Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: Amk4n4k5mUjqyIu8imv9554Q+R81Sr9g0rw09v4nl64=
Subject key identifier: 36:6D:E0:4A:5C:A3:97:53:A0:76:CE:C4:92:43:9E:A9:9B:D7:D5:B2
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0198481B5C0D7F033E70C995F9DE9415F0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 11AD
Signing time: Sat 26 Jul 2025 19:00:09 +0000
Manifest this update: Sat 26 Jul 2025 19:00:09 +0000
Manifest next update: Sun 27 Jul 2025 19:00:09 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 78IAuLh+ciygEsQ/i4RMeMyf/Vu+agO1JWV4pNch8dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:5c:0d:7f:03:3e:70:c9:95:f9:de:94:15:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jul 26 19:00:09 2025 GMT
Not After : Jul 27 19:00:09 2025 GMT
Subject: CN=366de04a5ca39753a076cec492439ea99bd7d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:38:b9:cd:6d:b8:e3:72:c5:c1:4e:2f:f7:
df:a5:49:ba:04:f3:ff:e6:72:92:db:89:4c:ee:0e:
c3:52:46:e5:39:91:d3:e6:c3:90:7b:fb:bc:45:e4:
3d:01:37:0c:38:de:4c:d1:b5:09:f4:7f:8a:b5:a0:
fa:bf:f1:84:4f:7c:c6:48:6d:7e:0c:6e:cc:37:25:
fa:74:49:77:40:90:75:0c:fa:7e:4b:e1:b7:7a:b7:
3e:ca:29:ed:35:e2:dc:e4:61:2a:7f:30:6e:69:8a:
ce:16:ec:b2:45:f7:53:e8:54:5f:f7:0a:33:f6:42:
e8:fd:3c:20:b7:95:15:7e:09:87:f8:77:cb:5e:76:
2e:a8:69:c8:9d:69:ed:ab:2d:1d:97:fa:68:88:6f:
88:da:9a:48:80:0b:6f:14:cb:d5:fa:48:b8:f0:32:
8c:aa:9a:1c:5e:8a:45:9f:71:69:4a:3c:a8:a9:58:
b2:1e:29:f7:fc:1e:4a:ca:f5:14:36:00:5f:60:9d:
73:7f:85:eb:d8:13:43:b3:4a:76:aa:19:df:e9:2c:
c2:2a:e3:b8:33:92:6d:56:c1:e4:6b:61:0b:27:07:
b2:87:2a:97:69:63:a5:cf:6e:81:4b:68:08:da:d2:
30:65:b9:04:4d:dd:43:9b:15:c3:53:d7:47:b8:78:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:E0:4A:5C:A3:97:53:A0:76:CE:C4:92:43:9E:A9:9B:D7:D5:B2
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:17:76:bb:fd:e0:79:a9:0d:77:7d:44:2c:1f:ff:93:04:be:
b9:c4:08:a3:cc:46:95:92:8b:49:0f:fc:6d:f4:29:04:73:bc:
11:40:98:ab:72:96:55:18:a6:82:06:45:df:a1:f2:c4:0b:a4:
74:2c:44:f0:9e:87:8b:cd:7f:47:fe:68:3b:a9:3d:5d:e3:13:
0d:59:fd:82:b2:09:0c:4a:92:2d:1f:e9:8c:e6:18:27:cf:6b:
de:d4:cf:55:4e:39:2b:a4:41:50:3b:e6:87:c1:15:c8:e4:de:
a1:c9:20:fa:ef:45:ac:ad:aa:dc:5f:2f:b5:02:0b:41:09:e4:
59:bf:3e:b9:57:75:58:6d:28:35:b5:3b:c8:ee:09:d1:53:c7:
b5:c1:a5:90:13:89:33:c2:8c:84:0d:ee:69:f9:c3:79:01:66:
69:3f:8f:2a:62:77:18:f2:49:cf:61:1b:5e:9b:b0:61:13:d4:
22:11:03:28:84:13:af:a4:b1:9f:f0:a0:ac:93:1c:97:2d:86:
ca:bd:ae:be:28:ef:a2:bd:00:bd:d3:9a:99:bd:6c:3e:52:24:
85:6e:02:9e:e4:53:59:9d:f1:cb:5f:d2:c2:74:57:60:39:dd:
b0:1c:ed:d1:95:09:8a:9b:db:bc:19:ae:fd:0c:64:33:68:b9:
d3:bf:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:32 2025 by rpki-client