Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: ZcxuIYjhUbgkoYpWxUJHb2oYHMIPBGE92I/UdIsKM/U=
Subject key identifier: E3:C7:B8:29:D7:9D:36:C5:3A:9C:E7:D8:36:89:57:A2:A4:98:60:9B
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0198D473E30D5DEC47C5986019F2B9BD02F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 08AB
Signing time: Sat 23 Aug 2025 01:03:41 +0000
Manifest this update: Sat 23 Aug 2025 01:03:41 +0000
Manifest next update: Sun 24 Aug 2025 01:03:41 +0000
Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: tiTCw8GBDxkiH56+p9nHL+riUSktGIChOgD3tCkwcak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e3:0d:5d:ec:47:c5:98:60:19:f2:b9:bd:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Aug 23 01:03:41 2025 GMT
Not After : Aug 24 01:03:41 2025 GMT
Subject: CN=e3c7b829d79d36c53a9ce7d8368957a2a498609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:c2:3c:01:68:a8:9e:24:4d:93:f2:58:80:
1c:e1:e7:6e:71:3d:43:2c:e0:3e:ff:83:52:e4:80:
d7:33:1d:19:2a:5b:f7:5b:61:d8:1e:06:1f:7f:b0:
76:5a:7e:a6:00:91:4b:8e:4c:9d:5c:ea:fc:69:c1:
e5:43:59:d3:d4:56:e0:02:53:23:2a:de:b3:2c:00:
96:be:cc:b1:e8:be:e1:7f:45:0a:d7:8f:35:37:0b:
d4:27:aa:06:e8:57:6c:6b:c7:66:da:54:a0:d9:b2:
2b:ea:ff:a3:94:64:2b:07:9f:5f:0f:c1:a0:9e:da:
14:46:0f:93:b9:6f:d7:96:eb:a4:ab:08:65:10:64:
c8:72:a8:1b:d8:2b:eb:b0:41:24:7f:fa:d2:77:d2:
fa:f9:c5:b7:57:bb:a2:9a:ce:ec:7c:4a:de:c0:26:
d8:9e:0a:7d:7e:2a:7c:79:2c:00:19:0e:01:38:c3:
6c:50:96:6d:f9:b6:00:68:fb:a7:99:db:3c:b2:01:
cf:eb:f5:26:31:06:1b:50:cc:05:34:9f:29:69:7a:
ad:88:7e:80:65:40:4d:35:cb:99:86:50:83:5a:88:
75:89:43:f2:3b:c2:f7:c0:1e:1e:70:d4:09:2b:66:
4f:80:9c:70:5b:91:fb:64:3c:eb:c5:cc:0c:fb:ec:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:B8:29:D7:9D:36:C5:3A:9C:E7:D8:36:89:57:A2:A4:98:60:9B
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:b4:75:c2:fc:ab:a8:a7:4f:17:68:c8:11:4d:d0:8c:29:
e6:8a:4b:35:77:96:86:32:0d:1c:6f:4a:45:00:fd:62:bb:e5:
a2:5b:fc:eb:ed:92:44:50:8d:af:26:e5:c1:5b:be:f8:62:f3:
ab:60:37:76:c6:23:9f:e7:ca:25:ba:05:99:0c:09:fa:e5:9f:
bf:d5:f6:86:54:96:3d:08:a4:79:7c:fc:3f:69:8c:59:98:f1:
d4:b4:e1:32:d4:76:fa:e3:12:c4:d7:47:d5:36:61:a4:1e:80:
81:37:26:ef:54:f5:dd:c5:5e:63:2e:60:97:3d:45:0e:33:18:
9d:4c:27:3a:a9:20:7c:94:db:db:df:46:3d:ad:46:a9:71:d0:
a3:f9:03:76:f2:fd:56:b7:5b:cc:52:00:39:b6:b2:b0:3b:91:
e4:af:ac:84:44:d4:73:e5:6f:0b:40:c9:d6:ce:4e:82:16:15:
5e:4b:df:d2:35:4d:e9:f7:de:a7:ca:79:df:81:b4:69:f8:a3:
7d:63:54:22:3d:42:ff:ee:77:2b:e2:58:b0:3b:93:34:00:89:
b8:cb:94:ab:ed:f5:21:10:ff:64:65:00:57:39:fc:f2:24:b9:
f8:d1:81:b3:17:d0:0b:ff:db:de:be:d4:79:5c:b1:16:56:ea:
15:86:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:15 2025 by rpki-client