Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: WVVgQSMeKE+NABISrdEoiQwLrfsU0iEAOThmSzMPbkg=
Subject key identifier: 6C:48:E5:EE:A6:57:B2:80:CD:A7:E0:F1:D8:EE:85:C9:09:03:7D:9C
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 0198530DFF2EFDB2D60FD3CD3BBCD1FCED50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0BA0
Signing time: Mon 28 Jul 2025 22:01:22 +0000
Manifest this update: Mon 28 Jul 2025 22:01:22 +0000
Manifest next update: Tue 29 Jul 2025 22:01:22 +0000
Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: M3ROA2N0i+dvZ+00b+lrqRjIXb43GGvJr60NUExkiGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:ff:2e:fd:b2:d6:0f:d3:cd:3b:bc:d1:fc:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Jul 28 22:01:22 2025 GMT
Not After : Jul 29 22:01:22 2025 GMT
Subject: CN=6c48e5eea657b280cda7e0f1d8ee85c909037d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:cc:da:56:f3:09:8f:74:be:bb:b0:88:2e:
b3:b5:c9:9f:f4:53:83:dc:a5:72:5e:13:49:a4:b2:
af:1a:df:d5:06:3d:00:96:17:8a:18:30:3b:15:cb:
d6:0c:ff:be:22:ac:ce:1a:37:ad:20:3e:80:26:58:
af:65:19:79:ce:9d:b0:cf:3b:2d:a6:f5:7b:b5:18:
f3:8b:ba:29:cc:ae:47:f6:80:28:5f:55:8c:7c:1a:
83:02:8a:62:4e:7d:9c:7b:a0:3d:55:1b:af:b5:44:
23:bc:06:fd:3a:74:8f:e1:2e:4c:06:df:fc:91:b1:
9a:eb:d5:75:1b:db:51:cc:fb:65:8c:f7:d2:04:bb:
34:d2:95:dd:e7:ee:06:80:15:9d:69:31:af:13:ab:
ab:52:d2:0d:9b:c5:78:3b:0a:53:cb:06:45:37:25:
06:00:f8:36:d0:c8:c4:57:38:ac:16:ef:ef:cc:33:
bd:42:c3:ff:84:57:7e:47:3e:86:01:8e:6e:32:2c:
dd:c4:99:12:36:ad:ff:61:13:95:ed:7e:48:08:dd:
1b:e0:f3:fe:2c:2d:33:5d:96:c6:29:f7:72:9d:c1:
bc:1e:c4:b2:71:9e:41:08:66:f4:94:f6:a6:34:4b:
2e:f1:b9:94:66:f1:82:ca:78:cd:94:70:fc:e1:2d:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:48:E5:EE:A6:57:B2:80:CD:A7:E0:F1:D8:EE:85:C9:09:03:7D:9C
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:89:0f:74:09:b6:9e:a0:b8:97:48:4e:28:2b:9b:c0:d6:
0c:df:e1:d0:ad:5a:18:f5:69:91:3f:ba:32:8d:e0:24:4f:05:
8f:71:1b:a8:f3:97:cc:b3:56:4e:a7:58:6f:cf:b0:66:36:37:
21:87:02:02:59:dc:a0:3e:c6:32:db:6f:6f:de:8c:d6:c0:41:
91:d0:f7:09:f6:2f:99:26:1e:8a:d7:52:01:f0:db:3f:17:db:
0a:89:de:4e:9a:c0:ce:85:0c:a9:8f:58:c5:1d:25:c4:fc:f1:
78:c0:72:30:77:ef:19:d8:ea:47:b1:7a:30:f1:e1:50:45:63:
f4:c0:44:f5:b5:16:c6:8c:14:f6:35:6d:51:72:5b:a7:51:19:
a9:b5:aa:3b:84:e2:d1:a5:38:ff:b4:32:da:7b:e1:81:44:ec:
63:ea:18:3b:42:fa:79:19:40:6b:8b:08:5f:8e:98:2c:0a:ab:
49:35:3f:f3:70:f7:ec:d8:98:47:6c:08:01:46:77:32:64:a0:
76:da:93:b1:e0:5d:73:76:ec:91:f0:32:6d:33:9e:c5:f0:68:
bb:96:b1:f0:66:8b:7d:8a:44:f5:de:ad:3a:f4:bf:a0:82:be:
e9:60:6c:fa:bc:31:79:3b:a2:b9:19:6d:bc:27:3c:81:ac:d5:
e8:1c:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:48 2025 by rpki-client