Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: uTN4d3YPM3QxwVHNQMYwTAEa+MnLQ8QMwECEEhKl7kg=
Subject key identifier: FB:BC:43:05:64:F6:52:D8:17:F9:17:5E:68:48:9A:C8:06:1B:5D:1E
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019A0035BE86460B0FDE8908280B4A455697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0C29
Signing time: Mon 20 Oct 2025 06:01:53 +0000
Manifest this update: Mon 20 Oct 2025 06:01:53 +0000
Manifest next update: Tue 21 Oct 2025 06:01:53 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: 6kUUCNsduDQjIA2a0PKfm0NN1J6wVRXytO48MpTcZbY=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:be:86:46:0b:0f:de:89:08:28:0b:4a:45:56:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Oct 20 06:01:53 2025 GMT
Not After : Oct 21 06:01:53 2025 GMT
Subject: CN=fbbc430564f652d817f9175e68489ac8061b5d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:7d:33:dc:95:0f:e2:fc:00:c5:fb:61:6e:
d5:01:21:5e:7b:8f:31:c6:f7:11:b3:26:a7:ea:a0:
ce:af:0e:ba:a8:12:81:9f:de:24:e2:25:bc:3e:df:
16:7d:f1:7e:d3:5c:76:ea:53:65:82:27:c7:17:ff:
8a:28:84:ab:db:da:1a:58:97:18:e8:75:16:9b:5e:
5f:d5:6d:48:3c:a8:05:e9:75:bb:0e:2c:6a:4d:42:
40:4a:62:97:2c:65:6c:a4:4f:33:eb:47:22:9d:89:
1a:17:01:80:f2:d6:19:d6:0e:cb:84:a7:7f:d5:a2:
13:17:3a:63:45:cd:4d:c4:73:a5:62:05:87:1f:a5:
0f:5d:07:33:46:26:ca:09:90:83:c1:32:bd:72:18:
2f:a8:8c:b1:41:18:4e:95:7f:65:88:e3:ce:3d:97:
94:3c:02:ce:6b:05:f8:07:d3:22:bb:03:68:a5:ec:
1b:d1:8b:c9:c2:ef:e7:e7:e1:cd:b4:84:10:48:63:
11:bf:0c:fa:97:6c:b6:36:48:65:ba:9e:ac:35:79:
8c:d0:d4:19:cb:6b:4e:48:cf:d8:9b:23:23:f0:6f:
a2:f9:7d:92:5f:ea:05:c0:75:af:d4:4e:57:c3:07:
13:c5:3a:a2:77:12:e2:1c:3d:54:ca:95:5a:8a:b8:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:43:05:64:F6:52:D8:17:F9:17:5E:68:48:9A:C8:06:1B:5D:1E
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:61:9a:af:97:d6:a4:6a:39:ac:84:7b:e8:ce:cd:89:bf:
d6:cf:e5:e8:54:3e:0a:cf:2f:8c:c5:bb:b5:f4:4d:86:d9:85:
1b:5b:51:18:ed:ce:7b:89:b7:ab:b6:f6:d3:c3:67:e5:35:7f:
37:41:ec:b3:7c:3c:9d:11:63:c8:0a:4d:97:97:4e:60:fa:c2:
67:fe:80:7e:83:ad:59:ba:1c:af:88:bf:72:bb:1f:65:31:30:
0f:03:6c:20:44:b8:fb:aa:70:c4:c0:2d:69:f5:e2:2a:c6:b6:
b7:33:d8:fd:ac:a9:36:10:51:4d:12:a7:26:01:73:50:bd:e9:
00:36:ef:0b:74:f2:7e:ad:3a:ea:52:f0:76:37:2c:30:0f:58:
20:a3:bb:fb:14:af:7c:fc:6d:de:65:17:11:2f:17:69:8c:9d:
a7:1b:72:22:e3:fe:f0:ce:d2:6e:6e:10:d3:58:56:dd:65:02:
aa:13:09:f2:a1:63:28:90:16:1d:34:d3:8a:4d:bd:d8:94:2e:
60:a8:b8:ca:2c:96:9e:af:0e:bb:f5:0d:09:a0:fc:e7:68:8e:
7f:f0:b9:b2:87:1e:a1:5b:14:fe:11:34:d7:03:65:66:0a:e9:
cb:48:38:55:75:f4:65:4c:4f:a1:8f:98:42:a7:0a:ce:d7:cb:
af:89:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:23 2025 by rpki-client