Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: bkH6fXQNnIULpDY4BFVjQdT/SOdQ4L2v2iv+RsJ+vnI=
Subject key identifier: 48:82:AA:5C:2B:56:41:9C:AF:D2:D3:97:FB:29:0C:36:ED:38:71:84
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 01974967C185551167A5D7B5C17B6A106814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:00:25 +0000
Manifest this update: Sat 07 Jun 2025 08:00:25 +0000
Manifest next update: Sun 08 Jun 2025 08:00:25 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: e370TQGtDCOijz4rJ3vQRbswIH25IHVKPkGNfTdAnss=)
2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c1:85:55:11:67:a5:d7:b5:c1:7b:6a:10:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Jun 7 08:00:25 2025 GMT
Not After : Jun 8 08:00:25 2025 GMT
Subject: CN=4882aa5c2b56419cafd2d397fb290c36ed387184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:8b:48:b3:a1:3e:fb:50:51:45:47:87:e1:
75:76:55:49:94:1f:f9:31:75:d9:5d:14:d9:d2:6c:
cd:d2:0a:d2:91:ec:9a:4c:b1:72:9f:64:0d:04:fa:
4b:86:60:6f:fd:5b:4d:17:63:bf:98:45:ab:02:06:
30:f3:4e:f0:f6:0e:78:1c:ab:95:de:c8:ba:63:e5:
b4:d2:0f:22:7e:4b:18:ed:d9:75:87:c1:4e:8e:bf:
d1:ff:31:15:3a:12:64:1f:54:48:fa:9e:69:c3:12:
a1:ea:31:29:df:53:e6:3c:b8:d5:95:d5:6f:29:ca:
3e:e7:3a:f9:22:ae:4a:00:c0:5d:74:83:a4:91:9c:
fb:63:d8:8d:7e:c5:6f:b8:e6:e8:88:f7:53:a6:a5:
9c:29:85:1d:28:5c:09:b4:96:bb:e7:e3:55:66:7a:
6e:0f:07:66:e2:ac:9c:43:2b:19:95:c2:c7:57:a8:
2b:11:e4:f4:48:df:66:f1:8a:d6:61:b2:c4:a7:26:
f6:61:50:bc:3c:3a:bc:93:00:93:f4:bb:f4:ef:94:
c9:97:e6:48:27:f8:46:d6:7a:97:b0:ac:fd:78:0d:
10:c2:e0:43:1e:bc:e8:6f:8d:7d:b2:7c:7e:6c:8b:
35:af:99:68:67:24:ea:e0:0f:8a:2d:a5:2d:d4:5d:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:AA:5C:2B:56:41:9C:AF:D2:D3:97:FB:29:0C:36:ED:38:71:84
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:91:c5:1b:e9:70:92:f5:5b:45:29:ec:6a:dd:79:1e:3c:58:
0b:3f:0e:a4:22:14:f4:0d:2c:56:26:6a:3c:66:08:3d:a4:2a:
d6:c6:84:ba:4c:4e:68:5a:5b:65:5b:8a:a8:83:20:32:01:8a:
ba:16:cd:a2:f8:72:f5:cc:f2:93:8f:b6:15:45:01:16:07:04:
e4:01:24:ed:fa:ff:34:aa:44:7f:01:38:00:c2:e0:67:26:18:
88:67:9b:be:ba:d6:68:2e:0c:23:21:eb:62:a2:64:b9:3b:59:
af:1d:03:11:f7:6c:78:39:94:e6:18:31:78:27:ce:d0:22:c0:
a7:73:db:25:88:ac:b2:1b:ac:99:ae:3a:e4:64:63:da:6a:9e:
20:a8:88:b6:cd:e2:d4:38:e5:38:23:79:3c:ea:ef:59:36:01:
bd:40:17:c9:34:45:27:60:dd:5b:fa:c9:b8:fb:58:eb:d3:54:
3e:e8:a5:b2:0d:d4:3f:8e:49:04:0f:42:04:9c:3a:71:f8:28:
ef:da:c0:ce:e6:f9:18:8e:23:28:d7:d1:2a:aa:86:9a:20:89:
2c:be:00:a9:e7:6c:59:e8:ba:f5:58:e1:23:cf:7e:7a:a3:97:
2b:ad:6d:bf:e4:45:f7:80:5a:e5:67:27:52:cf:f5:6e:a9:18:
7e:6b:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:49 2025 by rpki-client