Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: vze3ot9+kd/xkAtmRPTwvBxxccnoaNZB+tiJYWnCb3g=
Subject key identifier: 97:FE:D2:6F:20:B4:61:FE:6B:B9:55:82:55:9F:65:C2:85:5D:6F:50
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0198481C00BCEA16988FBC4DB6DEAD929AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0299
Signing time: Sat 26 Jul 2025 19:00:51 +0000
Manifest this update: Sat 26 Jul 2025 19:00:51 +0000
Manifest next update: Sun 27 Jul 2025 19:00:51 +0000
Files and hashes: 1: EKlx1rADZuyg4kkyJL1W_FoZslE.roa (hash: gnSA4UoMY65ycXDPhcYc7WaEaKvIIPSZcAUwOI0jUxA=)
2: c4kqcT1XSHJJ0FNREY_3KgQV5Zg.roa (hash: BFqJRUOC40P0vfCEnDcc5S1ZBpr8qXlnCPbjKvFWFf8=)
3: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: 2+X+CXqEWig8rA9FesSiw+i3IUHVpyzdAqZoGAQ4Dvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:00:bc:ea:16:98:8f:bc:4d:b6:de:ad:92:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jul 26 19:00:51 2025 GMT
Not After : Jul 27 19:00:51 2025 GMT
Subject: CN=97fed26f20b461fe6bb95582559f65c2855d6f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:20:26:84:3f:37:02:b0:3a:d7:33:c4:cd:
a5:4f:2a:38:79:c9:b8:be:a9:6e:39:4c:10:a4:6c:
b8:f0:f3:89:a9:87:f5:b6:3e:c3:61:48:19:29:9a:
29:d1:4b:21:99:e3:68:7c:8d:7c:c2:83:5f:c0:72:
37:fe:52:e0:f4:83:9b:0b:cb:42:0e:cf:35:f0:2d:
ec:40:d5:89:81:fa:17:95:78:50:23:e7:c4:e5:30:
d3:f8:66:90:0e:91:6e:a7:ad:31:b7:1b:8f:8a:02:
60:26:4b:ae:e8:68:2b:8a:88:d2:79:bb:ac:6a:71:
0f:8f:88:d9:4b:76:4a:1c:2e:57:b4:16:a4:73:8e:
94:1c:fa:77:20:ee:54:06:34:f7:0d:a1:d1:5d:1b:
12:5a:58:2d:87:e2:8f:63:b7:67:4b:63:6c:25:5f:
20:be:ea:5c:5b:ec:cf:d6:10:3a:0a:1c:eb:5c:f0:
aa:b4:11:88:e9:a4:4a:cb:c9:cf:59:8d:70:f7:d7:
0c:d7:c3:9d:3e:41:e8:b9:34:c4:02:f9:6b:15:c8:
4d:56:ef:ad:0c:c1:e0:37:9d:d5:84:91:da:4f:62:
cf:2f:8f:3f:f7:e3:f1:cd:41:ce:48:ce:28:1c:68:
79:04:bb:3b:94:9b:86:30:1f:87:24:33:24:43:0e:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FE:D2:6F:20:B4:61:FE:6B:B9:55:82:55:9F:65:C2:85:5D:6F:50
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ba:f1:79:43:f4:c9:a1:6a:26:48:c1:00:42:00:1c:f2:04:
b3:bd:a5:df:79:11:a7:26:97:3e:86:ae:ea:fa:20:19:40:15:
ae:f3:dc:1f:cb:98:c0:48:61:c5:04:b1:a1:6a:ee:84:7e:b3:
f9:4c:17:62:e3:94:63:76:02:62:90:b5:17:85:58:00:59:2a:
4b:d3:f1:b1:96:d8:99:b4:df:ae:98:40:b5:ae:e0:2d:a6:14:
96:0a:9e:7d:72:54:c6:63:7f:9f:67:36:fd:5c:33:3b:f7:63:
6d:67:ca:cc:b9:c2:ae:05:ff:10:ee:b6:91:f3:ea:98:b5:ed:
6a:99:ec:41:c5:5e:2c:30:86:5a:2a:27:70:39:c1:f2:df:83:
85:f5:8c:d4:d9:02:7c:41:0a:09:40:c3:32:87:be:98:eb:3b:
2e:ca:26:9b:ea:86:32:b2:0f:be:33:5a:39:9b:ce:ec:ce:02:
e9:f9:da:4f:69:fd:63:40:cd:4a:fe:66:5c:22:d4:6f:d5:78:
84:a6:80:15:2f:9a:44:21:a7:4a:13:0c:99:37:e1:c7:50:f6:
84:20:eb:51:ab:e0:6e:9f:ab:59:b0:af:e6:da:8b:52:8d:5d:
f2:21:8b:52:1b:5b:16:54:82:ed:92:6d:ed:26:b2:8f:87:01:
0f:50:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:20 2025 by rpki-client