Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: I3bJMKf4fDivAdi/uG0JrNc00LW/uWT3UPJLwJAM80w=
Subject key identifier: 27:8B:16:AF:50:1D:34:3E:CC:82:49:0B:A2:91:14:F4:F8:9C:77:7A
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01988F22C018883FBD0D9E9FB089DE46D2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0A7E
Signing time: Sat 09 Aug 2025 14:01:15 +0000
Manifest this update: Sat 09 Aug 2025 14:01:15 +0000
Manifest next update: Sun 10 Aug 2025 14:01:15 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: TEagsRIbxkgl9tRW9KSXC+faV4xMj+rK1wdSMJwvocQ=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:c0:18:88:3f:bd:0d:9e:9f:b0:89:de:46:d2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Aug 9 14:01:15 2025 GMT
Not After : Aug 10 14:01:15 2025 GMT
Subject: CN=278b16af501d343ecc82490ba29114f4f89c777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:51:f6:9c:13:c8:90:c3:12:40:5c:dc:27:
a1:8b:9a:85:8e:33:a3:9e:97:b2:26:55:dc:d1:53:
94:46:97:bf:7e:f6:a7:5a:0d:f0:94:63:9b:83:f8:
f5:df:4d:9d:97:d0:57:1c:a2:19:4b:a8:02:cb:f3:
e4:58:e4:2f:b5:32:17:e8:2b:98:d2:5d:4a:16:0e:
db:ef:3f:ff:de:8d:b7:a5:45:3e:d9:0e:01:c3:e2:
8b:0b:68:ca:f5:fd:fb:2c:cc:e6:02:b6:b0:52:9d:
75:8d:94:fd:9c:85:c8:d0:ba:6a:47:9d:ab:61:37:
89:54:72:2f:ba:82:c7:71:7b:97:fd:a7:62:03:86:
bf:0e:7f:68:03:f7:83:45:01:4a:d2:1f:fe:f6:64:
4c:c3:2a:f3:1c:73:4d:fe:c7:34:7e:f1:39:96:42:
8b:c9:3c:e0:db:49:b5:c2:64:79:8e:31:cb:a9:e2:
4c:30:5d:f1:7d:2a:6f:d7:79:fc:cc:50:30:c1:49:
b7:20:3d:64:51:54:34:b7:c3:9a:5c:f9:b1:48:01:
12:a7:a6:3a:b1:16:f8:11:ed:ad:5e:ae:7f:85:15:
38:0f:c5:5c:f6:4d:ec:02:8f:ce:ab:0f:63:c1:e0:
eb:4b:61:f5:57:70:36:17:0a:6d:a9:d1:f1:48:fd:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:16:AF:50:1D:34:3E:CC:82:49:0B:A2:91:14:F4:F8:9C:77:7A
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a5:bf:61:94:89:05:a6:72:ba:d8:35:9c:de:db:fe:8c:c8:
ad:3a:e8:4a:4e:38:0b:57:aa:99:ff:f8:6e:55:8f:bb:81:16:
b1:79:f5:1e:00:83:d5:43:a5:fa:c3:0d:a1:0e:75:5f:94:d2:
33:e1:57:3b:81:27:7b:a1:61:85:de:38:a1:88:45:18:14:bd:
ac:65:cf:e7:48:07:d1:e3:79:93:e2:a0:8b:48:6b:ef:a6:49:
ea:da:13:57:de:b9:3f:90:2a:97:90:b7:93:fe:50:fc:26:9a:
e9:7b:f0:e7:ad:fb:e7:9e:77:0f:3b:dd:55:19:6f:35:3e:61:
78:43:cf:0b:dc:0c:9b:b8:51:a2:ef:2b:97:a8:60:07:b4:ed:
a9:da:af:18:48:a3:d1:10:db:93:3c:99:0f:75:83:d5:21:fd:
46:bd:ec:fe:0d:99:67:43:82:e0:7d:68:07:a1:fb:6a:5a:0f:
3b:ef:68:3e:16:7b:d4:f3:4d:f1:d2:32:a8:04:88:e9:5b:e2:
f0:8d:10:4b:42:92:dc:d7:fb:75:d4:25:b7:80:1c:56:a9:5a:
0c:d8:d5:08:6a:12:26:ea:7d:97:ad:ef:3c:7e:cd:f9:b8:a4:
01:0b:e8:a1:b1:e6:c3:86:63:67:06:91:2d:2d:fe:ed:8a:a9:
9d:78:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:20 2025 by rpki-client