Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: MZSwDTTOtkfAGMRsoRYU2I0ba/D90ikw5Mt/hWgWG4k=
Subject key identifier: 65:F4:26:FE:A5:D4:2D:6D:B7:8B:0A:31:08:6A:AC:50:37:AC:74:9F
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0199221F39895F4E8617628D2721AE42DA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 03:01:35 +0000
Manifest this update: Sun 07 Sep 2025 03:01:35 +0000
Manifest next update: Mon 08 Sep 2025 03:01:35 +0000
Files and hashes: 1: UyiCJXS5zLJCJ-mb2r3uZMMtApg.roa (hash: 6+o4TOXaHYgYpVjpt7E7at5geUDl0m5s/WhQVOEUlU0=)
2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: bq/9qWYt96C2MFoylFkIKvkMlqwTWUUYDSwrVNGYKQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:39:89:5f:4e:86:17:62:8d:27:21:ae:42:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Sep 7 03:01:35 2025 GMT
Not After : Sep 8 03:01:35 2025 GMT
Subject: CN=65f426fea5d42d6db78b0a31086aac5037ac749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:42:8f:b6:e9:b4:5c:20:da:da:39:5b:6a:
4d:88:53:00:f6:c5:d2:75:ec:fb:b6:6f:0b:f8:2f:
d8:9a:e4:ff:9f:34:40:12:24:d8:5c:69:34:7e:1e:
05:c1:81:c9:8f:15:77:b7:42:2c:43:78:1f:66:af:
58:d1:68:31:44:05:53:e9:cc:4d:0c:49:be:9d:b2:
dc:5a:e7:2d:c9:90:78:3d:ed:5f:22:ff:19:3c:0c:
9b:7e:bd:1e:5a:76:0b:49:02:4e:c8:c9:62:d7:30:
7e:13:ba:2f:4f:42:02:e3:54:7c:bb:3f:db:9f:e6:
d3:bc:23:e3:b2:38:3e:84:f9:f7:2f:86:99:49:bf:
6b:79:75:a0:13:70:f1:b3:29:d2:be:fc:b8:16:5a:
a3:3a:74:2f:86:5a:f5:c8:1d:aa:92:14:3f:ad:8f:
ee:15:ec:b1:30:b4:8e:24:45:75:bc:e1:c1:30:9b:
87:8f:00:60:b8:68:a1:d6:94:6e:ee:ae:d8:a1:40:
3c:fb:60:cb:5a:87:1e:ca:43:3f:7f:67:91:e9:fa:
0b:91:0a:1a:d2:b7:3e:9d:ef:70:bc:00:f6:9c:6d:
66:fc:87:59:78:d9:f2:f5:14:2f:c1:ee:7e:ef:46:
9d:fc:60:46:3c:12:60:ce:fa:74:a9:14:8f:ed:89:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:26:FE:A5:D4:2D:6D:B7:8B:0A:31:08:6A:AC:50:37:AC:74:9F
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:03:87:e8:8d:71:bd:06:96:66:38:fe:59:f6:5d:97:54:3a:
1e:36:7c:9a:63:80:af:ee:de:4f:c4:f4:8b:29:c1:f5:55:2e:
ed:03:ab:b0:21:e8:59:d2:33:d8:89:17:1e:b6:20:2b:4b:b7:
11:90:aa:6b:06:ed:25:96:9e:f4:28:04:07:3a:b7:3f:4e:ff:
93:9c:b4:79:bc:56:86:a4:04:68:9c:7e:0c:1e:b8:25:fe:a5:
10:f3:4f:52:b4:00:21:18:10:3c:0c:c5:e2:9c:73:eb:48:ac:
b6:56:05:bc:4d:27:d4:e0:c1:f4:a2:8f:18:4e:d3:84:27:5c:
e4:da:3c:53:25:c2:15:58:2a:35:95:98:25:fe:2e:fa:f6:7b:
1c:97:20:8e:a0:bf:e3:f8:00:85:d5:fc:05:b5:b2:74:77:5a:
de:7f:3e:69:dd:69:26:6b:ff:02:6b:20:27:41:df:51:c7:08:
f4:07:87:d3:12:50:aa:44:40:6e:f9:7e:c8:f6:c7:cd:62:de:
6b:bb:17:f3:fb:c8:0f:e8:42:c5:51:97:fc:b2:a0:0b:7d:5c:
a7:a1:e1:8d:90:93:26:12:32:36:3e:15:19:18:cf:dc:f7:73:
66:6e:cf:24:b4:9f:2a:0a:02:3b:2c:4e:8b:64:ba:97:3c:64:
94:6f:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:15 2025 by rpki-client