrF7MidXsOKvtwDYDBynAMx2vjtkwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:ef:1d:0a:23:e3:90:63:c2:14:fd:29:ae:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Aug 7 04:01:30 2025 GMT
Not After : Aug 8 04:01:30 2025 GMT
Subject: CN=f1f6df5f1418d06afb3564d5928496a206b6b479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:1e:07:d6:21:9e:0d:4c:5d:b3:cb:d4:43:
bc:be:71:91:86:ad:92:95:e4:8a:74:a1:b8:38:b0:
03:6d:79:63:0b:dd:a6:97:72:56:d7:8f:14:d2:19:
89:f5:2a:a8:f5:db:de:ed:b1:3a:ec:5e:01:74:33:
d7:a9:a2:d7:a7:8f:32:9e:5b:1f:e4:4c:3a:52:7d:
97:e1:66:9c:7f:0e:5d:7c:56:de:e5:f5:00:3d:f8:
2d:aa:6d:69:86:62:72:c0:04:89:9f:d4:2c:5c:48:
dc:61:7a:3f:5f:c0:cc:d6:60:12:33:38:e1:8e:b4:
e2:c5:67:9e:34:6d:e5:e7:27:4e:4d:79:8b:37:62:
04:81:60:fd:1f:ba:24:5d:a9:66:56:bc:24:51:c6:
4b:cc:3f:96:6d:6d:df:22:24:c5:cb:07:66:dc:c7:
02:fc:86:c9:25:16:0e:6d:da:f1:07:84:b8:bf:45:
b8:d3:b6:cd:0b:45:d7:70:a5:1d:ce:dc:f9:be:03:
1c:b0:f9:4c:df:67:7a:ce:7c:d3:4d:1c:61:8e:18:
00:d4:c0:81:f0:5f:67:5f:06:06:be:5b:22:97:2c:
7b:a7:51:4a:97:1c:96:b9:31:70:af:69:dd:5a:7a:
f5:5b:7a:7c:64:8d:7a:11:8e:db:6d:fd:19:77:e3:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:DF:5F:14:18:D0:6A:FB:35:64:D5:92:84:96:A2:06:B6:B4:79
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:fe:fb:11:92:32:e5:19:78:9c:aa:a1:4c:ff:e1:fe:28:
b7:f3:ae:d6:f4:dc:42:b7:b9:d7:07:1d:36:db:8b:ac:8e:ac:
e7:7a:8c:30:7d:5c:38:7c:98:2c:50:9e:cb:79:1c:94:7e:63:
d0:d5:b2:70:6e:91:79:04:fa:19:ee:48:af:a3:25:46:d9:58:
5b:9f:dc:73:7e:b7:dd:c6:99:dd:9c:c0:31:58:1d:63:1a:6d:
68:35:2d:eb:80:ea:16:bd:8a:33:77:05:d4:a4:90:09:b5:f7:
b7:a9:b8:a9:2f:36:b8:d9:77:78:89:ca:c4:66:49:cf:08:b4:
4e:ba:e2:78:04:3b:7f:fc:af:c9:e6:0c:d6:8f:79:89:15:d8:
40:96:99:a0:58:d9:3e:bb:0d:30:80:95:2a:89:80:0d:80:12:
f8:53:3f:2b:50:65:8b:96:66:0d:f0:ef:7a:9f:49:04:f8:cd:
cf:8d:c8:30:93:27:3b:7b:40:68:72:87:df:cd:56:41:18:2f:
e6:17:05:5a:6c:0d:0c:a5:e2:eb:f3:6a:d9:67:7d:de:31:af:
b0:6a:fe:3c:00:1b:7f:53:03:4b:e9:44:ea:37:3d:c5:23:99:
61:7b:54:1f:80:47:30:0e:a0:e4:d2:67:51:9d:0b:f3:75:ab:
84:5a:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:32 2025 by rpki-client