
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: Gq/b83pggPW/mLiTAwzaantIK2iN7Z9apUO6Nik2iQQ=
Subject key identifier: B3:19:7A:21:2F:87:E9:7B:47:AF:5B:AE:50:72:F2:FB:0B:46:23:56
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 0198D54E72E309940827777A9AAFF98DC79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 015C
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: HjHjoIG026K3Yp10HharrnhDTwBoZI70w215Oc1mC3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:72:e3:09:94:08:27:77:7a:9a:af:f9:8d:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=b3197a212f87e97b47af5bae5072f2fb0b462356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:ab:2f:b5:65:f4:4f:7b:9a:e6:7d:b0:bc:
76:3f:ec:2c:15:1a:17:36:8a:d4:02:9a:93:fa:da:
d2:2b:24:c9:88:18:23:fa:98:99:5c:70:a4:8d:b2:
e2:a6:29:f8:21:1f:d1:ac:54:71:34:2a:62:4d:e7:
2a:aa:db:d1:30:f8:e9:5a:db:d5:53:34:0d:13:02:
37:9c:b4:c1:5b:63:3c:6a:06:0d:82:29:e1:54:50:
82:69:0a:0b:81:99:52:a0:9a:9f:74:4e:43:34:0e:
92:22:f9:c6:02:89:15:c2:a4:37:47:81:ee:2f:b6:
df:ad:42:ab:98:cb:61:ec:ce:6f:49:40:fb:e9:7f:
d4:a2:ed:1b:bc:59:48:4a:c4:86:95:5d:5f:1e:f2:
46:03:91:3a:0f:a1:8e:f9:a7:34:56:44:4c:8c:65:
0a:c8:b0:92:7b:8f:3f:0d:41:21:03:df:05:3d:c3:
0f:1d:1d:ec:d1:1c:d4:76:1a:0d:f8:89:64:d3:b1:
85:4a:20:a2:08:51:7b:db:00:cc:56:21:77:8b:c4:
75:94:cd:a2:b0:d8:90:1c:a7:e0:7b:5a:07:ed:de:
05:37:9d:11:6f:49:4d:48:63:6a:b6:51:ce:2e:a8:
e6:f7:3c:09:4b:40:c0:0a:40:02:89:61:f8:9c:81:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:7A:21:2F:87:E9:7B:47:AF:5B:AE:50:72:F2:FB:0B:46:23:56
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:21:ac:62:0c:7c:70:07:c4:7b:64:9b:df:19:8b:24:0b:
0c:db:54:22:17:59:79:5f:ea:f7:c6:95:01:bf:f2:12:f5:14:
0e:bf:e0:e7:93:d7:64:e3:11:a0:bd:c8:1e:e7:35:79:e0:b7:
85:1d:fc:5b:2c:06:f0:be:5e:91:4f:4e:94:b4:48:10:49:d8:
74:f1:06:d8:fe:c1:ba:01:a0:5f:83:32:f5:dc:b1:51:f8:ea:
6b:d0:df:2e:9f:8b:01:e3:93:8d:a0:ab:23:9a:16:f7:a8:6c:
b5:7c:86:59:3f:df:2d:f9:62:81:f1:80:1a:c8:aa:31:68:5a:
13:5a:5e:dc:a9:18:e2:30:bc:29:78:65:b9:66:8f:da:85:94:
ca:36:b0:78:33:77:68:ac:aa:a4:21:cd:1a:c4:82:48:f7:88:
07:c0:84:00:1b:0f:23:5c:6f:8f:25:e4:fc:6e:fb:a3:c6:f3:
a5:6c:c9:94:57:7f:79:2d:93:77:b3:72:30:45:0d:a6:31:d0:
04:88:86:4f:bd:07:9d:60:7a:97:c7:d1:f6:d3:9a:47:30:c9:
d8:9d:ed:9c:bf:a7:90:78:cf:af:fa:5d:27:66:29:19:57:22:
5a:8a:8d:80:3d:59:99:ad:f7:73:5b:4a:0e:a9:f6:67:1d:bb:
62:68:47:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnLjCZQIJ3d6mq/5jcebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi
ZTZkOTQwHhcNMjUwODIzMDUwMjI0WhcNMjUwODI0MDUwMjI0WjAzMTEwLwYDVQQD
EyhiMzE5N2EyMTJmODdlOTdiNDdhZjViYWU1MDcyZjJmYjBiNDYyMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHurL7Vl9E97muZ9sLx2P+wsFRoX
NorUApqT+trSKyTJiBgj+piZXHCkjbLipin4IR/RrFRxNCpiTecqqtvRMPjpWtvV
UzQNEwI3nLTBW2M8agYNginhVFCCaQoLgZlSoJqfdE5DNA6SIvnGAokVwqQ3R4Hu
L7bfrUKrmMth7M5vSUD76X/Uou0bvFlISsSGlV1fHvJGA5E6D6GO+ac0VkRMjGUK
yLCSe48/DUEhA98FPcMPHR3s0RzUdhoN+Ilk07GFSiCiCFF72wDMViF3i8R1lM2i
sNiQHKfge1oH7d4FN50Rb0lNSGNqtlHOLqjm9zwJS0DACkACiWH4nIEjIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMZeiEvh+l7R69brlBy8vsLRiNWMB8GA1UdIwQY
MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt
NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2
LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUohrGIM
fHAHxHtkm98ZiyQLDNtUIhdZeV/q98aVAb/yEvUUDr/g55PXZOMRoL3IHuc1eeC3
hR38WywG8L5ekU9OlLRIEEnYdPEG2P7BugGgX4My9dyxUfjqa9DfLp+LAeOTjaCr
I5oW96hstXyGWT/fLfligfGAGsiqMWhaE1pe3KkY4jC8KXhluWaP2oWUyjaweDN3
aKyqpCHNGsSCSPeIB8CEABsPI1xvjyXk/G77o8bzpWzJlFd/eS2Td7NyMEUNpjHQ
BIiGT70HnWB6l8fR9tOaRzDJ2J3tnL+nkHjPr/pdJ2YpGVciWoqNgD1Zma33c1tK
Dqn2Zx27YmhHzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:25 2025 by rpki-client