Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: 6BSHoAkIQZ7XZbToPjyAYDl18aThJVrhysCmnR1uKNw=
Subject key identifier: 96:E1:BE:3C:7C:57:01:F6:E3:1A:25:8F:BA:55:4D:46:A7:90:18:B7
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 01987450A9D79C98E921DED0198AE806A57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 01E2
Signing time: Mon 04 Aug 2025 09:01:40 +0000
Manifest this update: Mon 04 Aug 2025 09:01:40 +0000
Manifest next update: Tue 05 Aug 2025 09:01:40 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: QyfjhZRpHffCS2XkMuSUrKiB+5BT8A8fmvLBcVZeItM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a9:d7:9c:98:e9:21:de:d0:19:8a:e8:06:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Aug 4 09:01:40 2025 GMT
Not After : Aug 5 09:01:40 2025 GMT
Subject: CN=96e1be3c7c5701f6e31a258fba554d46a79018b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:c6:68:40:07:09:15:7a:04:5f:03:56:f3:
24:70:c4:6c:46:44:41:e2:ca:78:06:cd:ab:7f:0e:
46:0b:72:40:fb:0e:80:27:c7:f8:bb:20:d4:2c:19:
49:1f:69:10:72:56:11:dd:15:66:ee:4a:60:55:da:
24:2a:6d:41:15:da:18:6f:45:da:6a:89:47:40:a8:
48:46:19:7a:fb:04:d6:5e:df:23:31:e3:3c:68:e6:
57:03:b0:a4:fc:d3:15:7a:fe:86:56:29:80:91:e7:
57:1b:83:38:b2:7d:dc:e6:0a:0d:29:f5:82:b5:ea:
50:9c:68:fd:4f:42:97:be:c8:8f:e1:22:7e:e4:9a:
45:14:89:a0:64:b6:78:2c:ed:0f:db:0e:4f:dc:24:
5f:ee:5e:68:e0:93:1f:01:36:27:92:58:48:6b:4d:
0e:7d:8e:48:4e:cf:04:e4:fb:76:a2:e3:8a:ef:92:
96:9e:ad:26:17:48:98:4e:28:05:02:90:9c:75:6c:
e5:36:71:9a:6a:0e:e5:af:08:d1:d9:56:4f:2b:ec:
72:0c:bd:4a:05:c7:32:66:e3:14:1f:57:ad:62:c2:
b3:41:40:00:32:0f:78:40:81:63:e2:4d:c5:10:92:
b9:71:0c:94:93:df:3a:ee:05:70:20:a2:91:b8:e8:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:BE:3C:7C:57:01:F6:E3:1A:25:8F:BA:55:4D:46:A7:90:18:B7
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:03:2b:b2:c9:91:95:ef:83:83:41:c5:bf:38:86:b4:e0:ec:
46:31:c0:b2:28:68:b7:7d:10:db:41:cc:7e:32:a7:62:48:6d:
d3:87:6d:e3:cb:9f:30:43:d4:d1:cc:ec:ae:64:bb:05:b0:ae:
18:53:db:33:79:86:69:c2:fb:38:5c:4d:38:fe:b5:b2:d4:c3:
7c:a7:d0:9f:87:91:73:12:75:df:af:2c:ad:bc:b0:b9:49:9f:
c0:2d:e0:c4:8a:dc:48:63:56:35:63:d0:bc:96:f3:fc:6c:06:
64:b2:be:2b:5d:c5:0f:c8:ac:c1:a4:b4:e5:6e:21:3d:a3:91:
8e:0c:4e:26:42:25:13:44:3c:a0:8d:e4:06:30:73:4c:b5:fc:
02:24:40:62:ba:10:b6:0c:5d:42:11:80:4f:0f:7b:e6:97:2e:
af:a3:4d:ad:4e:16:93:f2:fe:8b:58:36:c8:65:2b:9f:a4:05:
ab:11:f7:9a:8c:42:a7:54:f8:f0:cc:2c:1b:d7:3b:c2:26:22:
aa:fb:d8:80:c4:10:76:14:23:ed:11:ea:83:c3:08:f6:22:f1:
ee:f5:29:97:95:52:37:a7:f9:05:0d:f4:2d:21:c0:cc:e0:43:
47:45:16:f6:c0:c4:0b:98:66:3e:08:c5:8a:96:b3:8d:e8:7e:
82:b8:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:34 2025 by rpki-client