Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: LZxo4Td0EutUDDFsGCbRRMH2jDa1jNJtjhQX+VBKMNA=
Subject key identifier: 98:C0:92:D9:82:62:D2:FD:52:8C:F2:8F:E0:EA:D4:36:F5:F8:13:AD
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 0199228D00E5F0E4AC8CECB3437119C035D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 1394
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: hM8rbRyEvd0r4IYef/jzb0ns/txrfoWeTFd8M9UuLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:00:e5:f0:e4:ac:8c:ec:b3:43:71:19:c0:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=98c092d98262d2fd528cf28fe0ead436f5f813ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:39:a6:8a:34:8b:b7:7e:77:78:ec:dd:45:
12:c4:82:fa:09:b8:cd:23:39:0b:e3:d4:ba:8d:a6:
5a:2b:af:52:58:c9:d1:dc:4d:51:43:51:2c:f3:e5:
49:81:58:51:1d:03:07:9d:71:68:78:9e:2f:89:f0:
e1:e5:e3:d6:63:b3:30:17:40:ce:04:ba:08:77:23:
70:14:44:70:4e:e5:69:75:15:a7:f2:b8:0c:da:85:
63:86:70:d4:23:a3:ad:80:e6:97:64:c6:67:fb:d7:
8a:fd:02:8c:59:b4:ef:ec:e7:0d:87:bd:43:ec:ed:
b9:46:cd:4a:7b:e3:7c:0d:7f:24:2f:b3:59:85:65:
2d:65:28:33:75:af:ea:2f:23:ee:89:29:7b:16:42:
76:82:38:1c:2d:f1:8a:f5:8d:7d:63:11:ac:f8:91:
0b:12:42:03:8d:1d:29:5a:ef:a0:e2:26:4b:d1:24:
ac:38:67:5d:dc:13:9d:ab:3b:8e:44:7e:9b:c7:5e:
9c:b9:af:e9:a7:7f:e6:0b:27:e1:65:6b:94:66:6b:
76:85:93:ea:a0:ce:63:fb:17:ca:cb:f8:7d:28:8e:
14:ec:d0:a0:33:5f:6c:94:49:31:77:04:df:20:ca:
40:a7:b9:23:b8:13:5a:99:ca:45:52:ce:4b:6e:ed:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C0:92:D9:82:62:D2:FD:52:8C:F2:8F:E0:EA:D4:36:F5:F8:13:AD
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:eb:ce:1d:4a:c9:30:0c:75:0c:03:65:ad:67:92:9f:d5:
ea:54:3c:56:0a:51:ff:d1:3c:f3:2e:0d:d1:ba:b3:56:71:23:
b2:a3:33:11:d7:8a:8f:13:9e:62:e7:8b:7c:8c:19:d5:ce:38:
c2:f1:7c:d3:8a:3a:02:48:40:15:86:6a:90:4b:c3:aa:28:48:
d9:b3:73:74:3d:af:56:a8:54:30:ef:8e:fe:3d:38:20:a7:63:
5e:00:f9:2b:ce:ee:1e:56:41:82:4b:a3:54:fa:8f:00:fc:0b:
6e:03:d7:d0:69:35:5f:01:4c:ae:f3:fd:63:0b:a6:81:38:08:
08:83:50:38:62:b8:58:f5:4d:4f:88:ab:cc:c9:d4:2d:37:35:
87:25:5b:39:80:25:78:93:30:d4:c3:cd:d8:12:b9:9c:f0:c7:
86:b7:07:9c:ba:48:64:0f:d0:67:ed:e4:c1:7b:64:90:7b:ae:
8f:a4:e0:2d:bf:9c:c1:71:70:a5:57:00:82:20:06:09:ae:73:
57:73:f5:db:c7:36:03:f7:01:5f:16:66:0a:0a:51:c8:f1:98:
fe:34:0c:e9:3d:b8:aa:07:cb:72:8a:71:7a:b5:7f:a6:08:7c:
94:45:52:b4:96:f0:7f:09:de:47:33:ea:17:fc:a2:4e:89:a1:
b8:14:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:36 2025 by rpki-client