Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: FJMP9JtQTayeHXbJzU8Ki6rQJ0chrTheJ92sNTZdjNA=
Subject key identifier: 95:1C:1F:B4:60:75:FB:1A:58:29:96:32:8B:15:23:7D:14:42:5B:D4
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0198485281F62B692A4B05B7650105B6CB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 1611
Signing time: Sat 26 Jul 2025 20:00:23 +0000
Manifest this update: Sat 26 Jul 2025 20:00:23 +0000
Manifest next update: Sun 27 Jul 2025 20:00:23 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: ALrVJi9tJpiTpo85sPtR551yA9qQxs4wFS6qe4miINc=)
4: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:81:f6:2b:69:2a:4b:05:b7:65:01:05:b6:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jul 26 20:00:23 2025 GMT
Not After : Jul 27 20:00:23 2025 GMT
Subject: CN=951c1fb46075fb1a582996328b15237d14425bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:da:04:b3:43:6c:e8:44:7f:f1:dd:43:97:
66:b9:ee:35:91:27:3d:42:2e:60:ba:ea:3f:31:18:
9e:fc:7a:1e:8f:69:21:8c:a6:7c:31:c1:92:6d:c8:
0e:d0:31:f7:b2:1d:c5:6b:e3:de:29:5f:01:bb:06:
bd:10:7d:d8:60:5b:f9:5d:47:fc:b8:39:50:85:d3:
ef:e9:43:f6:e1:f5:71:39:a3:37:5c:90:93:aa:e2:
1b:3e:7f:ae:14:13:9d:bd:cc:33:d1:b4:ae:c3:c5:
f5:e7:01:e0:97:88:70:e5:e2:08:ec:32:1e:c2:7f:
cd:f9:ec:16:87:a6:32:52:b3:8d:fd:37:cf:6c:d7:
bc:96:3c:3f:05:f0:03:2e:00:cc:46:b1:6a:fa:fa:
ad:b9:57:cf:88:4a:96:52:a7:bf:d8:50:3e:f8:82:
24:68:ef:7f:18:85:7f:0e:83:6f:15:c2:2e:1a:09:
f1:a1:1b:ab:09:4b:e8:c2:32:02:9c:de:c8:91:ec:
aa:08:07:36:e1:06:0c:46:56:b1:3d:74:4d:78:fa:
55:c8:ff:8b:15:a2:35:73:be:aa:b3:29:99:14:91:
19:8e:7c:17:c5:3c:bd:d9:b3:80:a0:b2:b8:4a:ee:
be:41:a6:29:02:f4:27:e3:96:56:a0:6d:c5:73:8d:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1C:1F:B4:60:75:FB:1A:58:29:96:32:8B:15:23:7D:14:42:5B:D4
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:14:a8:6c:88:34:cb:68:88:26:0f:76:3a:83:df:87:0e:
3f:85:06:b1:c1:5f:7c:54:1a:c3:f2:92:ed:f8:d5:4a:ca:a4:
cc:9a:da:1c:5b:e7:cc:4b:b3:ed:5e:cc:fd:55:b8:51:9f:56:
c7:02:61:e2:b4:5f:10:b2:44:84:a6:8a:1e:9e:6a:4c:90:2b:
6a:c7:a3:dd:a6:9d:a4:f5:0d:ef:3b:a9:42:fd:43:50:46:ef:
e2:ed:e9:4d:e7:54:30:a0:66:de:27:4f:07:97:6b:bf:87:22:
14:88:eb:07:33:fc:fc:ee:ff:03:6f:8a:57:e5:3d:61:fa:de:
56:fe:09:22:ba:6e:24:c2:3b:ac:b6:8e:16:0a:b5:63:ee:a4:
f0:9f:9c:df:7b:d2:71:79:11:18:87:76:d3:c5:ba:c5:96:96:
bf:74:6e:2c:0f:88:db:d9:fb:5d:0f:84:a8:74:84:49:06:16:
dd:c3:db:92:8d:fb:50:57:24:41:d9:01:5c:35:b4:c0:83:2b:
bc:51:f1:df:e9:30:9c:6d:d9:95:16:be:01:d5:b1:41:da:77:
b0:a8:3d:25:94:2c:de:ce:fb:04:ed:47:58:6a:4c:bb:e9:96:
fe:8c:1d:19:f2:cc:82:a5:be:88:33:a9:40:3b:7a:06:90:1d:
84:27:16:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:09 2025 by rpki-client