Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: mFFnErgDOYTqdHgka4U4Y4utmWoTEUXYFWuiabgtN6o=
Subject key identifier: C8:11:E6:CA:D0:B9:D0:41:86:56:C9:87:2C:59:FA:6D:D8:C4:03:0B
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01992F36219021CDAEC1F68908A208D31478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1433
Signing time: Tue 09 Sep 2025 16:01:40 +0000
Manifest this update: Tue 09 Sep 2025 16:01:40 +0000
Manifest next update: Wed 10 Sep 2025 16:01:40 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: NuT0WoGx7+zIF/RCzPsDHgbMEv5YWz7MNtWAG3mT15w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:21:90:21:cd:ae:c1:f6:89:08:a2:08:d3:14:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Sep 9 16:01:40 2025 GMT
Not After : Sep 10 16:01:40 2025 GMT
Subject: CN=c811e6cad0b9d0418656c9872c59fa6dd8c4030b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:5c:a3:8b:63:3a:b8:b8:82:e6:e1:4b:d1:
af:cc:c6:b8:3f:72:cd:69:9b:53:32:a5:c6:c3:97:
0b:6c:94:ac:12:8e:fb:e4:81:c5:24:7b:1b:6c:eb:
74:17:5e:07:bb:b0:37:d1:53:f9:26:2d:c5:30:42:
f7:bb:1a:51:48:60:db:4e:c3:c1:66:a6:f1:99:19:
d2:8f:4f:da:03:17:76:c2:87:1b:28:71:a5:dc:e3:
b2:95:9f:ce:d9:6d:f0:2c:57:5a:23:35:45:07:78:
44:2e:36:b3:01:b9:de:df:c4:15:9a:05:dc:a5:09:
8a:30:6d:28:03:14:49:75:c3:ba:dc:34:5e:86:14:
c4:43:eb:35:6b:6e:7a:af:3c:ee:6c:6c:04:2c:69:
3d:13:66:1e:59:3f:7c:2a:25:4d:41:83:70:ef:70:
81:ef:36:62:36:95:46:67:79:fe:2f:8b:b0:e6:c1:
50:5e:a2:06:c8:03:aa:7b:ea:e6:d8:47:43:47:de:
04:f1:e4:54:f9:58:2f:09:43:d0:90:d3:5a:2f:cb:
7e:8e:8c:13:6b:7d:a1:22:f5:3a:6f:d0:2d:ba:d4:
b5:5c:f5:c5:32:7b:3d:44:1a:a4:cb:d6:f9:ec:5c:
c1:ef:7d:cb:28:9b:b6:4f:68:8c:b6:c6:3f:39:2b:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:E6:CA:D0:B9:D0:41:86:56:C9:87:2C:59:FA:6D:D8:C4:03:0B
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:1d:15:a6:0d:d8:0c:04:5f:2b:20:24:2c:27:0b:29:db:
b7:0b:a8:54:a2:f2:a6:c2:82:82:1a:75:03:df:c6:dd:9c:0d:
55:db:76:7e:1e:d6:8f:69:1d:e7:98:8a:aa:45:d8:36:84:f3:
9c:e7:b8:66:f5:18:cf:9f:a7:2d:df:f4:b6:12:bc:4b:58:32:
3c:97:e5:84:38:e7:86:9e:c9:cf:93:08:98:34:bf:31:8b:40:
c3:48:88:8c:aa:17:f1:2d:84:6d:d9:d2:9a:40:36:4c:e1:74:
5f:02:59:51:8f:2e:ea:b5:3b:fa:e3:dd:4a:af:11:03:61:d4:
09:83:49:f6:4e:11:f5:c7:f0:8b:e2:bf:c6:66:ac:d0:44:80:
18:e2:04:a7:4b:a0:f2:7a:4c:cc:05:4c:2c:3a:ca:53:b4:97:
a0:90:d1:ef:93:c1:e7:a7:4e:d4:c8:4a:71:4c:b4:4a:f0:df:
51:c8:1c:be:f8:43:72:4c:1a:85:88:2d:0a:61:0f:9f:bf:71:
7b:6e:a8:11:40:50:cd:bf:51:78:7c:d9:a0:6c:dd:45:0b:a0:
bf:b3:4b:2b:2d:f9:24:11:d3:57:02:ac:e8:4f:90:63:2e:2b:
65:c5:d9:f6:2a:35:70:67:ad:01:73:57:7d:2e:4b:09:0e:68:
83:ba:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:00:28 2025 by rpki-client