Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: knQB87cq00alo3uYbXDM5mN8kGTYTkU4QifGMFNRp2Q=
Subject key identifier: FE:8C:6C:18:58:08:C2:49:C1:30:D8:D3:29:D6:1A:E3:77:79:57:F5
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0198D65FA2CAA3D317685CE7E3EF2280F867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: qy1FSx+PJLJEWokB53ewZGq4yVSs5ajD3xkMd6jBRZk=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a2:ca:a3:d3:17:68:5c:e7:e3:ef:22:80:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=fe8c6c185808c249c130d8d329d61ae3777957f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:9a:b3:54:1c:25:a6:4e:81:d4:8f:a4:3d:
b9:50:33:f7:5e:18:ce:e1:1d:bd:28:e4:53:f4:d0:
b8:4a:b4:4e:d7:fd:b9:88:9f:8b:f6:bd:61:bd:1b:
91:cf:1b:76:a3:94:c8:10:50:cc:e1:5b:c5:ed:b1:
3e:9c:70:57:f1:2f:4a:1b:89:bd:f9:71:ea:b8:b8:
72:0f:e8:be:fb:b3:c4:35:e5:57:60:45:75:f6:01:
4a:51:3d:61:2b:39:56:2f:18:64:71:43:89:88:2c:
5f:d2:41:2c:69:29:96:fc:bc:9c:d1:ad:f6:fb:3a:
be:d8:20:a3:57:75:e9:34:92:8f:46:b3:2a:34:4e:
64:4c:90:16:a0:26:9e:48:fd:bc:57:73:eb:f4:a2:
21:50:74:5b:f7:49:4c:32:d9:0d:a6:d3:6d:b3:fb:
51:34:8d:fc:2b:9f:f8:33:58:87:0d:0e:25:5b:e6:
d3:e8:5e:c4:6a:e5:99:b8:26:37:9a:6c:d9:fa:f1:
4d:90:94:cb:ca:4a:c8:7c:65:e9:67:83:47:c8:30:
32:a1:29:1b:19:c9:0d:89:b5:96:1c:fe:69:79:1a:
de:72:ce:f7:97:c6:f5:fc:04:da:bd:4f:e1:bc:05:
7c:df:58:63:cd:3f:0a:ca:14:f5:6a:fc:17:2b:70:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:6C:18:58:08:C2:49:C1:30:D8:D3:29:D6:1A:E3:77:79:57:F5
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a0:f9:9f:5d:5b:dc:88:5c:fb:fa:ac:9b:b5:f5:06:fd:55:
1b:de:cd:91:dd:10:e4:a7:a3:91:5c:34:99:89:15:56:2b:d7:
c3:01:f6:22:dd:49:3f:79:2a:41:d4:a6:5c:f9:61:15:91:ec:
e5:b1:b1:17:22:f5:c7:e3:62:f7:81:17:4f:3c:38:77:d0:35:
e6:1f:33:e5:ae:88:30:39:a0:d6:d6:16:e9:26:a6:62:14:0d:
20:40:c4:39:ad:c1:f9:0f:98:a3:45:16:2b:c9:2d:79:aa:e8:
d6:d1:da:13:80:b3:68:8e:61:e6:54:02:de:a2:81:a1:04:c6:
6b:f8:52:51:7f:27:5a:c4:ce:74:81:46:1d:28:b6:95:9b:bf:
2f:f5:7f:0f:e2:cb:0d:4e:18:1b:4a:83:8e:c8:7d:64:9b:39:
b3:3f:11:dd:3f:2d:5f:7f:50:07:eb:90:f7:70:a5:c5:f5:04:
8f:44:19:5a:42:b5:89:65:24:26:97:83:ce:2b:d1:af:5c:b2:
23:5c:b5:05:9a:36:58:3e:06:a8:4a:f1:cf:05:6d:ae:ec:ec:
9f:9a:39:9a:f4:e1:e0:3e:64:e3:e2:17:df:c7:fa:b8:36:30:
46:7a:da:f5:42:27:4e:95:e8:5c:fb:ef:78:54:d1:a9:64:96:
fd:08:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:15 2025 by rpki-client