Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.mft (raw, json)
Hash identifier: KMbkC8682Yu0ABk+TgKenEyPMLv3SIeQMKVnl0yQTKc=
Subject key identifier: 3C:75:81:96:A4:E9:DD:B3:75:44:99:61:BF:01:2D:94:04:BD:E7:B4
Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Certificate serial: 01984AAEE53C67E9FDEDBFBE5020601C3162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
Manifest number: 03CD
Signing time: Sun 27 Jul 2025 07:00:32 +0000
Manifest this update: Sun 27 Jul 2025 07:00:32 +0000
Manifest next update: Mon 28 Jul 2025 07:00:32 +0000
Files and hashes: 1: Q_kLSJOWLJDEhyzkodJRQWJEfMU.roa (hash: 2p8AahImaC704aSN2Sau8pFCrbFVUG9Dz60aJg9x1m8=)
2: h-2cuDQKwglaTLBSjl6i9zjOpnI.crl (hash: TeWFuYX6FhI8b+d39aEjoBVTUp+xHwM8+bAc5rRbstk=)
3: hl-bZEBFsh1ZChc40Z0fl2eFeDc.roa (hash: GoC7lm4BXzEaLJBGVeCTSYenfrijER5VgtT8WvoxW4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e5:3c:67:e9:fd:ed:bf:be:50:20:60:1c:31:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Validity
Not Before: Jul 27 07:00:32 2025 GMT
Not After : Jul 28 07:00:32 2025 GMT
Subject: CN=3c758196a4e9ddb375449961bf012d9404bde7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:98:55:86:ce:0f:cb:32:61:9a:8d:e6:d7:
cf:c2:6d:fd:ca:90:df:45:f6:e7:2c:de:cc:73:2b:
d7:ba:4a:d5:14:39:22:e5:15:ab:69:f9:5b:5c:8a:
95:f4:3c:1f:f2:1f:98:71:db:ca:11:87:17:a6:2d:
2e:e1:2d:15:9f:ac:66:1d:a0:06:24:a2:2d:1c:e7:
16:33:a7:d2:f5:c4:e4:d8:eb:c2:97:1a:35:f0:62:
96:5c:a5:b0:f3:b7:b3:2d:67:d3:01:cb:27:f3:73:
8f:56:83:f8:28:60:a2:4e:31:d9:60:93:a4:f6:d2:
94:1c:54:90:88:90:86:49:11:4b:41:fa:a6:9b:6f:
d7:87:94:37:63:e7:7d:9a:b3:a9:5f:f5:98:64:4f:
59:da:bf:ea:14:e4:11:00:81:c8:23:ce:4e:50:95:
73:b4:43:db:72:b4:0d:87:f8:d5:c3:12:41:a4:35:
eb:8e:9a:45:4f:f3:32:8f:81:da:23:c2:5f:12:fc:
67:8a:8a:c8:71:03:6e:ab:75:7c:77:50:35:6e:88:
37:1e:5c:45:9d:a9:54:89:ef:d1:15:57:64:f7:5c:
e8:98:03:60:81:27:aa:e6:7b:21:74:f7:32:1c:04:
f5:12:6e:24:2d:68:fe:27:9b:c6:67:40:53:99:96:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:81:96:A4:E9:DD:B3:75:44:99:61:BF:01:2D:94:04:BD:E7:B4
X509v3 Authority Key Identifier:
keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0c:2e:7b:71:45:08:ef:35:7f:d9:76:2d:1e:26:b2:dc:99:
33:ad:60:dc:32:ec:26:22:64:09:bc:3d:d6:1d:12:2a:8b:5c:
d7:d2:fc:6f:89:23:4e:a8:35:59:b8:fd:fc:37:c0:65:05:01:
35:b6:92:17:a4:57:1d:64:84:5b:82:8c:06:d1:cd:f1:29:f1:
8f:18:c2:c2:84:da:40:51:1e:d2:74:8b:a9:3f:30:a7:ca:5a:
08:41:bf:72:e7:01:b3:35:95:e7:28:78:41:be:66:fd:68:81:
b6:e7:6e:38:64:15:76:a3:67:ff:6d:03:ec:31:7a:fa:47:19:
32:b2:7f:51:4d:1a:ae:b3:8a:c7:46:0f:3f:57:c6:eb:27:4d:
e3:aa:67:e5:0c:28:c1:38:c8:49:9f:9d:77:49:fe:58:cc:7b:
fe:13:7a:89:b5:49:75:b6:6b:b7:dd:2a:03:13:76:e2:3a:6c:
0e:2f:b1:6e:df:db:9d:19:f8:61:fc:f8:54:37:84:55:93:2d:
d7:97:b6:40:df:d9:78:d8:d3:d0:26:d1:e0:e5:61:3e:2d:e2:
c1:b8:c3:58:3a:0f:d2:b2:c5:7a:0c:30:73:b2:c8:9e:82:51:
bb:af:10:27:07:c7:e4:a5:7c:f7:f0:b7:6c:a9:2e:0c:22:d6:
24:22:dd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKruU8Z+n97b++UCBgHDFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWQ5Y2I4MzQwYWMyMDk1YTRjYjA1MjhlNWVhMmY3Mzhj
ZWE2NzIwHhcNMjUwNzI3MDcwMDMyWhcNMjUwNzI4MDcwMDMyWjAzMTEwLwYDVQQD
EygzYzc1ODE5NmE0ZTlkZGIzNzU0NDk5NjFiZjAxMmQ5NDA0YmRlN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YSYVYbOD8syYZqN5tfPwm39ypDf
RfbnLN7McyvXukrVFDki5RWraflbXIqV9Dwf8h+YcdvKEYcXpi0u4S0Vn6xmHaAG
JKItHOcWM6fS9cTk2OvClxo18GKWXKWw87ezLWfTAcsn83OPVoP4KGCiTjHZYJOk
9tKUHFSQiJCGSRFLQfqmm2/Xh5Q3Y+d9mrOpX/WYZE9Z2r/qFOQRAIHII85OUJVz
tEPbcrQNh/jVwxJBpDXrjppFT/Myj4HaI8JfEvxniorIcQNuq3V8d1A1bog3HlxF
nalUie/RFVdk91zomANggSeq5nshdPcyHAT1Em4kLWj+J5vGZ0BTmZbVzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx1gZak6d2zdUSZYb8BLZQEvee0MB8GA1UdIwQY
MBaAFIftnLg0CsIJWkywUo5eovc4zqZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDct
N2IyMWJmMzAzY2NjLzEvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDctN2IyMWJmMzAzY2Nj
LzEvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQwue3FF
CO81f9l2LR4mstyZM61g3DLsJiJkCbw91h0SKotc19L8b4kjTqg1Wbj9/DfAZQUB
NbaSF6RXHWSEW4KMBtHN8SnxjxjCwoTaQFEe0nSLqT8wp8paCEG/cucBszWV5yh4
Qb5m/WiBtuduOGQVdqNn/20D7DF6+kcZMrJ/UU0arrOKx0YPP1fG6ydN46pn5Qwo
wTjISZ+dd0n+WMx7/hN6ibVJdbZrt90qAxN24jpsDi+xbt/bnRn4Yfz4VDeEVZMt
15e2QN/ZeNjT0CbR4OVhPi3iwbjDWDoP0rLFegwwc7LInoJRu68QJwfH5KV89/C3
bKkuDCLWJCLdTQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:40:33 2025 by rpki-client