Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: yQIksRoQ+xeZ1DZkEpM++psFMDaJw65G/Fuvn15haT4=
Subject key identifier: F2:50:3E:92:EA:27:BA:C1:44:0F:3B:33:21:25:A2:49:E0:2E:DD:3E
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 01984A77F1426BAF65A0D99FFB553DFFB199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 09EA
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: 2z5OP5uOUPeCHEZvOlemyfzgiqA.roa (hash: Hk782ryuX9Xc6GFCRAe62b1gzyY4Vb/jeKK1cnQhmr8=)
2: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: kiEaH0BpxFdeJYUqi0MzoTaCzyQU/fZWy8Ngh4EVUig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f1:42:6b:af:65:a0:d9:9f:fb:55:3d:ff:b1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=f2503e92ea27bac1440f3b332125a249e02edd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:72:be:9f:ad:b8:64:7d:eb:3f:0c:7e:e0:
ec:d7:f9:49:7f:4f:f7:45:91:33:93:77:07:d2:77:
c8:01:ff:17:fe:df:fa:a7:c5:e5:af:c2:eb:28:38:
1c:0d:b6:32:41:ee:06:3f:ac:ff:fa:20:02:96:b9:
a3:9c:e6:f8:50:d5:48:06:1f:8a:63:d2:74:dc:3d:
3a:16:66:f4:04:de:6a:14:1a:66:02:d9:8b:90:db:
dc:ff:d9:52:53:1d:22:f5:89:c9:bc:13:29:38:2b:
a3:1a:16:62:8e:a7:c3:e9:cf:e0:83:82:69:7d:fe:
a1:b7:89:af:41:9f:54:35:d6:c8:d0:7f:fc:02:f1:
af:ec:42:f8:78:fe:61:c1:48:58:1e:84:c8:35:ae:
2f:85:13:f5:58:1e:da:5e:7c:24:ff:7f:64:ea:9e:
c7:8b:28:1e:b5:6b:4b:0e:9e:b0:dc:0f:51:ec:e6:
31:8e:da:5b:b9:b6:b5:af:0d:fc:00:b2:ff:ab:58:
ed:7f:78:ec:ad:3c:bf:56:9b:b8:9d:a2:ad:cf:38:
60:b7:51:c8:2d:0c:0c:93:7e:71:8f:59:72:ad:f1:
ca:ce:91:7a:91:f8:99:c1:64:0a:4b:9e:ec:c6:f2:
6b:98:54:2a:06:f3:b7:0e:ee:30:08:46:5a:f6:f6:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:3E:92:EA:27:BA:C1:44:0F:3B:33:21:25:A2:49:E0:2E:DD:3E
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c7:fb:b2:32:a4:cd:12:01:4c:27:16:ab:c7:34:63:48:78:
da:6f:4b:b5:36:0c:97:14:42:0c:2c:dc:91:d4:7d:e3:0d:89:
32:b0:6a:a4:0c:14:01:d7:25:9c:19:ef:26:75:2f:ab:1c:db:
2e:f1:13:49:bb:1a:a7:50:60:fe:93:25:3f:a0:27:2a:86:0a:
8f:06:72:9b:7a:5d:33:cc:81:6e:dc:d3:7d:d5:c2:46:61:f6:
74:57:69:ff:cb:7d:14:db:c9:4a:0b:61:24:02:e6:ac:4d:57:
0a:73:0d:62:3c:a9:e9:9f:73:d7:62:74:d2:74:79:b8:44:27:
ca:fb:e0:1a:84:ca:cf:9d:88:00:14:69:42:69:95:fb:38:77:
ea:12:0b:68:0e:da:76:59:0b:b4:33:d9:eb:44:78:c3:6f:fd:
64:d9:8b:40:ef:9f:be:50:2d:f2:41:3d:42:76:8d:7d:1a:4c:
e3:1b:17:2d:eb:fe:f0:27:25:96:fb:7b:7f:fc:7a:23:8d:8f:
ae:3e:43:62:af:d5:da:5e:6c:b0:1f:bc:8a:fe:c1:ba:1c:d8:
1e:dd:8c:14:b9:57:db:44:d2:c5:58:22:f8:04:c2:49:fa:83:
0a:df:42:19:e1:df:c4:2e:42:a7:2a:47:17:87:ba:d9:2a:a9:
b2:f6:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:33 2025 by rpki-client