Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: O5VOVNUBwBoOQ+Rjpm6X8YbeoRYF7SbDDZf5gqwB6nw=
Subject key identifier: 45:48:8B:B5:7D:F0:FF:F9:77:7A:C1:51:2B:E1:6C:31:21:83:3C:F7
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 0198D515F30BC506BE50D5E693259FA00AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 08BB
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: z3K3PBGgvuYtoByTFje45FNhvTgsFpK7obJ5FWsRmYU=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f3:0b:c5:06:be:50:d5:e6:93:25:9f:a0:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=45488bb57df0fff9777ac1512be16c3121833cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:c0:16:03:51:ae:d7:0e:a6:34:62:8f:2d:
a0:88:9f:37:b6:ad:9a:c4:91:c3:fc:e1:2d:a1:04:
04:c6:a0:cb:c8:80:86:4b:7f:a2:1e:42:d8:b4:77:
77:36:74:54:4b:19:82:98:f7:2a:17:4b:3b:ae:65:
88:38:ac:fc:a0:b0:6f:9c:bc:f9:0a:99:85:cf:60:
02:20:72:75:1b:13:ff:8a:8a:e3:01:a7:76:25:04:
7c:b5:04:b5:61:c8:45:9f:33:fe:00:cb:18:5a:d8:
d7:09:db:86:c5:a5:87:22:79:d1:16:f6:86:b6:a3:
3e:f7:73:65:64:d2:55:1d:a3:36:13:ce:01:f1:d3:
03:3e:98:95:34:de:1c:e8:26:ee:6c:a3:a3:4e:5f:
1c:e2:72:30:45:5d:b5:f8:21:2d:99:52:82:50:5c:
05:a4:69:48:37:21:5e:47:f8:b0:d1:38:85:9e:08:
9c:e0:94:a3:77:3b:0a:a1:1d:38:ba:fc:21:2d:7d:
f3:5f:94:17:59:3e:2a:9e:a3:0a:2b:55:d0:0b:33:
e2:c4:36:01:53:cd:ad:7f:f3:52:2e:3a:77:82:4a:
1a:1e:a4:25:84:8c:d8:90:32:ec:7d:bb:6a:9b:38:
f3:4e:12:e9:7d:f6:5a:fa:a1:28:51:1a:8d:05:ba:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:8B:B5:7D:F0:FF:F9:77:7A:C1:51:2B:E1:6C:31:21:83:3C:F7
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:99:98:19:65:4c:ec:28:b6:79:8c:a9:a9:a8:08:b8:1e:
e5:5b:65:0c:50:5e:f9:06:a2:cc:ee:f5:7c:93:e9:c8:99:4b:
13:80:cc:db:03:40:cb:12:30:86:25:7e:f6:59:fc:83:67:fd:
ef:02:65:57:3a:50:b3:82:10:16:f2:22:2e:04:98:db:10:fa:
d3:bc:ab:cb:dd:71:f2:5c:f9:6a:b0:4f:83:2a:c3:32:a0:64:
cd:a3:fb:14:8c:f1:77:bc:dd:ef:60:e2:a1:a1:42:f2:57:f8:
c1:9f:a9:42:62:6d:51:c3:42:a3:3e:19:0f:7f:8b:ef:a2:f5:
c0:e0:0d:4d:54:c6:ce:27:8f:8c:de:96:a9:0c:6d:f7:1d:ea:
17:94:9e:79:ac:dd:dd:d3:85:d0:83:82:35:f4:ba:74:05:9e:
8e:90:e2:8b:b1:7b:d3:8b:0e:09:ce:b8:55:be:b4:1e:cf:fb:
1e:77:fd:f7:fb:c7:91:18:72:0b:17:64:ef:e5:32:37:54:b4:
ea:f8:a3:20:9b:17:ec:a7:5f:4c:f7:f5:53:54:e4:f2:2e:ee:
2a:2f:10:85:31:d1:e8:da:87:df:6c:d2:ad:0c:e1:8a:b1:44:
84:d7:73:a3:b6:d6:32:a7:0e:75:39:0e:73:e1:8b:38:8c:95:
6a:ab:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:22 2025 by rpki-client