Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: hEalzsanAnyL+cjcohJVAGSXhLyxm0OYOR9QLnPUkI8=
Subject key identifier: D5:A2:BE:B6:FE:A6:30:D7:70:6C:9D:D4:50:1D:74:CD:A1:BE:88:3B
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 019847E4CEE534A4046EC89151BE7471C075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 01EC
Signing time: Sat 26 Jul 2025 18:00:34 +0000
Manifest this update: Sat 26 Jul 2025 18:00:34 +0000
Manifest next update: Sun 27 Jul 2025 18:00:34 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: Z3Ln/0OSmP6DjqbmeQSI3dBai3La1NFxzd5A1Zt1ViM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:ce:e5:34:a4:04:6e:c8:91:51:be:74:71:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Jul 26 18:00:34 2025 GMT
Not After : Jul 27 18:00:34 2025 GMT
Subject: CN=d5a2beb6fea630d7706c9dd4501d74cda1be883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:81:e7:24:ab:76:f6:8b:5d:02:f0:ce:80:
71:c6:b2:b8:b1:c1:ba:20:f9:99:6b:50:f5:00:81:
dd:11:7d:68:bf:b2:9a:b1:2a:62:f9:6f:d2:3a:bd:
0d:81:2e:64:48:a1:2c:d1:47:3a:2c:3c:6c:e7:26:
8e:aa:93:41:29:06:c5:84:a1:a2:93:d6:5a:5e:b3:
3e:b7:f2:89:b4:2c:a5:1f:ee:a3:74:85:c9:fb:53:
61:57:12:05:02:d6:44:02:e3:d5:e2:18:80:78:bc:
44:56:76:d7:08:bb:a2:04:31:b8:82:10:60:60:8e:
bc:88:c2:6a:63:d4:18:d7:b0:70:e6:6f:ce:20:91:
dd:7a:92:30:8d:57:97:bd:2c:3d:cb:86:56:20:cf:
d2:41:3f:00:24:95:9f:8d:32:69:a0:fa:5d:49:18:
1b:b0:f9:dc:1c:d4:c5:49:0c:98:e7:03:fd:e7:b7:
c3:54:91:0c:5c:40:74:86:5c:ba:83:c2:9a:c7:ff:
a8:54:9b:5e:f4:2a:78:fa:15:91:47:27:20:c7:42:
19:fe:20:4d:f6:93:f5:fe:a9:0a:c0:0b:85:03:9b:
a8:58:b5:84:ca:b6:1a:66:e5:f7:95:c6:de:2a:5b:
ff:46:70:c5:44:31:c7:c8:08:50:cf:e7:ba:24:b8:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:BE:B6:FE:A6:30:D7:70:6C:9D:D4:50:1D:74:CD:A1:BE:88:3B
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:33:4f:dd:63:cc:58:7f:4d:b9:33:ea:d2:1f:cf:6c:fb:8c:
cd:8e:90:79:ac:a5:f9:7e:05:7a:2e:da:ec:ab:d9:a5:51:d3:
53:40:b2:82:d9:fd:29:e8:20:2d:5d:be:bd:69:b0:13:dd:8f:
5f:b5:dc:74:4f:0a:54:a2:00:29:f8:99:26:0c:44:35:59:d7:
6b:60:61:7f:9a:66:9a:5a:07:85:d7:20:46:45:8e:31:c5:e0:
93:2f:43:a2:c5:2e:96:b4:7e:59:e3:19:75:bc:00:7a:fc:2e:
1c:77:bc:0c:ba:e3:30:9f:90:9b:17:91:98:f1:42:8e:b6:98:
49:46:fe:39:dd:e6:58:f4:8c:60:0f:d0:ff:9b:15:46:8c:8e:
1f:04:56:95:fd:46:f6:a6:c4:03:43:69:bd:f8:f3:83:fa:a7:
aa:24:28:d8:61:55:78:d6:b0:48:5b:dd:89:36:57:3f:46:49:
57:6d:a6:ac:95:9d:ef:ae:6a:e6:25:21:0f:fb:f0:58:fc:eb:
1f:ae:d8:e9:b2:0c:79:a4:67:a5:df:15:3d:53:d1:82:ba:53:
29:ba:1a:51:64:c4:7a:24:c8:1e:6b:e0:68:d1:a6:f6:d1:7b:
11:2e:dc:72:d2:8d:bb:6f:8f:3f:4f:eb:06:ca:52:e4:2c:d3:
5a:a6:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:34:36 2025 by rpki-client