Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: /+GMZk9g/mW4UJJED0HFqf2PxLD5GpqHwAb1Osybte0=
Subject key identifier: D8:8B:DF:FD:34:F6:4E:F9:64:A8:95:D6:B4:2E:AC:A0:6C:21:80:8B
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 0198D47317DE9F30AB97F87B1DA2DE1882D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 070E
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: vIfSAXhazKU8Aieg2h4cfb7kmtDCHhozf1pyyOSWGro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:17:de:9f:30:ab:97:f8:7b:1d:a2:de:18:82:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=d88bdffd34f64ef964a895d6b42eaca06c21808b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:39:a7:7d:d8:61:8a:76:75:6c:83:ff:94:
04:73:ed:a6:8f:16:c3:35:e6:a8:7f:01:b1:4f:66:
7a:ea:e1:88:31:e6:d6:d1:87:13:d6:b1:4e:42:50:
0e:39:56:50:79:0f:f0:2d:a2:eb:4e:8e:d8:0f:df:
98:f0:4c:0a:17:dc:44:36:27:3e:4c:ac:72:31:6f:
bb:e4:23:23:85:b1:8f:37:10:0b:21:ba:76:ce:f1:
6b:cb:68:6c:66:d4:1d:b2:16:eb:02:ec:b9:0d:0d:
77:5a:ec:58:9c:0d:67:08:1c:36:df:c5:76:29:c6:
cb:3d:99:b2:7f:49:38:ae:7b:4f:0f:5b:b0:43:3e:
4e:62:b5:72:1c:6d:f3:46:0e:fc:d3:95:45:d5:8d:
f3:35:2e:50:a3:e8:b2:e7:e8:78:69:b1:e4:08:68:
af:6f:85:1d:89:91:e7:cd:a0:77:30:57:8f:5e:23:
f3:16:9c:62:64:93:10:87:3a:53:1a:b4:6c:f9:ae:
3f:3e:4d:c6:9b:7f:10:b0:84:3b:ec:69:cd:34:77:
c1:50:48:1f:31:b1:27:ab:d9:4c:78:00:a1:b3:b8:
6e:10:7b:74:dd:f8:77:c9:29:a2:2b:c6:74:41:8c:
e3:57:ab:c4:3f:30:b8:66:f4:a5:04:8c:f7:db:6c:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8B:DF:FD:34:F6:4E:F9:64:A8:95:D6:B4:2E:AC:A0:6C:21:80:8B
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:38:f2:cf:d2:18:c6:fe:ac:45:7d:84:65:01:00:b8:7f:dc:
27:3b:b1:a5:54:e2:64:6c:51:09:95:41:e4:79:c3:13:9c:76:
75:26:c8:a4:d9:c6:1e:cc:02:13:f2:54:c8:f4:cb:61:63:5d:
b5:26:7a:1a:88:91:04:1e:d3:3b:5c:4c:97:dc:79:66:86:a5:
ac:ea:78:72:82:d7:f7:bd:c3:27:6a:22:2b:9a:8a:d6:c7:e3:
92:06:48:22:64:76:a8:f6:33:29:76:ff:1e:e7:00:2d:7b:19:
55:ce:38:bf:63:1b:21:7c:42:68:8e:aa:89:0d:cc:28:fd:b1:
86:61:02:b6:1c:57:9e:a9:ae:69:45:c9:b9:e5:91:12:ae:ac:
67:4a:8a:55:77:64:ef:d2:69:c1:98:b7:20:48:fc:b2:97:d8:
53:b2:21:37:ce:d6:c4:de:d9:4c:e0:31:e7:a5:39:a0:32:71:
7f:b6:bb:01:3f:ad:02:48:b8:55:97:18:a3:5e:f6:ed:a8:89:
12:08:16:0d:65:74:e7:6b:e9:8f:77:4c:6f:85:fb:ad:50:56:
2a:ff:37:d7:c3:11:5a:4b:c6:60:4b:62:16:c1:32:73:b7:70:
65:68:12:c3:08:6a:87:75:8f:60:52:6a:3d:2f:42:6e:38:2f:
68:67:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:04 2025 by rpki-client