Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: jKIvmhuSljOm1fHnFOaUN0KhYkl6EpnWgd4V/XQ3+Vk=
Subject key identifier: A4:73:BC:D1:2D:14:05:40:1F:29:6A:BA:BA:9A:37:6F:7D:6D:A0:90
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019853B24F804653412074D40F0ED6006FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 01:00:51 +0000
Manifest this update: Tue 29 Jul 2025 01:00:51 +0000
Manifest next update: Wed 30 Jul 2025 01:00:51 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: QWFCHEvqDtRjWc25vlH0qiz7zgmcDlGxGfurJ574xm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:4f:80:46:53:41:20:74:d4:0f:0e:d6:00:6f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jul 29 01:00:51 2025 GMT
Not After : Jul 30 01:00:51 2025 GMT
Subject: CN=a473bcd12d1405401f296ababa9a376f7d6da090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:61:9b:4c:5d:93:29:cd:e2:13:c1:d3:09:
0b:ca:0f:f9:db:e3:66:29:fa:6f:10:e1:fa:9c:90:
bb:b7:2e:59:a1:2d:5b:ca:63:70:5d:fe:16:5c:f1:
9f:58:0d:d6:c9:a5:68:29:9b:fb:f6:85:59:6c:e6:
f7:c6:2d:fb:2c:59:11:bc:c0:1c:da:d2:59:53:11:
20:d6:5d:23:44:77:c7:b2:b6:53:2c:69:e0:f3:71:
8b:1c:b6:8c:c5:fe:f7:80:7a:e2:e2:a3:41:3f:24:
1b:e1:ee:ff:ad:d5:92:c0:ad:ef:8c:3b:88:a6:9b:
54:3a:5e:15:f1:48:b5:73:06:5f:7e:c8:53:27:eb:
d8:86:2c:e4:69:67:07:a7:0f:bc:6f:56:de:aa:c0:
01:32:72:64:3f:18:5f:0e:cb:e0:2d:de:ff:93:29:
0c:53:3a:ef:a4:08:f5:c2:9d:5a:5c:d2:b0:c3:eb:
92:51:11:a0:e3:4e:15:6d:8d:73:b7:19:90:da:f2:
7b:52:c6:fa:23:4b:fe:e3:71:75:04:fb:7f:33:ca:
b2:3d:5f:02:6d:ce:dd:3d:e6:4b:a4:7d:04:93:8c:
4a:c2:af:c8:36:9d:4a:06:bf:22:47:d0:22:5e:88:
77:a6:98:24:e9:93:93:c2:8e:91:1c:57:6b:fd:6d:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:BC:D1:2D:14:05:40:1F:29:6A:BA:BA:9A:37:6F:7D:6D:A0:90
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:72:43:c9:f0:50:5f:f0:02:51:fb:d6:a2:28:01:ef:97:19:
15:3c:3f:34:18:8f:09:53:b1:d6:2f:c4:08:9f:ed:e3:2c:81:
0f:bd:68:80:60:15:a5:e7:01:62:30:6f:fb:b2:5e:5e:97:66:
ab:04:e4:7e:6b:b2:a5:ad:2d:3d:16:11:89:28:93:9b:55:7e:
27:a5:d5:a6:7d:08:0b:bf:a8:55:cc:58:23:d0:3d:0a:1a:fd:
ee:2b:0e:3b:fa:b3:58:6e:5c:49:bc:14:04:8b:95:bb:ca:ce:
b2:ca:f6:53:f9:1b:a7:6e:34:cd:c4:cf:5d:d8:3a:fd:44:cf:
53:bc:b0:76:63:28:c3:f0:ab:09:c6:7f:0f:c3:bf:ca:3c:05:
03:27:d9:12:5c:e5:22:20:93:f5:d6:05:26:d9:f5:3b:2a:d1:
c8:b2:83:06:4b:a2:47:6a:79:f8:e7:a8:d9:4e:6c:ea:6f:b9:
91:d2:74:8c:3e:36:ac:1c:56:07:76:38:1a:a0:95:27:31:80:
3b:67:82:c6:3f:7d:be:2f:f9:26:64:54:4e:3b:f5:62:6e:1c:
d5:5e:b2:39:a7:db:ee:4e:85:c4:a5:8b:cc:42:7b:7f:78:6a:
92:bc:20:50:cd:f5:ed:0f:77:05:0b:17:4a:47:e8:77:54:65:
8a:fb:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:54:06 2025 by rpki-client