Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: yHopjDzYO821C3yU63kd1kh2RAlmg09nKwbPVcFnYLo=
Subject key identifier: D9:BA:E2:0E:A2:1B:E2:AC:D7:DB:47:3D:8E:5D:D7:74:D9:C6:F0:73
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019879ADAAABDEC3D7C369BA0DF497A7EE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 0777
Signing time: Tue 05 Aug 2025 10:01:21 +0000
Manifest this update: Tue 05 Aug 2025 10:01:21 +0000
Manifest next update: Wed 06 Aug 2025 10:01:21 +0000
Files and hashes: 1: N75Q0uiaGqKgGJ2k7yeqIONc8k0.roa (hash: Q63lKGUZoNUeD8FAv4eG2ZAxCKPCbVbyxrGYOjEepus=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: UhIKrMOdrnVB8ggV9+yFOj6HXxWOqWO1sE8zRNqJuMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:aa:ab:de:c3:d7:c3:69:ba:0d:f4:97:a7:ee:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Aug 5 10:01:21 2025 GMT
Not After : Aug 6 10:01:21 2025 GMT
Subject: CN=d9bae20ea21be2acd7db473d8e5dd774d9c6f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:7e:8a:a7:6e:8c:44:aa:95:a4:e9:95:29:
0b:59:c4:91:5e:98:bb:12:34:55:ec:35:68:09:e2:
da:a8:63:56:d8:0a:ae:47:22:44:62:51:5c:4d:dd:
92:32:61:cc:df:d0:02:a0:2f:bd:e4:43:73:6c:d8:
b0:7c:6b:e7:5e:87:80:c3:f3:7a:74:ca:80:77:6f:
42:05:db:13:f9:61:ef:6b:07:62:88:6b:15:9c:2b:
e0:1a:24:4b:77:0b:3b:c5:f5:19:3e:35:7f:15:29:
73:f9:b6:e2:f3:60:4c:e0:ed:dc:ce:26:43:fc:d2:
4f:e9:86:9e:75:81:4b:aa:20:f9:d1:ea:99:76:70:
a7:7d:30:e1:78:fa:8f:79:64:46:26:7a:4e:20:3d:
57:4c:8f:db:50:54:89:bb:f1:d5:f1:27:26:95:74:
3f:58:2e:f3:0b:2a:3d:d6:f3:c6:8a:cf:ed:4b:bc:
83:e7:a0:d8:27:64:b6:63:d2:3b:50:4c:89:65:db:
b0:00:ad:5d:86:03:67:a0:63:d3:5d:a0:73:5d:bf:
18:a6:26:79:a8:d9:4c:30:c3:21:bc:79:81:4f:39:
a9:d8:8e:9b:d1:1c:d6:f0:78:12:05:4a:10:57:31:
aa:5e:b0:84:94:28:54:4a:6e:77:1c:2c:ee:0f:b5:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:E2:0E:A2:1B:E2:AC:D7:DB:47:3D:8E:5D:D7:74:D9:C6:F0:73
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f9:9a:1b:4f:be:19:ee:3a:a4:76:49:17:e4:8f:06:84:fc:
40:ed:35:27:b0:2b:9f:80:df:74:b2:a1:2c:61:7c:d0:67:cf:
e7:b6:4f:da:f2:69:8a:49:f0:8a:b3:c1:a5:8b:c6:37:09:20:
75:81:44:83:d9:a9:d9:49:69:ed:24:ab:fa:fa:21:c5:38:3d:
47:c2:24:83:52:7e:45:4c:06:81:9e:b3:fc:e7:ca:fc:29:0a:
c3:75:44:4c:48:59:3b:74:f6:02:b3:bd:19:67:93:7c:83:66:
67:df:3d:37:88:e9:fe:93:be:26:23:de:ef:05:c4:68:85:55:
47:20:7b:61:e2:86:d7:23:f2:3b:98:64:22:b8:94:26:9f:b7:
9d:66:45:fd:53:93:1d:db:33:37:9d:d1:a4:00:13:14:8e:1b:
f9:c5:0c:0a:df:98:bb:a0:4c:0d:6b:19:99:1a:40:ce:8d:b6:
72:b0:ad:3e:8a:d6:a5:61:1d:d0:9f:cf:cc:b6:54:6b:bf:44:
89:68:a6:71:c8:41:73:9a:0c:c5:40:0a:42:45:ae:f9:79:ea:
94:d2:56:b7:4a:4f:3e:27:4a:f6:86:77:f8:d2:ad:cb:b2:00:
c0:b4:fb:0a:f4:38:09:c6:9c:7d:cf:ab:e9:24:09:ef:ab:28:
f8:e0:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:58 2025 by rpki-client