Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: t72c8rpv646hqtFEnLiLpdh1uB0KK0DlgEtpsHAE0+0=
Subject key identifier: 00:6F:43:87:43:65:3C:AF:04:07:65:FE:FB:67:4A:98:FF:5D:C5:94
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01987C40A212B333EA04A0DCC9FD8A3CD843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 22:01:07 +0000
Manifest this update: Tue 05 Aug 2025 22:01:07 +0000
Manifest next update: Wed 06 Aug 2025 22:01:07 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: d/xucM5YFTXPjawp6dBtFPq7s1VJMzgtDsY9OgcmKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:a2:12:b3:33:ea:04:a0:dc:c9:fd:8a:3c:d8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Aug 5 22:01:07 2025 GMT
Not After : Aug 6 22:01:07 2025 GMT
Subject: CN=006f438743653caf040765fefb674a98ff5dc594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:ce:4e:87:60:fd:92:0c:48:a3:4d:29:24:
3b:59:a8:c4:a9:dc:af:ae:62:b4:56:bc:b3:87:d7:
95:bf:b1:84:1a:04:a1:f2:d9:bc:1b:1e:b3:cd:78:
ff:48:c6:bf:3b:5b:5c:c8:6d:69:32:d3:8e:7e:57:
e9:d1:db:e1:f1:bf:02:64:f7:59:d2:9a:6e:86:05:
51:a5:3f:59:91:51:6a:ea:6d:e2:03:81:42:3e:8c:
ce:19:3f:76:ea:a6:74:86:6b:aa:1b:06:84:34:23:
1b:f5:e0:37:d8:dd:33:73:66:10:9b:7a:b6:ea:18:
35:d3:13:1f:36:11:dd:26:c0:78:da:98:ec:7b:49:
06:ae:bc:34:1d:bd:3c:3e:56:d4:01:fd:1b:19:7e:
34:66:f4:0e:18:13:df:c4:be:21:06:fc:aa:a6:11:
3f:43:02:33:f7:d2:8a:7f:24:a6:fc:43:6f:cf:4c:
88:e5:cd:a9:0d:d1:01:a7:c8:5c:e3:f2:a8:74:d8:
fb:28:12:e9:da:52:86:6a:dc:bc:09:2b:49:7b:dd:
85:ab:6a:c1:5a:fb:b7:42:28:ca:66:26:ed:77:44:
74:31:0b:9f:d1:c2:ea:22:56:b1:61:c3:40:88:8a:
6d:0c:b4:59:bc:ac:6c:f7:61:bc:64:c9:22:29:4c:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:43:87:43:65:3C:AF:04:07:65:FE:FB:67:4A:98:FF:5D:C5:94
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:6a:6f:b7:ee:96:5a:c0:53:28:00:86:e6:e3:31:39:b4:
5f:ac:25:5e:49:c1:4b:99:64:4a:f7:10:39:90:10:09:14:b8:
05:67:b7:f5:04:69:12:7b:3c:6f:57:39:db:3b:74:04:21:3a:
53:5a:05:44:dc:de:96:c2:b3:f0:00:aa:55:a1:2b:27:57:d5:
4b:d6:44:82:03:03:04:fc:f2:c4:9b:58:0d:e9:4c:65:8d:4f:
44:15:5b:8c:68:dc:6f:06:cc:bb:27:84:9e:6c:d1:35:48:c8:
7f:fb:31:a0:38:fa:82:be:55:47:b2:3b:a4:15:24:12:2a:a1:
77:53:19:61:e1:75:91:89:dd:ff:2b:6b:b5:34:ec:cd:37:9a:
de:06:ae:e8:b9:a3:f5:f1:9d:97:67:5a:99:92:0c:ed:ca:af:
a3:3a:c4:e2:42:23:43:a3:1e:06:de:f4:e2:4b:bb:3d:aa:35:
1a:9c:61:4a:1c:49:86:3f:4e:ed:af:71:42:b0:2a:dc:eb:1b:
32:9d:a1:8c:c1:af:63:46:c4:1a:09:87:b1:b4:ce:92:82:7a:
b3:a0:f3:59:b5:ec:3a:d5:2a:16:0c:20:6e:27:d1:89:15:78:
c1:12:aa:38:77:e0:bb:62:fc:92:6a:b8:e7:33:05:8c:79:ed:
4c:57:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:53 2025 by rpki-client