Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: B6vkqGtAhNFYz9PXx23udqDI3Hafy/gQH7g05hQKmKg=
Subject key identifier: 51:9E:F6:DF:D7:C0:04:AA:F2:D1:1E:E9:DA:BE:88:CD:7A:E6:50:48
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 019875628819EB12453364D623EF7EE6901D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 0944
Signing time: Mon 04 Aug 2025 14:00:48 +0000
Manifest this update: Mon 04 Aug 2025 14:00:48 +0000
Manifest next update: Tue 05 Aug 2025 14:00:48 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: Cjn7Jrch/704s08lzGhYUB93fBMo/rf7WJGX+b2Z5Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:88:19:eb:12:45:33:64:d6:23:ef:7e:e6:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Aug 4 14:00:48 2025 GMT
Not After : Aug 5 14:00:48 2025 GMT
Subject: CN=519ef6dfd7c004aaf2d11ee9dabe88cd7ae65048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:85:ca:7c:9b:bc:a5:bb:82:cb:b8:7f:84:
64:a9:4e:54:76:e1:90:50:19:86:ee:af:0a:b9:41:
b8:4e:3a:ff:e5:b7:b7:77:99:96:66:55:05:a4:c6:
d8:ea:4a:c7:24:eb:4c:7d:fd:e5:ce:c7:c9:20:52:
b1:5a:a7:f0:81:1a:f7:da:df:c1:32:f8:c6:dd:dd:
e1:41:1b:5c:9e:02:41:29:87:fb:db:2a:23:0a:fc:
73:57:18:cb:bd:1a:d4:b6:d3:2c:49:4a:57:55:cb:
83:5b:8f:6e:a1:39:5a:d3:45:fe:06:89:6f:f5:3f:
fd:3d:7c:c6:d2:bc:8a:53:c1:73:a8:65:50:70:27:
ea:f9:0b:1e:fd:b2:c1:c4:d9:46:b8:04:a6:74:19:
72:80:12:8a:3b:53:eb:6c:0d:aa:ab:5f:66:0e:b5:
df:b5:66:ca:28:4c:20:ba:2e:88:e1:24:c0:d8:5f:
41:15:7f:45:2a:fc:54:d0:1f:18:67:34:f5:b5:ef:
ad:7a:e8:75:e1:37:67:19:9e:26:b9:25:5a:3c:03:
40:aa:ff:b5:f0:8e:96:39:96:45:bf:9f:9f:1e:09:
a3:d6:90:4e:60:30:13:fe:be:5d:21:bb:e3:90:27:
d6:a6:4d:41:ea:60:37:71:86:a2:dc:2b:0c:f0:64:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:F6:DF:D7:C0:04:AA:F2:D1:1E:E9:DA:BE:88:CD:7A:E6:50:48
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:38:12:0c:40:cd:c1:98:b1:76:7c:b4:a6:79:12:22:a9:fb:
a6:34:46:5b:63:7a:d2:ba:10:fb:4c:51:3a:d1:04:40:f5:2f:
b3:81:1b:ef:e5:21:e9:ed:3f:08:b9:fc:ad:bc:b2:fa:8c:b6:
87:2b:34:80:2f:05:63:ff:7a:46:05:33:66:cb:b6:a2:10:8c:
17:57:1c:22:2b:76:48:f8:48:40:e4:3e:66:b3:16:7f:32:06:
e1:27:71:60:81:ab:56:83:6a:50:c8:2b:5d:90:50:d0:9d:06:
c0:43:ac:3a:dd:b0:d6:c1:50:65:23:88:93:82:70:48:d5:d8:
52:a5:45:c5:68:01:b8:ea:6b:26:63:43:99:99:54:f0:a1:00:
40:ef:79:a9:fb:f6:54:a6:52:96:da:15:39:79:1b:f8:22:6c:
81:43:0a:c4:98:a1:c1:4e:e6:bc:89:90:e3:e9:30:5d:8a:12:
12:7b:5d:79:d8:73:50:19:01:35:53:9e:ca:4c:e3:56:b3:c5:
26:00:37:9f:a9:e1:88:4a:d7:02:9a:56:37:07:ac:ea:ec:b2:
6e:f2:c0:28:25:5c:6a:59:fd:be:69:7a:16:4e:64:b8:df:9a:
f1:f2:91:be:6e:fb:2a:5a:47:74:18:89:d2:22:60:df:64:1f:
21:8a:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:18 2025 by rpki-client