Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: z88FEfEC8cSSdcTJV/vL2RGRkfQJgRZfhhdayO1KJqw=
Subject key identifier: 9E:82:52:AC:CD:A4:5B:C3:C1:39:5B:14:55:DC:C6:22:3E:C1:3D:83
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 0198451A8928A77E7DB34E28250D7A3F7F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 05:00:23 +0000
Manifest this update: Sat 26 Jul 2025 05:00:23 +0000
Manifest next update: Sun 27 Jul 2025 05:00:23 +0000
Files and hashes: 1: Dk5BhXJ_gIsgQ0utb4gvZ39LMIc.roa (hash: 9IdU4NLUHr5S9QPXNXQfwW6+YPaEhUYFtSNkpxSH/2Q=)
2: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: +nZ5KjAbXR4M/1O63JL2Aq6Xw2cOi907ZPgZa7vkq/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:89:28:a7:7e:7d:b3:4e:28:25:0d:7a:3f:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Jul 26 05:00:23 2025 GMT
Not After : Jul 27 05:00:23 2025 GMT
Subject: CN=9e8252accda45bc3c1395b1455dcc6223ec13d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:23:cd:a0:cc:cd:ab:08:74:40:28:b7:b5:
80:0a:6c:37:9b:7f:3c:56:cb:02:84:b2:28:89:1e:
0b:1a:bc:d6:dc:e0:bf:c6:a4:71:07:f5:da:af:1e:
b5:be:54:d7:aa:a3:52:dd:0a:56:67:a3:81:a9:63:
e5:68:dd:5b:e3:a9:29:32:1e:50:60:7f:22:74:d3:
7d:09:30:68:f6:55:3b:fe:5a:7a:0e:65:6d:c5:0a:
39:5b:a1:68:4f:b6:2c:00:18:89:96:21:7c:dc:af:
34:fe:99:38:62:5a:37:44:10:1a:fb:0a:49:2d:ff:
d0:11:20:ae:b0:d2:04:de:83:9c:95:e1:dd:ba:b0:
1e:d1:d0:a8:93:61:4e:ce:0f:6c:19:33:fd:a6:77:
82:2d:8a:b6:67:94:bc:1b:9d:0f:51:79:e5:8d:6f:
6c:db:81:fb:9f:fa:69:d4:37:76:11:ec:f4:74:be:
bb:13:0b:23:2b:cd:84:25:ac:92:0c:de:21:24:c4:
02:9e:c1:fb:ef:f1:eb:dd:e7:9a:ee:a3:7d:21:46:
14:59:1f:a8:d6:b0:71:a8:7d:ba:c8:b5:df:6e:7f:
92:3b:6b:72:36:1f:6e:f7:dd:e6:90:e9:17:04:29:
38:03:ed:0d:73:1c:ac:3b:78:50:5b:5e:e3:ee:7b:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:52:AC:CD:A4:5B:C3:C1:39:5B:14:55:DC:C6:22:3E:C1:3D:83
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:54:8a:ed:fa:63:3f:26:e3:ed:b5:e5:c1:c5:d2:54:22:
07:17:9f:77:34:f9:e1:91:69:7b:dd:e2:36:21:6f:f0:82:d9:
05:5e:a9:69:92:40:b5:54:81:a6:ed:c2:cf:a6:12:d0:fb:f2:
a1:ce:1b:14:61:44:0e:ac:ce:99:85:31:3f:64:5a:d8:cf:bf:
e4:a9:cb:1c:9f:96:0b:d2:23:76:d2:f1:f6:55:2c:e6:9c:cc:
c2:57:51:3e:7e:6a:74:68:5e:f1:01:04:01:73:ba:55:4d:a1:
17:31:a3:0f:d1:eb:74:77:88:8a:17:19:2e:53:70:0c:f8:d6:
84:bb:12:88:ec:84:9a:25:0b:ea:7a:9c:be:7a:c6:4c:f3:9d:
be:09:88:36:f9:13:fb:15:67:36:b2:10:36:7b:a2:cd:1b:bc:
34:06:37:3a:55:32:fb:45:6e:18:98:d6:da:29:26:60:72:72:
83:0e:28:71:6b:c6:e5:a4:76:13:75:c6:8c:e5:3f:7d:ed:29:
17:0a:3d:e2:60:61:6e:64:c8:89:b1:03:52:31:39:68:dd:01:
be:0d:54:c3:99:23:e5:6d:c2:78:c4:fc:33:4b:cb:89:81:9a:
4e:4d:27:41:f9:32:1b:0e:41:72:e8:2a:d9:e8:7e:c0:00:c7:
45:b4:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:25:53 2025 by rpki-client