Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: /qr61qO1HXrqU9uyHIfdzXTNkwUMLfETQ3xAhrkPETE=
Subject key identifier: 7B:A1:45:07:FC:F4:58:25:2F:A8:52:AC:ED:D6:8B:E9:D8:6A:EB:C9
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 0198496513506607B13FDCDDE1BFD487DD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: A0
Signing time: Sun 27 Jul 2025 01:00:17 +0000
Manifest this update: Sun 27 Jul 2025 01:00:17 +0000
Manifest next update: Mon 28 Jul 2025 01:00:17 +0000
Files and hashes: 1: 2GTFPZ68uVkX8Ryfbx92fDQ9upI.roa (hash: lvp+RlxYyEIMygF5MN9RWgH0GLslbYAMM+G4pVyVmkU=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: NaE95UAjkCW69rMx4h/FK9azsEvK9RKZbHBLJ8D3/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:13:50:66:07:b1:3f:dc:dd:e1:bf:d4:87:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jul 27 01:00:17 2025 GMT
Not After : Jul 28 01:00:17 2025 GMT
Subject: CN=7ba14507fcf458252fa852acedd68be9d86aebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:59:00:dd:98:f1:26:06:1a:76:8a:29:6b:
cf:a4:6b:20:5a:98:fd:ea:e2:ed:87:18:45:09:57:
c1:88:78:bb:6e:35:ef:82:19:5d:4a:86:fc:04:69:
a2:38:95:11:cb:f7:0b:d7:c9:7f:c2:35:91:1e:8b:
46:ae:7f:2d:c5:c7:7b:3d:02:f6:9a:cd:71:9c:b6:
46:29:31:ca:94:ef:ff:76:e2:60:42:48:3b:95:73:
a1:bd:f7:65:2f:be:2b:ec:50:16:2d:76:51:26:74:
da:a5:ee:0b:3a:c1:e8:0d:17:91:ff:76:dd:42:25:
c0:75:c5:01:7d:8c:05:5b:27:32:2f:e2:0c:8d:b7:
d9:55:6f:17:2e:96:0f:f9:38:cc:5d:71:38:13:55:
f6:18:ce:19:5f:9e:b8:d7:a7:04:4f:db:7e:7f:1c:
23:5d:50:3b:b9:c1:a6:df:7d:33:83:e8:37:35:bf:
97:ef:c7:f6:a0:f7:70:5f:de:aa:df:e3:7e:d5:40:
7b:84:58:81:c3:76:74:55:00:a7:30:a4:f8:e6:d9:
7a:33:38:2c:15:15:d4:c1:75:10:84:47:e0:93:e8:
1f:b5:89:1f:5a:12:55:2d:2a:b8:bd:69:9d:80:00:
7b:eb:d2:f4:9d:d7:49:9d:00:10:50:d0:eb:b8:dd:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:45:07:FC:F4:58:25:2F:A8:52:AC:ED:D6:8B:E9:D8:6A:EB:C9
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1f:57:f5:c1:f0:c2:75:85:cc:fa:0e:83:f2:e7:bb:38:84:
46:16:dd:53:c5:e8:6b:2a:e0:13:ff:1d:ad:01:2d:59:41:6d:
a2:c6:1f:0c:4d:d0:cb:8a:53:4d:b2:63:7e:d6:b9:31:cd:cb:
04:76:b7:45:3c:c6:ac:5f:59:05:10:b4:b2:2e:1b:c4:d7:68:
6b:ed:7a:91:0b:63:f6:40:c2:c2:7d:ad:6a:47:ea:d9:2d:c7:
62:1d:d3:90:6d:4b:aa:37:84:cf:2b:3f:88:bc:be:50:26:5f:
8e:fe:55:74:2a:7c:1f:1b:00:f6:01:55:b5:c0:ae:d9:5d:03:
f7:f4:c9:bf:28:a9:a6:a9:9d:32:8e:ad:ca:88:6d:a9:e6:fb:
65:74:90:7a:93:3e:4f:11:8a:20:71:28:c2:a2:54:cd:88:19:
10:79:1c:5d:ea:b1:23:eb:d6:fc:53:43:5b:dd:6c:2d:0c:05:
78:03:cf:91:4d:49:8f:04:4f:19:c4:a9:69:fa:d8:6f:f8:dd:
75:fd:a8:00:19:f7:56:42:1d:43:6f:c1:bb:18:3b:3e:e3:fd:
37:55:d9:03:6b:6c:7a:bf:66:98:65:52:a5:34:78:7a:14:72:
3b:e2:2b:29:62:36:da:15:3a:c0:3d:14:a7:2b:a7:9a:fd:19:
1e:86:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:09 2025 by rpki-client