Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: 3le+rWyOHjHcRXxbJbUxyIsre66a4zRkQY3p30TaodU=
Subject key identifier: 8F:BE:D7:F2:02:68:D4:FC:2B:CA:55:AE:62:2D:2D:64:5F:45:39:22
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 0199221E9049AEA712012ECA895A4843EA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0B3B
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: Oomb0/GTs5c883j3GM5fcJYt/2Sjodxqx/45X2+uzI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:90:49:ae:a7:12:01:2e:ca:89:5a:48:43:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=8fbed7f20268d4fc2bca55ae622d2d645f453922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:17:22:45:76:4c:c9:07:56:fd:69:c4:17:
d8:ed:42:7e:95:ec:3b:8b:0d:ac:6a:df:66:f7:17:
e9:7a:cb:f3:a6:f3:11:29:43:cf:d1:f3:dc:7f:67:
ab:7b:6c:f6:78:36:9a:fb:e1:27:be:b1:72:90:0d:
fd:ca:ee:35:26:88:58:ca:aa:eb:96:0a:26:34:74:
a6:f8:bc:de:09:79:ae:66:3b:34:f0:0d:8d:cb:8c:
10:e7:f9:73:78:3a:2d:23:aa:cc:ee:cf:42:00:02:
0c:79:7d:bc:79:b4:85:27:83:8f:c0:3a:23:80:a1:
1d:ff:4d:dc:45:ca:c6:e4:04:af:b1:07:46:33:d8:
5c:ae:fd:11:2e:25:8a:5d:b9:13:9e:01:f6:50:36:
6c:13:70:11:89:86:db:2d:8d:76:7c:2a:9d:3b:10:
19:2d:ea:f9:0c:cc:20:45:68:49:c0:1a:74:82:88:
d6:eb:45:89:1f:79:9a:b6:01:63:d6:86:d7:17:71:
89:f8:db:23:5d:f1:fc:b4:90:2d:7e:de:61:82:37:
6d:3b:48:56:d4:c1:9b:46:08:70:83:b0:80:3f:d2:
be:bd:3f:96:97:2f:1a:c7:14:a2:87:9c:a7:84:c6:
b6:17:36:d8:ac:e3:00:c6:cd:79:ae:ae:da:dc:80:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:D7:F2:02:68:D4:FC:2B:CA:55:AE:62:2D:2D:64:5F:45:39:22
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:91:4d:0b:35:a1:ee:8e:7c:23:da:77:9c:05:9c:6a:93:e0:
56:38:35:c3:b2:63:b0:53:68:98:81:a9:c7:e2:c8:81:61:e4:
b3:40:2a:47:f3:57:d0:c3:1c:41:11:74:88:8a:18:16:1d:5e:
01:8e:fc:04:ec:e7:5a:0e:66:4d:6c:ed:fd:9d:eb:2f:49:cb:
c5:7f:c6:d2:7c:dc:fe:79:74:63:20:8a:42:51:dc:41:da:ef:
fc:d3:73:a5:71:79:bf:8c:51:73:f0:9e:f0:3d:71:39:ab:57:
b9:1d:6d:e6:ed:87:9a:ed:83:9a:77:88:97:03:95:ae:fc:1a:
29:ff:0f:72:82:c9:96:94:51:ab:a5:2e:4c:a9:64:56:18:cb:
ac:53:d4:f3:e2:d4:b2:80:ca:1f:0b:e4:84:6f:f9:9b:df:29:
59:bf:07:68:3c:77:9a:43:0a:fb:ac:69:dc:15:43:c6:4d:c9:
31:80:07:8e:c6:d7:52:70:13:a2:54:43:0c:66:92:c6:dc:48:
5c:e0:1b:68:2f:d8:ca:83:a0:b3:dd:a5:2f:c9:6a:36:8b:82:
11:6a:8f:c4:16:fa:1d:2f:67:ca:70:55:9b:f9:e6:78:63:3e:
f7:6a:f2:54:6e:20:9d:ac:7f:33:3f:83:ac:e0:b7:fa:4b:ed:
f4:92:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:23 2025 by rpki-client