Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: VpuI0PXjDY2ryNjSXNOq2Lp02w9rEzhnM5D2SAuHoYs=
Subject key identifier: 39:3B:ED:9B:06:BA:BD:A2:6C:F7:0C:0F:1B:08:10:3F:BE:0C:94:2E
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019923D6528B8951BAB1AE4A4476D425D4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 059A
Signing time: Sun 07 Sep 2025 11:01:12 +0000
Manifest this update: Sun 07 Sep 2025 11:01:12 +0000
Manifest next update: Mon 08 Sep 2025 11:01:12 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: +B9XIf9TtVfL8zkQdad0jfu01KmyCLzHtwcFauuCl9c=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:52:8b:89:51:ba:b1:ae:4a:44:76:d4:25:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Sep 7 11:01:12 2025 GMT
Not After : Sep 8 11:01:12 2025 GMT
Subject: CN=393bed9b06babda26cf70c0f1b08103fbe0c942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:ca:2e:b5:3f:55:c2:ed:f0:37:eb:70:e5:
5e:51:e6:1a:d7:ce:43:31:4d:9b:56:cd:53:71:f2:
79:75:7e:18:41:2c:2e:c1:ee:e0:c6:79:41:d5:30:
7b:90:6f:1d:7b:2f:c8:fa:b8:6b:61:97:5a:41:7e:
8d:0c:21:ca:5c:43:24:29:4d:e2:13:8b:1b:16:92:
d3:02:f3:ca:3b:f7:78:8d:59:3e:9d:55:4e:79:11:
6a:72:bf:29:25:4f:28:c2:1c:2e:45:ae:7b:27:69:
2d:06:3f:f0:1b:a5:fa:74:cf:80:be:87:ae:77:ab:
d6:ea:73:e1:0c:6b:fe:d5:78:42:26:c7:53:87:6e:
62:5f:94:97:3a:4a:c9:c7:6e:52:90:c2:fd:e4:16:
7d:8c:a9:12:c8:bb:b6:7f:df:6c:db:f5:75:02:fa:
09:e2:d8:47:11:13:bb:57:00:44:97:6e:86:85:5e:
91:99:0f:9b:f2:dd:b3:60:21:e9:69:07:0d:18:22:
9c:ec:de:f9:21:be:2b:1f:ad:12:b1:f5:d9:42:28:
2c:0d:1d:fe:39:04:09:ff:cb:7d:12:d4:4c:12:ff:
07:7d:4c:c3:db:f8:6b:81:ce:54:3d:be:a3:18:54:
b7:a3:6a:ce:46:78:76:5a:35:51:73:72:32:43:c3:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:ED:9B:06:BA:BD:A2:6C:F7:0C:0F:1B:08:10:3F:BE:0C:94:2E
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:49:12:3a:68:39:62:09:30:34:88:2f:be:40:81:c9:c5:19:
8a:5f:9a:55:4b:39:65:a3:d0:78:66:78:cc:24:45:f5:af:9a:
89:59:2e:87:b6:8c:f3:77:30:b2:68:09:4e:cf:3d:96:1c:c0:
2d:7f:95:91:df:f3:a7:cc:6d:38:e0:b5:1f:f2:57:83:18:e7:
10:39:d6:dc:58:e8:1a:d8:9e:9f:56:7b:bc:f6:76:1b:6c:5d:
86:9b:22:d0:11:4a:7e:18:8e:46:66:03:c2:ec:44:1c:dc:a3:
16:f5:2c:d8:6f:ac:89:e9:8c:17:bd:63:41:c4:a8:a1:d5:dc:
bf:32:34:41:43:c9:13:c6:90:42:1b:1c:9b:04:05:ee:89:b1:
11:a6:ee:bd:22:32:b4:e5:8f:d2:4b:39:c2:0e:8e:39:f7:7c:
fd:04:8d:cc:69:1b:99:a6:f0:7c:d9:8f:ea:a3:ea:57:5f:58:
cd:49:42:a6:fe:d8:22:b8:18:e0:6e:90:fc:11:a2:75:e2:ef:
43:3c:7d:db:29:b2:4e:7e:d9:df:d3:4b:db:65:27:3c:a5:cf:
ef:38:67:a1:fb:52:fb:bc:f0:9d:f0:58:e7:33:ea:a8:f7:05:
9d:3f:3a:a4:c1:ad:70:3b:1f:de:e4:0a:95:81:e1:35:01:54:
b4:af:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:23 2025 by rpki-client