Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: p/m4Oyhy1rrk7Tqlej444pyeXin2ruYZ+gEjHwvhYHE=
Subject key identifier: DE:4F:8A:C5:71:AC:23:6B:88:17:41:1E:55:39:20:78:04:D6:CC:D8
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 01994E897504A50EC12E33FCA960F8A50625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 168A
Signing time: Mon 15 Sep 2025 18:00:55 +0000
Manifest this update: Mon 15 Sep 2025 18:00:55 +0000
Manifest next update: Tue 16 Sep 2025 18:00:55 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: DM8UGK+TSMjC/K5e2aszNlfUx7N5BQC5daSCqQtacC8=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:89:75:04:a5:0e:c1:2e:33:fc:a9:60:f8:a5:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Sep 15 18:00:55 2025 GMT
Not After : Sep 16 18:00:55 2025 GMT
Subject: CN=de4f8ac571ac236b8817411e5539207804d6ccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:67:e4:99:59:27:8e:2f:7d:15:6e:a2:d2:
d1:33:56:77:4a:57:e7:43:e9:7b:2e:7c:bc:78:52:
02:15:f3:6a:17:48:61:5f:0a:94:aa:fa:4d:20:42:
94:2e:df:ae:b8:bc:8f:b6:62:9b:55:3b:5a:92:e7:
45:45:e6:f9:5f:35:7b:6d:8a:b1:b4:5e:57:23:02:
27:5c:63:0e:f0:b7:7a:47:fa:eb:19:c6:42:5d:58:
7d:f5:56:42:b9:38:c3:b6:79:c7:d1:cb:99:94:ab:
c6:b7:e6:a3:97:f8:6b:4b:e1:9e:f1:4c:c9:94:62:
19:90:08:2d:d3:3b:5a:00:16:c5:05:5b:e3:b1:21:
64:7b:c8:e1:79:14:c5:43:e4:f9:28:df:27:02:78:
42:d5:80:7c:8c:2a:c2:98:09:19:d4:30:9a:a3:8c:
c0:3d:24:ab:39:14:d5:9d:c7:d5:ab:88:56:6d:cd:
66:72:8b:6c:e8:39:38:7b:3d:73:08:55:c2:9f:24:
52:27:90:4f:e6:52:73:ec:9f:77:a7:f6:d5:a6:5a:
c8:2a:b7:28:6e:8f:65:f8:12:ad:65:99:4a:32:30:
3b:24:6c:88:22:c2:49:db:cd:6d:fb:df:f5:73:71:
37:0c:cd:c2:cc:c1:2b:a6:52:13:4d:1d:1c:a5:ad:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:8A:C5:71:AC:23:6B:88:17:41:1E:55:39:20:78:04:D6:CC:D8
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2f:83:6a:57:a0:d7:28:2f:94:7d:41:81:8a:89:a5:82:45:
f5:d0:6e:98:2c:7b:0a:fe:b4:bd:c0:ba:48:29:74:30:01:b2:
42:73:87:a3:34:34:0b:e5:6c:b9:02:a3:b1:81:55:48:99:23:
25:cc:5d:07:e3:91:a2:bf:b7:8b:38:5c:ff:c1:c2:36:a9:d6:
af:f6:8e:09:70:4b:fe:1d:49:9e:00:8b:a2:37:72:8b:d2:9f:
b1:ac:7f:00:17:98:a7:87:42:c1:3d:b4:ad:94:f7:f9:17:7d:
32:4b:74:b9:4a:04:8f:ab:c3:d7:b7:f0:74:dc:50:38:b9:9c:
37:4a:5a:b7:7a:48:be:60:a3:7b:1a:c1:05:e4:79:ba:37:2e:
f8:6b:7e:60:ac:1c:3e:ca:09:fd:a4:54:e7:f7:8a:5f:24:1c:
97:11:57:a9:d8:7f:02:e3:8c:e4:af:66:be:e9:c2:ad:36:e5:
78:01:96:72:b6:95:4a:cf:4a:cf:1f:a0:e4:91:83:e0:c7:c8:
25:7e:3e:35:ae:9e:d7:6f:d3:96:40:3e:5b:86:b1:28:34:06:
2b:0a:00:c0:55:4f:92:68:f1:97:5a:bd:b7:0b:35:2e:cf:54:
c7:0f:26:07:6c:76:40:62:44:b7:f3:3b:d9:23:bd:93:3c:d0:
8d:6c:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:27:21 2025 by rpki-client