Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: oaoxHubItRr/i9AOiwn9A+i8d+5LDFE3KPDV58AhXKI=
Subject key identifier: A7:33:C5:19:42:9D:F4:E6:E2:43:A9:B0:AE:7A:BC:C5:3E:4A:01:24
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 01993380C2056BAD3868AEFE95FADDA58F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: 0245
Signing time: Wed 10 Sep 2025 12:01:40 +0000
Manifest this update: Wed 10 Sep 2025 12:01:40 +0000
Manifest next update: Thu 11 Sep 2025 12:01:40 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: ieoqTcDwgvHF5K4XMjpAGTwZ56nmIPfpVcXyrVLcPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:c2:05:6b:ad:38:68:ae:fe:95:fa:dd:a5:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Sep 10 12:01:40 2025 GMT
Not After : Sep 11 12:01:40 2025 GMT
Subject: CN=a733c519429df4e6e243a9b0ae7abcc53e4a0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:bd:5b:c6:0e:ea:56:b2:bd:0e:c2:48:c0:
03:54:76:c4:d1:ca:e3:ac:05:84:1d:45:f0:4e:a0:
2f:f5:2b:3e:8f:55:74:7f:b4:f5:58:e1:88:4c:21:
6a:8a:d1:5b:1d:c0:95:b8:db:b8:d9:1c:4a:04:68:
d3:64:f4:8d:76:31:ef:d6:28:0a:e2:04:ed:49:0f:
bf:59:b6:0a:20:0f:bb:bf:84:e5:56:b3:e8:2b:67:
13:92:06:57:23:50:11:36:0e:e7:5f:1f:9d:a4:fb:
16:bb:54:d7:22:11:61:a0:c0:82:79:76:0e:cc:86:
e1:37:0e:f5:e8:b3:61:8f:d4:c8:58:31:be:32:15:
b7:b8:bd:b9:12:b8:15:f0:57:89:18:db:6d:12:90:
2e:1c:ba:d2:ac:0b:ae:ab:33:b3:2f:99:32:e2:70:
4b:d4:40:3a:b9:84:5a:2a:ed:5a:c4:95:11:ae:c8:
cd:8d:e8:ee:51:49:d1:6e:22:53:0f:bf:cc:28:d3:
27:51:a9:9d:63:d5:3f:3d:29:eb:db:9c:d4:e5:02:
30:23:e6:ed:5e:f6:d4:40:ca:01:fe:ff:91:49:2e:
8a:d2:3c:33:9c:03:a5:de:42:78:c2:5b:89:46:04:
ce:52:ed:03:bb:be:49:22:01:18:43:c0:7d:db:fc:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:C5:19:42:9D:F4:E6:E2:43:A9:B0:AE:7A:BC:C5:3E:4A:01:24
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:7d:e2:20:25:76:30:7c:ad:2d:68:3f:e8:dc:1c:5f:02:
9a:25:4b:9f:4d:1e:41:3e:fc:ca:5f:26:31:44:de:bf:50:97:
85:8b:92:af:7b:df:48:b4:1c:10:22:f9:b3:60:c6:6d:84:e3:
a3:49:6a:6b:e8:8f:bc:62:ae:5b:6f:4f:31:4a:e3:c5:47:ea:
91:d8:96:19:f1:5f:2c:0b:d0:2a:b7:0c:4d:71:25:b2:b2:dd:
80:93:42:25:62:2e:b0:92:03:9e:38:1c:37:c9:46:95:2a:0c:
ab:c6:82:3a:a8:05:42:08:0c:5e:ee:92:2f:2f:74:15:3f:64:
b0:78:1d:36:c2:40:70:75:df:3f:7c:09:3c:2c:84:6d:87:a5:
18:01:77:ca:72:22:b2:ab:75:7c:47:4e:55:a4:63:ea:0c:01:
a5:e4:61:cf:02:02:14:97:82:a0:92:af:de:95:6f:9e:d7:9a:
05:49:20:40:45:19:b8:55:d2:4c:80:cb:cb:a3:26:83:3d:d7:
e7:c0:ed:c4:fd:a4:5b:7e:f4:4c:57:f8:9f:c6:af:14:4c:cc:
ed:f4:65:c2:25:77:ff:18:61:f3:4e:b7:68:f1:9c:15:0d:16:
cb:1a:a2:77:cd:7a:01:81:19:60:d9:65:16:55:58:42:21:cd:
6d:c0:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:27:36 2025 by rpki-client