Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: Jn3vfp/0Ue+ffeHPJLl424umkxvOIZIbVgeRkcms9WY=
Subject key identifier: 9E:7B:2E:D4:48:52:CD:6C:0F:B1:2A:73:03:B6:F0:11:03:73:3A:9E
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019849D344C17EDF49F2F42AE754E79D1A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 03:00:39 +0000
Manifest this update: Sun 27 Jul 2025 03:00:39 +0000
Manifest next update: Mon 28 Jul 2025 03:00:39 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: aUFGaokhX/2OFLh6xCFGWDrMl/mzVDXgWoO4jywtdHc=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:44:c1:7e:df:49:f2:f4:2a:e7:54:e7:9d:1a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jul 27 03:00:39 2025 GMT
Not After : Jul 28 03:00:39 2025 GMT
Subject: CN=9e7b2ed44852cd6c0fb12a7303b6f01103733a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:62:92:66:db:69:7b:f7:e3:f9:87:79:2d:
a7:f6:12:49:ca:14:6a:48:c1:29:6a:20:1d:05:a7:
77:10:b6:2f:57:67:97:61:ac:49:4c:23:ae:18:1a:
d4:bb:81:6c:15:db:70:0c:0d:7d:64:37:1e:4b:75:
37:1b:52:58:85:3c:58:15:82:91:fd:20:5c:51:d4:
ee:1b:2c:00:7c:b9:7b:4c:d9:1e:4b:43:b5:12:96:
41:b3:f6:ce:83:59:a0:6f:67:ca:1c:65:ff:7f:8e:
b0:bc:5f:69:9a:eb:30:62:fe:92:6f:4c:51:b2:87:
72:b3:0b:f2:4d:a8:48:6a:33:60:b1:7e:9e:ca:af:
a1:b7:61:af:26:eb:dd:cf:bc:90:6f:26:22:cf:0a:
2a:fc:8f:8f:be:27:09:bd:7e:5e:60:fb:eb:a6:e6:
48:db:e2:a0:a9:cd:77:6f:ed:d2:de:cf:5f:46:85:
d9:65:1a:86:fa:6d:f3:b7:14:3b:80:b1:cf:09:39:
03:f8:c0:00:b1:50:50:ba:72:6b:11:f3:4e:c9:6a:
d3:a9:bc:ad:6c:cc:b3:7a:62:7c:99:a0:a5:af:77:
10:8c:cd:a1:29:a2:7e:75:8e:b4:49:e5:15:61:f0:
9e:1e:48:d5:c4:fb:1e:38:20:dd:1a:d1:d7:ca:50:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:2E:D4:48:52:CD:6C:0F:B1:2A:73:03:B6:F0:11:03:73:3A:9E
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:cf:6c:ec:43:f4:db:3b:ec:c3:6c:e3:eb:97:64:5f:43:
e1:d0:f0:8a:4f:17:0b:b2:4f:65:8d:58:5e:a5:35:f1:26:7a:
de:36:8b:ea:bf:35:f0:b9:81:00:e7:05:18:fb:75:b3:fb:48:
d6:37:7d:e2:f6:75:39:77:2d:a3:e2:25:2b:8b:a2:76:76:86:
27:b5:83:4a:00:68:08:e7:14:38:ad:fd:e3:f0:fa:37:51:f2:
53:5a:9d:57:23:46:e2:f9:65:33:20:a3:44:e3:bf:4a:85:40:
08:2b:1a:c1:40:3f:42:f8:67:6a:69:e8:ce:b7:55:63:92:70:
de:b5:bd:d0:31:71:65:bb:d3:bb:92:d0:06:f1:d3:0c:bc:ac:
44:4e:59:17:5a:1f:88:0b:9f:10:e3:2b:27:09:81:c7:23:17:
c5:b8:98:b5:81:cd:8f:64:91:b4:c5:a4:72:7e:cb:7e:60:84:
70:94:34:01:ca:99:8c:0e:3a:77:6a:6c:61:fc:13:8a:b5:d5:
d0:32:91:d2:6e:ef:eb:15:15:6f:a0:63:3b:04:51:30:80:e5:
da:87:ad:57:1e:29:f2:d1:01:1f:d4:22:93:8f:19:81:96:3f:
28:3d:21:cf:98:10:e3:c7:69:8a:8e:34:d5:f6:0d:91:fa:a9:
60:f6:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:56 2025 by rpki-client