Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: LojF3fmVQtZy6jcsGjmobRyCYxi2ccacU82QYwQopDg=
Subject key identifier: 3D:44:52:36:EB:B6:C9:39:47:00:5E:B3:7D:4B:07:81:37:1C:D7:5D
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 01987D8B01B4AC414C132FC50C10D08AEAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 15AD
Signing time: Wed 06 Aug 2025 04:01:58 +0000
Manifest this update: Wed 06 Aug 2025 04:01:58 +0000
Manifest next update: Thu 07 Aug 2025 04:01:58 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: De0dCfIa7M144gJlwxYzV8gJTvC0gJa0aZixpzAd72U=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:01:b4:ac:41:4c:13:2f:c5:0c:10:d0:8a:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Aug 6 04:01:58 2025 GMT
Not After : Aug 7 04:01:58 2025 GMT
Subject: CN=3d445236ebb6c93947005eb37d4b0781371cd75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:b5:bb:aa:d3:ba:65:d2:ff:55:02:5f:aa:
99:cb:d1:98:9d:1b:88:3f:69:20:c8:5f:2d:3a:e3:
5a:42:13:3e:72:0d:f7:65:f6:2a:41:82:4d:d0:f3:
1c:96:73:d2:ca:b6:50:7f:70:5c:16:a1:17:08:7b:
52:d5:83:5b:6f:70:4f:9b:bb:9e:9e:92:55:93:18:
96:24:72:4c:91:70:9e:a5:89:6e:e9:90:4e:39:8d:
5c:ee:31:b4:06:66:0d:df:34:d4:ad:4d:16:8c:b2:
33:e0:ac:d9:16:26:c1:e6:41:eb:a4:d7:01:79:e0:
dc:00:ab:de:2b:2f:fc:27:f3:98:1f:36:62:ee:bb:
16:62:98:2c:c1:10:4e:88:19:0d:91:6e:af:b6:3e:
b5:44:3f:e7:6a:ae:04:0f:3f:d2:e4:69:d3:01:c0:
33:88:68:e5:4a:d4:df:f2:0c:7f:f4:7f:ef:5f:f4:
90:1d:c0:6e:ab:ba:a0:9f:4c:7e:25:30:da:aa:07:
fe:13:0f:da:6a:a6:2d:b7:d1:80:81:ca:f4:f8:a1:
51:83:cf:9f:c7:b2:f4:e0:fa:1e:08:95:a0:07:7c:
98:2d:1a:f1:05:db:42:85:0b:7e:e6:bc:65:73:c2:
66:d2:f5:00:02:96:e0:ba:a7:d2:79:ed:97:00:ba:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:52:36:EB:B6:C9:39:47:00:5E:B3:7D:4B:07:81:37:1C:D7:5D
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cd:ac:9d:29:93:1e:f5:f0:ce:51:60:e2:ee:49:83:b1:90:
3f:f3:41:e6:81:c4:67:1c:14:fd:e7:bf:d3:08:6a:fe:31:29:
6e:87:26:44:31:35:81:e3:9f:03:9c:b7:74:00:2c:d6:f8:f3:
23:e1:09:0a:87:d4:4f:4b:31:5b:c9:c0:94:7e:95:fe:cb:8c:
9d:48:f7:b7:ca:d0:29:37:a3:fb:08:dd:f3:2b:53:c4:9c:7b:
00:26:33:57:38:e4:ca:93:db:b9:de:88:88:7f:4e:45:f3:28:
15:d2:56:93:98:09:e9:93:af:07:30:5e:e1:b7:d3:d7:61:b4:
39:03:ce:fd:fe:2c:cb:c5:a9:04:e3:00:74:b5:46:fc:9a:04:
72:b8:f5:5d:57:6a:2f:60:59:bc:0a:00:9e:0b:5b:40:e4:b4:
a4:69:d5:6b:8e:e9:58:b3:24:2e:de:99:36:29:5f:23:cc:d3:
27:1f:21:36:1c:7d:a1:b0:f8:2a:f3:43:cf:e3:9c:a3:c5:51:
c0:6f:9b:68:6e:9b:31:9b:53:85:80:81:c1:94:ca:4b:c5:09:
44:19:ff:11:f8:7f:c6:f7:c6:8e:9c:8a:67:39:0b:8a:9c:0f:
5d:11:9c:8f:db:22:35:74:c1:15:c7:40:5c:0d:e9:b9:05:2e:
77:fa:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:15 2025 by rpki-client