Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: +ZwiP+tzr4RJyoyzNRNE1+QXC6zWSIoJOetrIaAwXeE=
Subject key identifier: 53:5E:1F:62:07:4A:E7:0E:BD:F1:68:1E:A9:E9:98:21:BF:79:72:12
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 0199225525BAA97DE7285B3BD821C8D66BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 0706
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: P67W-sp0mORZMv4IJYWq4ebl3DI.roa (hash: 1jNCeGYTIsfay6y/1fIn4OYexq/lwmYvxij2ON0v7bU=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: dyBt9nNXRB5RLnZeG9bq3388OLQxFmkBUJXRwu0NDjQ=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:25:ba:a9:7d:e7:28:5b:3b:d8:21:c8:d6:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=535e1f62074ae70ebdf1681ea9e99821bf797212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:4d:71:57:8a:a3:a0:dd:0b:4a:73:9e:87:
c9:97:24:5b:8d:e8:f7:a9:62:7f:82:f2:f1:c6:4e:
3b:a9:d6:c3:a5:30:ae:0e:6d:56:ec:a9:2a:fb:a4:
c4:41:34:92:83:fd:50:a5:60:55:30:df:a3:da:30:
11:cc:4e:f3:4e:bf:27:1d:6c:44:fe:97:2e:c4:68:
87:05:cb:df:40:bb:ab:8d:3a:de:f6:02:f7:88:15:
ae:b8:7a:e4:99:f3:5e:4d:39:29:73:a6:80:41:11:
67:0a:a5:85:5a:a9:47:ca:49:7c:4b:71:44:0a:72:
11:35:ab:20:74:cc:73:1b:48:88:25:3a:c4:cf:ee:
bb:be:3d:d7:22:00:fd:ce:66:f8:64:24:9c:0d:cc:
9f:cf:6a:9a:d5:a6:cd:fd:54:47:06:ac:08:5a:80:
c9:dc:38:0a:bc:0a:7a:94:b7:13:b6:25:a5:c6:b3:
33:dc:83:62:04:ea:21:c3:1e:fa:4d:2e:06:1a:ba:
1f:53:e7:b2:9c:91:c6:d6:ca:ba:22:72:a0:d7:a6:
be:8e:eb:db:ef:25:46:36:6f:d1:a0:11:78:76:93:
4d:9f:00:52:ee:bd:c0:eb:18:57:41:04:5e:d4:51:
b5:74:62:8e:d4:20:1f:98:f3:5c:93:28:13:28:48:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:1F:62:07:4A:E7:0E:BD:F1:68:1E:A9:E9:98:21:BF:79:72:12
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:a0:48:77:94:ca:e0:0c:35:54:a8:be:98:09:e8:c2:97:
5c:d6:84:1e:ac:55:80:84:0a:38:ab:9a:94:67:ae:e8:70:f8:
ba:06:ea:3b:eb:6b:25:9c:a5:51:2d:a0:67:b5:5e:09:22:8b:
29:85:ce:71:89:d8:56:30:c1:87:6f:28:47:27:72:a9:4e:df:
a5:67:d5:bf:8f:f6:7f:31:18:16:e7:d0:8d:e7:49:c6:e6:5c:
e5:17:ea:22:74:76:42:9d:47:49:64:7c:5e:23:22:93:31:e8:
7f:00:72:35:60:2a:f4:22:e7:8e:f7:75:10:ee:77:0b:a0:0f:
2b:49:1b:d1:c1:48:9a:5c:c3:72:84:5d:4e:a2:63:c7:c1:95:
b6:98:bd:bd:fd:15:ca:8c:15:62:52:ae:17:e6:ec:a4:09:e9:
63:4a:4c:7b:97:41:99:c7:38:42:87:c7:7e:92:e5:a2:1d:f2:
b3:f7:74:36:bc:69:12:f8:8d:f1:b7:48:38:7c:ba:42:0d:01:
a5:2b:dd:f3:fc:d3:99:3c:1f:d2:1f:31:80:59:8d:0f:e0:3a:
c1:51:e3:72:04:02:72:8c:d7:02:f0:2f:bd:60:ae:34:3f:ad:
c0:59:da:e3:fe:86:6d:a5:96:c8:ac:c6:70:67:8d:89:e0:45:
e7:2a:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:39 2025 by rpki-client