Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: UGVLqxJATCcuN3Y5zIYPRIc4FTwn1csAXcV2gdCvbG4=
Subject key identifier: 24:3A:3B:D9:56:95:83:D8:22:6C:7D:84:9A:92:9E:FA:5B:97:91:D9
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019853E89E1732499BEBCBF136B0704CEC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0ABA
Signing time: Tue 29 Jul 2025 02:00:10 +0000
Manifest this update: Tue 29 Jul 2025 02:00:10 +0000
Manifest next update: Wed 30 Jul 2025 02:00:10 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: tjuEX3nMrYmgnfTB32hVvkjgwWFtDVx/v2Ehxd57Bnc=)
2: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (hash: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:9e:17:32:49:9b:eb:cb:f1:36:b0:70:4c:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jul 29 02:00:10 2025 GMT
Not After : Jul 30 02:00:10 2025 GMT
Subject: CN=243a3bd9569583d8226c7d849a929efa5b9791d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:b8:a6:e5:fe:64:b8:4c:8b:a2:b6:6c:13:
0b:79:05:91:b2:62:b8:1f:52:7f:6e:e1:8d:79:2b:
72:22:1f:3c:0e:67:71:98:6f:a2:9f:bb:6f:17:2f:
68:83:06:16:58:7a:90:3e:98:e6:c6:83:fa:d8:ed:
ce:72:6d:1f:cd:6c:fa:11:fb:62:6e:41:96:3b:14:
d7:66:15:d1:47:69:20:d8:a6:c3:38:e9:d1:d5:51:
c7:96:34:70:2a:ff:f7:64:8e:39:b6:ee:56:95:d8:
ff:3e:c2:a6:37:5f:b5:70:67:b3:31:12:1f:e3:46:
5f:36:33:a1:2c:5c:36:f9:4b:1d:f8:75:96:22:ce:
17:4a:18:90:c4:98:53:e4:90:64:44:ce:5b:22:72:
28:9a:af:65:51:e7:ef:c7:b4:62:40:d2:2e:68:ad:
d5:97:c7:32:6d:2b:53:33:40:3d:46:cf:46:af:2e:
d1:c4:28:a4:2f:10:c3:75:b3:77:38:97:b4:18:3a:
0e:ce:f3:94:b5:72:bc:b2:f5:f1:af:41:66:e0:a1:
e4:1e:f5:58:86:ee:a8:9f:90:8d:67:13:65:e8:df:
54:9e:c8:47:36:2e:94:a7:79:41:14:64:e0:cb:a9:
60:54:c4:ed:98:ed:49:55:da:42:d1:c6:ff:ca:cc:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3A:3B:D9:56:95:83:D8:22:6C:7D:84:9A:92:9E:FA:5B:97:91:D9
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:43:77:9e:54:f7:d8:7e:14:4f:f9:7b:8d:91:0f:86:55:10:
b8:ce:2f:3a:83:fa:81:8c:ea:59:4f:57:34:cd:dc:61:61:71:
ea:de:58:68:7b:9e:b8:76:23:6e:25:27:ab:7e:c6:2a:1e:83:
71:0e:a4:a6:de:04:51:df:2e:6b:dc:c0:87:63:84:88:b9:7d:
51:8f:3a:5a:30:41:09:79:9f:81:f1:5f:dd:70:7a:7c:84:15:
72:7b:3c:00:6e:9f:4f:31:e3:2d:e2:15:15:90:11:62:11:a3:
13:49:78:fd:37:7c:58:84:84:c6:7e:93:7a:4f:01:52:83:8a:
ea:1f:be:03:40:87:73:95:86:e9:80:57:1c:f1:88:af:5a:d1:
13:39:ce:17:ff:f2:e6:03:ed:65:f3:f3:a6:0f:c9:2f:15:26:
3f:03:45:1c:a3:ab:dc:de:9c:36:fc:c7:e5:a5:63:95:39:ca:
15:dc:7d:31:a9:65:f3:a8:b8:fb:3f:29:b4:2b:41:53:c1:b1:
44:54:42:62:4f:31:a9:84:a4:1b:98:e7:98:b7:6d:2c:b5:5c:
e9:da:0c:87:98:bc:8f:af:d6:2c:13:d6:e3:a9:d8:51:29:35:
77:1d:f0:c5:59:ce:40:86:25:3e:29:35:79:bd:cd:e8:51:09:
b7:1e:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:42:21 2025 by rpki-client