Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: ohUI7/Aeqyl6Ic/1lGAhNAkFquvbhS7q5hTRIPbQIAI=
Subject key identifier: E4:9B:09:4F:16:D1:08:05:42:57:9F:F0:C5:0A:16:B6:5D:60:06:83
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019845F63D8CFCB1EE0832EAE79F60A3E350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 01CA
Signing time: Sat 26 Jul 2025 09:00:22 +0000
Manifest this update: Sat 26 Jul 2025 09:00:22 +0000
Manifest next update: Sun 27 Jul 2025 09:00:22 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: MsATkWL1anx9WtXomoxXit6AfAJjNQ+Y6qNnG0PmBjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:3d:8c:fc:b1:ee:08:32:ea:e7:9f:60:a3:e3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Jul 26 09:00:22 2025 GMT
Not After : Jul 27 09:00:22 2025 GMT
Subject: CN=e49b094f16d1080542579ff0c50a16b65d600683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:15:38:2a:bc:0a:15:f5:a3:8f:1b:ef:9d:
90:3d:0a:3b:8c:0b:1a:39:84:3a:77:6c:80:e5:58:
16:80:2e:14:5d:48:6c:ba:29:ed:ea:1d:e5:7a:61:
61:25:c6:f8:e5:48:2d:0d:e0:0b:bb:8d:64:c4:65:
33:ad:73:87:b9:26:ae:3f:e9:16:95:ae:61:f3:8a:
a8:11:08:ee:ea:51:f6:9f:29:7c:10:18:ad:d3:98:
25:26:96:8a:dd:3f:ce:6d:f9:7b:58:16:ba:4f:c9:
5b:d8:2e:a6:13:07:1c:42:a7:a8:c5:c8:2f:71:ce:
dc:d6:af:91:a0:f8:c2:5f:a2:70:b3:a6:d3:aa:55:
bd:b2:d5:7d:96:d8:4d:dc:46:8d:72:47:ae:40:61:
96:34:28:e1:cc:73:37:e0:50:3c:37:e9:7b:79:5a:
93:a3:3a:ee:80:ca:6c:62:b7:2d:05:00:37:1e:4b:
d7:f4:70:88:bc:67:c6:f2:48:3f:91:65:ef:04:a4:
d4:ad:cb:0c:d9:8d:07:98:0a:37:18:75:18:32:e4:
e8:2f:19:af:dc:29:4f:33:95:01:0d:d3:9f:ee:be:
36:13:d0:01:44:45:d8:0a:6d:e0:0d:31:94:18:dc:
27:44:23:80:60:7e:06:7c:f5:19:67:c7:63:bc:7a:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:09:4F:16:D1:08:05:42:57:9F:F0:C5:0A:16:B6:5D:60:06:83
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:12:82:2b:c6:f5:da:f1:c3:13:08:2e:26:d9:81:a5:7c:ad:
20:90:39:cd:86:20:37:0e:a8:94:bf:6c:3c:02:44:d7:86:8e:
ea:c1:07:c4:a3:1d:c8:82:6a:80:ca:eb:06:87:69:01:2e:f2:
c6:95:b0:00:f5:63:4e:a4:d6:02:8e:fa:b5:73:e5:f5:fc:17:
02:01:cb:4e:0e:6e:82:c5:ab:17:83:43:87:46:a6:b9:4f:77:
c2:89:a4:c8:47:7c:de:1a:30:d8:3f:08:5e:09:ba:24:7f:60:
c1:7a:c4:ba:15:37:90:f2:bb:10:da:10:62:50:1c:95:9f:af:
1f:05:ef:7e:10:8a:4a:ae:b0:12:f3:a3:10:f3:72:61:09:e2:
94:f1:22:94:e8:a0:9f:12:c8:7f:ae:74:1d:a8:5b:14:5e:9b:
9a:3b:87:e6:de:b1:92:01:8c:ee:81:32:91:bb:f7:6c:87:ef:
36:cb:2e:f1:45:08:1f:70:d8:8c:a9:54:80:af:5a:b2:30:20:
a7:08:df:4d:2d:61:96:78:56:a0:de:57:53:47:a1:1d:cf:f5:
52:54:a6:0b:2b:c1:22:7e:3c:37:8f:db:6c:07:1a:9a:b7:bf:
94:90:97:a2:69:45:7a:78:29:93:fb:aa:bd:ba:60:ed:9e:5e:
2d:9a:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:10 2025 by rpki-client