Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: mMb4Ep+kUiaVkwa1xmTjAIA9C9PZbX02JrfZpF3lCyU=
Subject key identifier: 1D:7D:3C:47:D9:8F:9A:29:FB:1C:AE:B2:01:EA:91:5F:FE:30:4B:21
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 0198D6CDDE8B5F1696E34F69F7D6E610FCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0B8F
Signing time: Sat 23 Aug 2025 12:01:12 +0000
Manifest this update: Sat 23 Aug 2025 12:01:12 +0000
Manifest next update: Sun 24 Aug 2025 12:01:12 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: YSnvn+c5gaUNsx14Su4ZjxEBrPLHCuAsX5p1/Qi41bY=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:de:8b:5f:16:96:e3:4f:69:f7:d6:e6:10:fc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Aug 23 12:01:12 2025 GMT
Not After : Aug 24 12:01:12 2025 GMT
Subject: CN=1d7d3c47d98f9a29fb1caeb201ea915ffe304b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:81:ea:ec:4a:94:c8:64:3a:8c:5c:df:95:
57:57:d9:81:85:8a:d1:e8:b4:17:30:31:48:25:c9:
ac:6d:2f:b5:aa:4d:66:91:8a:d8:dd:fb:4a:99:ac:
2f:3b:d1:bc:66:ec:a7:00:33:4f:00:e3:d0:9e:7f:
55:7e:44:94:9e:b4:6b:f0:a8:5a:82:46:a2:8a:ae:
2c:2d:17:f0:e3:c8:3c:3e:c0:70:f6:00:c6:b3:17:
a9:7e:ee:f6:ff:88:7a:b4:fb:57:16:ef:80:5d:6d:
77:0f:f2:7e:2d:ca:8b:5e:0b:7d:df:68:29:b4:5e:
d8:d3:f3:7e:5b:1d:c4:cc:65:09:93:18:79:40:6c:
79:17:64:88:46:ef:53:66:89:0e:31:8a:14:b7:21:
da:c4:c3:38:a7:74:b6:53:78:f7:02:ff:72:48:8b:
6c:6d:8a:76:f6:a9:49:73:f1:38:cd:4a:32:22:5f:
fb:35:4b:12:2c:10:74:74:91:9f:15:33:2d:f7:4e:
f6:c8:53:43:ec:f5:09:7c:53:77:b6:7e:7a:06:9b:
c9:cb:9d:f5:11:b0:8c:da:76:8d:48:c0:5b:d3:17:
38:1a:57:3d:9c:af:dc:6f:de:3d:67:96:57:9d:ca:
43:7c:8e:61:66:5b:eb:6f:68:78:92:dc:86:8c:0c:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7D:3C:47:D9:8F:9A:29:FB:1C:AE:B2:01:EA:91:5F:FE:30:4B:21
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3a:32:7d:38:64:ae:9c:c5:46:81:eb:56:a8:97:c5:75:8e:
f2:5e:46:48:18:81:dd:d5:66:c4:19:09:d9:60:57:20:7c:2e:
18:e4:ec:41:0a:6c:cf:ae:90:e0:89:99:c4:0e:66:4f:67:24:
72:0a:e8:42:d8:90:db:49:34:5a:2b:dc:e0:97:d1:74:c9:90:
ff:8d:50:6f:c6:01:5a:2a:6b:70:f7:27:fc:d7:a6:05:4c:68:
54:86:6e:f9:44:93:50:ea:50:1c:ea:6b:4a:21:d3:66:f3:2d:
a5:c4:32:38:eb:96:26:d8:13:35:60:61:ff:39:4d:f7:54:93:
d9:98:71:ad:69:20:e9:ea:4c:6d:7f:9b:79:85:af:c5:0d:5d:
5f:d1:a1:40:51:50:b8:7d:38:ff:9e:6a:8e:b8:93:7f:5e:e2:
1d:24:d2:fa:ac:a4:5b:ce:25:68:bc:6c:f8:ab:0b:31:c5:c4:
54:a3:ad:ed:0d:ba:46:0d:7c:d3:28:78:55:37:7f:7d:d7:b5:
24:e8:50:49:21:a7:17:6a:43:ee:24:96:81:b3:df:8c:54:c4:
e2:42:ad:aa:62:50:6e:2b:07:b1:7c:45:96:d0:e5:23:07:dc:
b0:cb:67:e4:d4:e1:70:aa:c4:30:02:96:34:8f:3c:21:d9:a7:
76:f4:01:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:54 2025 by rpki-client