Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: Eq0Ssa6x6qhcgzOuaML+7H0uCw8NrHhuY28YNQEOW+Q=
Subject key identifier: 58:62:06:91:76:4D:2B:0C:3C:00:F6:C4:45:83:95:A5:CA:66:DA:C8
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 01988BEAA5953994C84F4B6275A52249E51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0AD7
Signing time: Fri 08 Aug 2025 23:01:07 +0000
Manifest this update: Fri 08 Aug 2025 23:01:07 +0000
Manifest next update: Sat 09 Aug 2025 23:01:07 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: IcCq6LW91m6/1fbAqhFP8yjAIAeRKEBtQwhFX6g+GTE=)
2: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (hash: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:a5:95:39:94:c8:4f:4b:62:75:a5:22:49:e5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Aug 8 23:01:07 2025 GMT
Not After : Aug 9 23:01:07 2025 GMT
Subject: CN=58620691764d2b0c3c00f6c4458395a5ca66dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:e0:8e:c2:1b:fa:cc:90:4a:2e:ca:e5:42:
51:5b:6a:5f:89:eb:18:61:fb:d0:5b:22:40:d6:4d:
d0:d8:df:c5:b8:05:48:67:aa:ed:a7:93:76:76:1f:
c8:38:df:83:33:36:b4:0c:65:e0:75:48:c7:d5:e8:
27:07:23:35:48:e6:42:20:1c:c6:6b:2e:3e:08:5b:
00:3c:c2:96:9b:54:29:c0:0e:a8:af:c1:8e:3f:9e:
6e:c8:e1:19:fd:68:85:c4:05:07:e7:23:d3:13:ff:
a7:12:cd:df:15:a9:16:9f:06:7f:09:bd:69:12:b4:
8a:10:47:d3:10:ef:ab:85:46:db:c0:ec:41:7b:6f:
ae:f2:45:33:ce:e5:5d:8b:31:b2:b2:70:54:0a:29:
8c:16:04:da:5e:37:93:40:6a:38:37:d4:e1:49:9a:
0a:90:40:09:f9:f8:b6:7d:d9:ec:33:cb:1d:00:a2:
9b:e6:9a:44:02:64:f1:c3:c7:df:77:5d:3d:44:36:
07:20:eb:2f:66:38:38:e5:47:68:8e:13:8c:47:82:
1b:e9:b9:c2:67:66:c7:81:ca:84:86:de:ad:72:3c:
50:17:f0:db:f2:34:a3:45:1a:28:71:95:e4:11:29:
77:4b:78:09:35:49:f9:20:df:63:5f:c7:58:81:6f:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:06:91:76:4D:2B:0C:3C:00:F6:C4:45:83:95:A5:CA:66:DA:C8
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a8:b5:e7:a6:e0:a8:28:0d:aa:08:b3:88:6d:5a:b4:15:96:
4c:ac:24:5a:2e:b3:4b:79:e7:6b:99:31:e2:09:2c:00:93:56:
7b:ac:d5:b2:da:bd:f9:62:f0:4d:18:38:32:2c:92:f9:a4:22:
d4:c7:78:3b:04:4f:c6:41:fa:28:7b:dc:06:6c:c7:47:e1:cf:
04:a6:db:4e:9c:a3:50:ed:50:ee:d3:a0:c2:bb:3c:3e:39:a9:
00:ec:46:bb:49:60:61:03:d7:d3:e5:da:a7:bf:87:78:90:e2:
4a:97:96:c5:f5:d2:6d:ee:78:35:e1:3b:ba:e6:12:d2:80:c1:
b4:d3:a8:a7:88:f9:2f:97:fb:ab:43:f5:a2:2a:22:a0:71:13:
e9:96:7b:3c:2a:1e:32:8d:f5:d8:5e:eb:b0:b4:71:97:df:95:
af:44:ae:b2:fe:94:d1:1b:b1:b6:12:7c:f5:11:6a:32:e1:c6:
d9:3b:03:31:98:65:06:5a:04:b3:70:49:82:ff:2e:93:34:1d:
a2:a3:88:83:0e:08:a1:dc:e9:e1:3b:7b:82:35:05:10:98:0e:
24:b0:3a:6e:3e:80:02:8f:fe:a1:22:42:6c:3b:08:fd:f6:04:
16:7d:85:c1:06:0b:29:14:0e:66:61:95:c8:2a:0c:24:56:a3:
c0:94:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:35 2025 by rpki-client