Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
File: h9OLoS9GKcITH8YOiVDWwwO-fSI.mft (raw, json)
Hash identifier: 9NZRH/IQI3yHft/KPXgcfMiK+NpomEuR9babkzNv/KU=
Subject key identifier: 16:E6:AF:84:22:96:A7:CA:72:B7:B1:5F:4A:FC:F4:8E:E4:4E:C7:8F
Authority key identifier: 87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
Certificate issuer: /CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Certificate serial: 01987DC122EDA85767ED5B9E07CDBF2E51A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
Manifest number: 077E
Signing time: Wed 06 Aug 2025 05:01:06 +0000
Manifest this update: Wed 06 Aug 2025 05:01:06 +0000
Manifest next update: Thu 07 Aug 2025 05:01:06 +0000
Files and hashes: 1: NPXq7VLWTvwMe_H1BOcCF7vP8QQ.roa (hash: UBan9KbEcKtiRn9epXoesYMRtYi5lW0QY6/c4yNUKv8=)
2: h9OLoS9GKcITH8YOiVDWwwO-fSI.crl (hash: bwcOSPE2tETdZMpHOiFYIer/PmFwHNPHDbzYC3Gzynw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:22:ed:a8:57:67:ed:5b:9e:07:cd:bf:2e:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d38ba12f4629c2131fc60e8950d6c303be7d22
Validity
Not Before: Aug 6 05:01:06 2025 GMT
Not After : Aug 7 05:01:06 2025 GMT
Subject: CN=16e6af842296a7ca72b7b15f4afcf48ee44ec78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:29:bb:a1:dc:3e:ad:6a:93:0a:25:da:c5:
3e:5d:b5:07:d5:18:4a:32:d1:7f:c4:bb:21:65:6d:
6a:a0:88:64:f6:cc:4b:81:33:d8:7e:7b:ce:c5:0e:
03:4f:d5:3b:c3:37:4e:a2:52:75:37:81:e1:7e:14:
fc:1b:f5:c0:0c:72:68:f3:aa:29:69:50:15:3e:7a:
49:18:b9:6b:41:39:4b:38:35:a2:e0:26:3d:a6:57:
f0:d9:ca:77:be:e9:92:15:99:9a:8a:8f:58:24:90:
c2:06:6e:47:7a:fc:b0:28:54:e4:1e:3e:0f:71:bc:
5d:23:7a:18:cd:9b:9f:f4:74:3a:b2:b5:39:b9:a2:
16:cc:09:2a:c7:55:fb:2d:d9:b2:98:1b:8f:f0:2a:
c8:ef:20:12:d9:cb:e3:5e:a6:e8:0c:e6:d7:cc:6a:
ff:fb:0a:1b:d2:49:a6:c3:9d:f0:ea:84:dd:bd:4d:
a6:c4:77:09:48:70:21:33:26:5c:88:d3:92:23:bf:
5b:d6:d1:d7:c6:e3:b2:6e:c4:c2:36:ab:bb:fe:67:
63:1e:88:59:b5:6b:b5:b8:9d:fa:ee:86:d6:4e:8c:
6b:23:e2:12:08:8c:17:36:b1:a5:d4:65:01:2a:c8:
df:96:ce:11:a8:c3:ec:1d:65:82:fe:6f:78:02:04:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:AF:84:22:96:A7:CA:72:B7:B1:5F:4A:FC:F4:8E:E4:4E:C7:8F
X509v3 Authority Key Identifier:
keyid:87:D3:8B:A1:2F:46:29:C2:13:1F:C6:0E:89:50:D6:C3:03:BE:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9OLoS9GKcITH8YOiVDWwwO-fSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d2141-ecb8-4289-9669-fd55c58edaf7/1/h9OLoS9GKcITH8YOiVDWwwO-fSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b2:5f:8f:b4:40:18:15:c7:ef:f3:a4:37:a7:dd:93:27:2e:
7a:3b:dd:0a:81:6f:07:de:f0:62:cc:d3:bc:e6:0c:8b:aa:c2:
38:cd:fd:29:9c:1a:91:dc:c0:40:32:05:4a:1a:a9:91:4d:97:
e4:22:d2:3f:65:41:d9:7a:d7:2f:e8:c0:8c:25:6b:9f:e9:81:
6e:5f:19:be:6c:06:6d:1f:13:07:ea:b3:17:fa:0f:b0:50:67:
21:af:e5:d5:af:9c:21:e1:31:bf:32:76:75:e3:bd:29:de:51:
6e:ca:2c:7c:ef:7d:b3:1f:4e:35:9d:ca:8e:7d:63:a7:b1:6f:
6f:c0:3c:80:e2:4b:31:55:72:8a:2f:2e:57:d7:e7:70:ea:52:
e7:18:f3:ec:91:49:eb:96:51:bb:1a:fd:78:6d:5f:32:8d:47:
f7:20:65:47:b3:1f:21:5e:04:30:31:e9:5e:fa:3c:a9:3e:57:
0e:10:48:cf:65:80:07:d3:ae:ad:70:a1:88:64:ff:97:d1:62:
b1:36:e0:d3:a2:4c:ed:ff:1f:e1:b4:94:10:e0:dd:38:d3:c2:
25:6e:e3:94:8a:61:fd:d2:a6:6f:e8:be:da:48:86:31:02:f1:
36:c5:87:1c:f4:60:23:7c:1d:7c:26:d0:07:18:54:b2:d1:33:
6b:0c:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:22 2025 by rpki-client