Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: IwXutaS/IvXdG3JquleKXvj6dSiRBZS6K1D5YYg0iCc=
Subject key identifier: F7:00:B8:FD:F3:4B:B7:27:ED:93:86:1E:F5:08:CC:BF:A0:1E:9B:88
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019895923D74B4E8F3DC999D2FFAADCC2879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 20:00:45 +0000
Manifest this update: Sun 10 Aug 2025 20:00:45 +0000
Manifest next update: Mon 11 Aug 2025 20:00:45 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: 2l+Yop9kgQBWHQLyWAh4mxi1vQV4yxxqsoRWt/lRG3Y=)
2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:3d:74:b4:e8:f3:dc:99:9d:2f:fa:ad:cc:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Aug 10 20:00:45 2025 GMT
Not After : Aug 11 20:00:45 2025 GMT
Subject: CN=f700b8fdf34bb727ed93861ef508ccbfa01e9b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:9d:be:73:cc:38:59:d4:1d:0b:3a:a1:27:
be:83:ed:3a:a7:2c:64:03:31:6e:36:f4:8e:94:08:
f4:86:eb:7b:c0:1e:e6:2a:08:c0:91:9f:9d:d5:19:
a3:7b:64:3d:26:4d:2b:42:a6:32:31:c4:5b:42:2c:
31:f9:24:d1:2a:a8:32:53:ef:6c:35:38:d4:2a:1a:
71:08:31:86:50:cb:ab:63:b9:de:ee:a9:e6:5c:d1:
8b:63:6f:3f:ca:0e:10:8e:bf:57:17:1d:6e:62:42:
2e:bb:8c:5d:d5:39:af:c9:ef:ff:f6:fb:8c:6a:7f:
6e:ab:f2:04:31:52:72:c2:9f:3b:d9:79:bd:56:04:
b5:c4:70:35:fd:2e:e9:c8:fe:bb:ff:07:2e:3b:12:
17:22:e2:eb:69:a7:6f:e0:54:5a:7f:85:24:28:b0:
51:91:9c:89:3d:5b:05:d7:df:56:5b:53:ff:0b:87:
c1:e7:c0:f5:da:5e:4b:da:b9:de:82:69:05:55:76:
65:11:47:7f:a5:06:64:e4:9d:5c:f9:75:bc:04:a5:
ed:b2:b1:da:5f:e1:51:8c:52:39:64:a2:67:d1:7e:
bc:6e:cb:cb:4b:a0:17:aa:8a:e9:62:b1:83:dd:21:
fc:03:14:c2:80:18:a3:1c:07:76:fe:6d:93:51:c9:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:B8:FD:F3:4B:B7:27:ED:93:86:1E:F5:08:CC:BF:A0:1E:9B:88
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d8:94:47:26:fa:46:e0:f3:47:65:8d:4f:8c:eb:33:73:d5:
a6:de:b6:c9:b0:99:90:74:82:a3:26:4b:d2:09:3e:1e:d5:5c:
dd:1f:1c:ac:34:ba:28:b9:e1:7a:89:c7:cb:36:9c:2b:16:d9:
a3:32:e3:f3:ac:9d:88:8d:d8:a3:69:02:e1:14:34:7c:87:a9:
a8:ac:47:b4:f6:82:64:8d:cb:8c:5a:99:d8:8f:1c:14:21:b5:
ef:3a:3b:c2:b1:3c:ec:8a:e5:30:15:8b:25:a0:23:25:fe:40:
05:b7:95:44:05:a7:0c:20:01:05:06:a6:33:64:a1:ec:e1:55:
6c:e2:10:d2:6e:2e:76:b1:28:7d:10:da:26:99:14:a8:ed:87:
44:d0:9a:7f:bf:43:f4:cd:1a:13:43:7e:c1:a3:d2:ff:12:0b:
1d:0c:64:d2:1a:4a:67:c0:d2:4b:f0:16:f4:9b:df:52:cd:e7:
09:d3:f2:a1:7e:ed:ff:e4:c3:bc:28:02:a8:35:36:7e:bf:21:
8a:ed:30:6e:20:6e:64:dd:a2:4e:55:bb:33:b8:c0:d0:25:d0:
b2:e7:5d:4f:3b:0e:39:ab:01:80:0a:44:09:b9:bb:ee:6d:12:
1a:7a:c7:76:c6:8e:79:20:b7:6e:d9:2e:d3:24:ca:ab:12:10:
08:f1:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:59 2025 by rpki-client