Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: rRtDu7Wraky8JCLnbL7gHqNR+UL7/LajlK0kn+r2h4s=
Subject key identifier: 20:EC:E2:22:DD:92:FD:61:95:E3:65:6A:61:A5:78:AF:3C:58:1E:AB
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 01984709304B4029776C011FECA2A1EEA67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 092C
Signing time: Sat 26 Jul 2025 14:00:41 +0000
Manifest this update: Sat 26 Jul 2025 14:00:41 +0000
Manifest next update: Sun 27 Jul 2025 14:00:41 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: gWVIV8o9pOAgjl+SjltYSxwV69SvVXqxyYwghrIS4eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:30:4b:40:29:77:6c:01:1f:ec:a2:a1:ee:a6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Jul 26 14:00:41 2025 GMT
Not After : Jul 27 14:00:41 2025 GMT
Subject: CN=20ece222dd92fd6195e3656a61a578af3c581eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:cf:68:79:50:22:e9:34:47:45:b3:04:b7:
19:29:fd:2c:b7:b9:30:7b:f9:20:9c:e9:96:89:bf:
63:6c:32:fb:c6:32:05:a4:e4:14:a3:a3:10:91:98:
17:83:33:8c:0f:cc:2a:77:56:a9:53:08:a0:d6:0b:
26:52:1d:c1:fe:02:c0:b8:96:0e:23:58:91:49:fd:
ec:f6:fd:90:72:79:86:39:49:6e:16:17:0c:9a:1d:
29:e6:b7:28:80:b9:1b:be:ee:4a:59:2d:90:ce:b0:
b6:52:9e:0a:3e:cd:03:8e:ca:c8:d6:f3:40:6f:e6:
c3:6c:b1:24:b2:a2:68:7a:32:94:e9:f2:ae:50:87:
07:10:06:84:0c:84:a1:17:2a:70:f6:6f:f2:07:9b:
65:42:ca:6a:44:6c:5d:eb:8c:4a:5b:0d:62:09:ca:
fc:d8:67:57:14:70:80:85:10:21:8a:f3:1c:81:45:
61:ca:d3:0b:14:48:28:f1:82:a3:63:92:6c:cb:6f:
45:91:f7:f2:b1:d0:42:ca:b1:0c:a2:8c:f5:89:08:
8b:16:f5:da:54:bb:87:3d:d6:64:86:bf:8e:40:19:
c3:52:ba:24:8d:95:82:7a:bd:3b:55:30:98:fe:6e:
a0:7d:41:cf:93:7e:6d:d5:0b:6b:c4:7c:60:81:93:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:E2:22:DD:92:FD:61:95:E3:65:6A:61:A5:78:AF:3C:58:1E:AB
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:0b:44:a4:b8:9f:ef:32:d5:ba:dd:e8:a4:ed:c7:63:c6:
53:5f:f7:13:0e:84:bd:3a:f5:03:8d:3c:fe:36:bf:48:9d:e9:
93:3f:5e:2d:38:4e:a9:8f:fd:11:c4:0a:d0:3c:5c:96:41:2b:
e4:95:50:35:5d:8f:67:d6:6a:38:63:8c:86:b4:09:3c:54:73:
9f:46:60:29:ff:f6:38:63:46:1a:20:b4:84:4e:30:a9:aa:ca:
32:7c:5d:7e:fe:57:04:ce:cb:10:d9:f9:39:1d:1a:5c:e5:b8:
c4:bb:59:ab:a5:58:50:4d:a2:dd:89:bb:5c:36:46:77:b9:98:
ff:40:73:9b:63:c6:60:16:89:07:19:b8:24:cb:9d:92:0c:3c:
ea:f0:85:74:0a:3f:42:66:13:2d:f6:3d:eb:9d:c3:00:f4:c3:
e0:84:03:a1:63:ac:58:09:ae:b8:da:ab:2e:a3:6a:35:ba:4e:
29:18:32:7c:50:11:fc:43:b7:ab:34:ea:36:12:69:4a:c5:58:
13:1e:c7:db:f0:8d:48:e5:05:d0:f7:ff:5e:96:c7:0e:38:9d:
6d:03:95:97:53:5b:84:5a:ab:83:f7:b9:a4:08:5f:e6:28:4d:
8d:18:b3:d3:5a:33:17:39:09:28:20:e2:dc:79:ac:77:25:04:
f3:bc:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:41 2025 by rpki-client