Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: kzxc8lzmvefB4WBq4F8dh2zjhon6V1G298H5xqP14DA=
Subject key identifier: 0F:C9:F3:80:65:1B:3B:3F:B8:91:AD:BB:48:D0:A4:4F:D2:58:7E:AA
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 019872CF857DB7E2839949D9E3A9F126AE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0D8D
Signing time: Mon 04 Aug 2025 02:00:59 +0000
Manifest this update: Mon 04 Aug 2025 02:00:59 +0000
Manifest next update: Tue 05 Aug 2025 02:00:59 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: sGkcokNAA7S5J9/qMgIOxqHEyvy0O9dUNfL4DjOTld0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:85:7d:b7:e2:83:99:49:d9:e3:a9:f1:26:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Aug 4 02:00:59 2025 GMT
Not After : Aug 5 02:00:59 2025 GMT
Subject: CN=0fc9f380651b3b3fb891adbb48d0a44fd2587eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:53:8f:32:f4:22:16:4f:a0:ce:8e:61:09:
c4:f1:21:92:ae:8d:e8:83:3b:41:da:e6:a1:b4:09:
f7:12:5e:d6:e7:0e:9e:57:d6:9e:d5:d8:94:a3:c2:
9e:68:ed:ba:ea:92:3d:1f:b7:80:7c:13:1a:c9:3d:
04:59:8c:a4:66:16:45:0a:37:95:41:db:8f:24:9e:
94:c5:75:11:fa:61:f2:40:7d:76:a9:0d:48:f2:ba:
27:f1:45:77:55:fc:7f:7c:86:7d:57:4f:c9:80:b3:
ef:30:40:e8:b8:52:58:3f:d1:be:05:63:ce:24:5e:
82:58:8f:3f:b9:50:bb:5a:af:3c:61:0e:37:1a:35:
aa:83:3b:2b:84:5b:58:82:02:05:d8:46:1d:58:39:
3c:cb:98:02:8e:12:3a:03:d9:3b:22:0f:d9:4d:82:
3f:31:f0:92:87:9c:23:e8:9d:4b:dd:9a:70:bc:4a:
12:62:38:7f:59:60:c6:de:56:25:90:f3:d8:aa:f9:
30:e5:ee:e8:a0:0f:d9:41:6b:fd:a9:ec:c2:35:87:
19:02:f0:16:8a:ce:a1:31:9b:25:9c:75:d4:06:33:
ee:87:3e:4c:7b:cf:ed:94:ad:8b:b0:19:3a:0d:5b:
1e:2d:9a:3c:61:84:73:7b:46:4c:7d:ef:d1:4c:e6:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:F3:80:65:1B:3B:3F:B8:91:AD:BB:48:D0:A4:4F:D2:58:7E:AA
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:f1:c1:29:65:a4:f2:61:69:d7:7c:45:d4:78:a1:3f:ce:
7d:bd:c8:3b:54:55:86:83:a9:05:db:af:d1:ce:95:34:e3:14:
c5:dc:3e:b2:8d:e3:1a:7f:ad:2a:3a:e2:b2:87:ed:7b:5c:04:
f2:b4:aa:49:47:a7:37:ec:04:fe:94:72:48:86:ad:63:c9:45:
36:9d:f7:48:48:59:13:98:d4:c1:d7:40:55:be:ee:1b:7d:f5:
ad:8e:16:9c:55:f7:96:af:f5:b6:c6:ab:e3:4f:52:53:85:e8:
38:12:b6:f2:5a:d6:00:3e:7f:7f:1b:f1:67:e9:af:29:68:d6:
56:aa:c3:2f:80:88:fd:d7:01:4f:55:30:f6:e8:a0:03:27:9f:
ca:a7:e7:f2:97:a4:9d:04:44:79:82:55:27:9a:74:7c:a2:48:
d2:9f:ad:ec:ad:64:e4:f0:31:7b:b4:69:82:48:1d:00:20:84:
48:59:f7:7f:2c:5c:fa:dd:21:60:31:9c:c3:58:d3:1c:25:f1:
b7:ae:32:ba:74:66:28:c3:0f:31:79:c6:36:05:f9:91:5a:1a:
21:80:1a:74:86:ac:41:d4:84:13:d4:27:6f:58:c3:12:8b:8b:
7a:5b:b7:e0:e9:0c:65:12:af:1c:d2:7f:b8:a0:5d:c2:ac:91:
0b:62:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:32 2025 by rpki-client