Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: zwG83BDrWVmjrBrqByi9h225b28KcGuvxRzpPNsuavE=
Subject key identifier: 8D:5B:AA:3C:F5:BC:00:EC:73:2A:F0:73:D6:4C:4E:E8:15:A9:DC:F2
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 01984A410D41BC7164118656572D303450EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:33 +0000
Manifest this update: Sun 27 Jul 2025 05:00:33 +0000
Manifest next update: Mon 28 Jul 2025 05:00:33 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: E76fAO0a+OSdVSKGYpvs/2gWe3kBtYdAVRKY7XAJ9RQ=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:0d:41:bc:71:64:11:86:56:57:2d:30:34:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Jul 27 05:00:33 2025 GMT
Not After : Jul 28 05:00:33 2025 GMT
Subject: CN=8d5baa3cf5bc00ec732af073d64c4ee815a9dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:4e:b2:e3:47:8a:4a:fb:af:90:b9:82:4e:
cd:ad:9b:19:4e:88:84:63:7b:3a:ab:90:b4:e2:2d:
93:2c:fc:6c:f4:0c:65:59:f6:7d:be:ef:a6:e4:62:
6b:7e:93:12:ca:ab:61:af:2c:b1:34:dd:60:39:da:
fd:96:e3:a1:00:ab:42:a1:6e:a1:55:0e:38:ed:fe:
07:e7:04:a7:bc:66:77:b7:d5:ee:61:27:58:83:43:
14:f2:bd:5e:56:35:58:b6:f4:c0:db:fb:06:4d:9d:
2f:2f:e7:5f:00:1d:fe:de:fd:b0:95:9a:d2:39:c0:
4f:01:9d:61:94:e2:40:34:ee:a4:bd:17:f6:15:cf:
3c:71:e2:bb:8e:5b:d4:29:7f:44:25:6f:48:1a:37:
32:fc:d5:5a:de:fb:7f:fd:62:f4:45:73:41:08:83:
72:c9:f2:24:f8:c2:87:13:7f:54:42:23:2d:84:32:
ea:b6:a6:6d:e1:ff:35:71:f5:b1:f6:b9:29:cf:26:
5a:0e:4c:ba:43:5d:bb:af:96:87:11:07:1c:9a:f9:
f9:73:e4:e4:1d:fd:88:29:3b:01:d5:1b:3f:4e:73:
84:8a:0d:66:5b:da:68:36:85:85:f2:d2:b5:85:61:
6f:91:7d:ab:45:1b:46:e5:98:5b:47:7c:0e:57:e7:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:AA:3C:F5:BC:00:EC:73:2A:F0:73:D6:4C:4E:E8:15:A9:DC:F2
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:66:3a:83:db:be:79:71:7f:8f:24:cd:29:10:b9:75:9b:33:
05:24:d8:17:8c:2f:2b:e7:44:b7:e3:d8:c8:01:a5:9a:fe:2f:
2e:af:4d:e7:09:09:88:e5:8f:25:2a:81:91:13:32:b8:27:e2:
50:4c:9d:9a:5e:bb:fc:58:50:9e:36:4d:49:67:57:f1:f0:56:
93:e5:ac:54:d1:bc:87:8b:2e:00:37:62:db:d5:5b:8a:58:0a:
2f:24:88:4d:23:35:c5:ea:b0:2a:ce:9a:f6:8f:b6:13:82:53:
dc:3d:15:9f:40:56:11:46:48:ae:4a:41:7e:d8:b2:b0:cb:9b:
fd:91:c0:6a:9e:87:ac:92:0f:8c:05:8c:87:3c:b7:92:e0:ac:
61:35:a7:0a:bd:29:30:d6:17:c1:b0:c1:32:42:64:52:3f:a5:
d6:82:f4:ae:dd:e3:25:57:bf:65:ff:a2:63:8f:fb:d6:cd:49:
cb:f6:bc:de:2b:fd:af:e6:77:dc:78:56:0f:4d:f0:73:b8:66:
1d:97:de:27:29:6d:9e:98:b7:d9:47:d6:17:bf:8e:6e:7c:88:
d4:c4:02:c4:d8:b7:59:90:56:a6:fb:39:71:0a:84:ec:d9:12:
5a:aa:dc:46:45:29:46:4c:d8:31:b8:31:eb:de:9f:fc:50:48:
f3:56:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:13 2025 by rpki-client