Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: TjhByKE5edqIb+vq+6F/CtPxkxbqhZiqoHMNopDKPC4=
Subject key identifier: CF:CF:1A:E0:DF:4A:C5:89:42:9E:C5:0A:6F:1D:A7:34:AF:44:46:5D
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 0199FBEA88E81AF6D48D1EAEA977ABE89E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: r1DS1scB8xEuOnsBQnaygxrjCkeeEyCfRu9avWjpA0o=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:88:e8:1a:f6:d4:8d:1e:ae:a9:77:ab:e8:9e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=cfcf1ae0df4ac589429ec50a6f1da734af44465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:23:fe:58:91:ef:80:a7:b3:be:7c:9e:b8:
29:52:05:a2:1d:08:39:ad:29:48:91:a0:d8:c9:68:
00:a4:47:0e:40:91:35:c9:fa:56:a1:b3:09:68:49:
a9:43:2e:33:1c:6f:02:ea:c9:8c:c8:ad:e3:3f:a6:
9c:59:a5:af:14:3f:ea:e1:60:a8:4a:0a:42:79:a6:
a5:9e:71:f3:7f:2f:ea:dd:f0:94:69:d9:31:ce:94:
81:a9:20:88:7e:69:a7:07:99:06:bb:ea:d8:68:94:
15:5c:e0:23:ca:aa:c5:b6:cd:d9:6f:4f:e0:43:a8:
9d:73:82:b9:cb:d6:11:10:0d:79:bb:2a:26:eb:03:
b2:a6:e7:eb:0e:94:c5:21:c5:07:ea:2b:41:6e:ed:
0d:07:68:d6:9b:98:b3:96:2e:38:b2:24:07:a1:ea:
ac:21:5b:dc:87:30:7b:63:b9:63:78:ab:22:71:93:
bb:7e:4c:29:8e:9c:e4:8d:ce:25:5b:ea:22:d4:5e:
94:d4:ea:d7:e0:db:e1:a8:6a:99:a6:d4:c0:33:ad:
00:6a:cf:35:49:47:09:ba:7c:d5:71:ce:02:dc:67:
82:5b:77:b0:18:22:51:bd:d7:f1:06:79:f3:65:6f:
54:d2:9e:7b:a6:c2:0f:8a:a9:c1:cf:c6:f7:5b:5a:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:1A:E0:DF:4A:C5:89:42:9E:C5:0A:6F:1D:A7:34:AF:44:46:5D
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:31:47:a2:ca:88:56:17:e3:c6:73:f0:ce:cc:4d:b8:f6:45:
71:7b:49:fa:3d:31:6c:87:f9:bc:e7:94:5e:da:f0:9d:88:8f:
8c:5b:f4:4d:12:6c:e2:3a:35:3e:9b:8c:0d:d5:14:c7:3c:16:
4c:2f:c9:0b:22:a4:b5:01:81:97:6b:7f:bb:6d:63:8b:72:78:
fc:0a:56:24:66:d2:ca:fc:19:97:c5:21:3c:7b:e9:b5:1d:d0:
b0:f0:16:62:ef:1e:0e:08:fa:9f:88:44:01:17:fe:78:76:dc:
0a:4c:06:1b:f7:73:52:41:cb:98:d2:f0:b5:15:35:26:81:77:
eb:7f:e1:25:6d:65:e4:ac:48:ac:79:71:84:10:14:d0:24:25:
eb:f4:73:ba:a5:34:5c:b8:f8:f1:96:d1:ad:4f:0a:26:e9:4e:
61:76:31:7e:93:28:1d:ec:37:43:d3:33:ae:a2:55:da:7b:ad:
02:32:a0:46:be:bb:13:a8:0f:1a:4f:70:8e:a3:66:7a:59:95:
20:de:22:dc:17:ce:2e:00:49:8f:81:ac:06:2d:15:b9:59:89:
17:24:66:2a:d7:0c:e2:e4:80:84:a9:b4:80:ed:56:9e:72:98:
03:7a:69:ee:b6:bf:41:af:84:83:ea:c7:4d:bb:b4:e2:f9:6c:
10:91:11:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ojoGvbUjR6uqXer6J5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk
ZDc2ZmMwHhcNMjUxMDE5MTAwMTE1WhcNMjUxMDIwMTAwMTE1WjAzMTEwLwYDVQQD
EyhjZmNmMWFlMGRmNGFjNTg5NDI5ZWM1MGE2ZjFkYTczNGFmNDQ0NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYj/liR74Cns758nrgpUgWiHQg5
rSlIkaDYyWgApEcOQJE1yfpWobMJaEmpQy4zHG8C6smMyK3jP6acWaWvFD/q4WCo
SgpCeaalnnHzfy/q3fCUadkxzpSBqSCIfmmnB5kGu+rYaJQVXOAjyqrFts3Zb0/g
Q6idc4K5y9YREA15uyom6wOypufrDpTFIcUH6itBbu0NB2jWm5izli44siQHoeqs
IVvchzB7Y7ljeKsicZO7fkwpjpzkjc4lW+oi1F6U1OrX4NvhqGqZptTAM60Aas81
SUcJunzVcc4C3GeCW3ewGCJRvdfxBnnzZW9U0p57psIPiqnBz8b3W1qUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/PGuDfSsWJQp7FCm8dpzSvREZdMB8GA1UdIwQY
MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt
NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1
LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjFHosqI
VhfjxnPwzsxNuPZFcXtJ+j0xbIf5vOeUXtrwnYiPjFv0TRJs4jo1PpuMDdUUxzwW
TC/JCyKktQGBl2t/u21ji3J4/ApWJGbSyvwZl8UhPHvptR3QsPAWYu8eDgj6n4hE
ARf+eHbcCkwGG/dzUkHLmNLwtRU1JoF363/hJW1l5KxIrHlxhBAU0CQl6/RzuqU0
XLj48ZbRrU8KJulOYXYxfpMoHew3Q9MzrqJV2nutAjKgRr67E6gPGk9wjqNmelmV
IN4i3BfOLgBJj4GsBi0VuVmJFyRmKtcM4uSAhKm0gO1WnnKYA3pp7ra/Qa+Eg+rH
Tbu04vlsEJEREA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:20 2025 by rpki-client