Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: hF5nG0UIzcoRF/TrqaPvCQ7VITlQNBsVnnqvXn42B2s=
Subject key identifier: C3:B4:29:A8:3F:A7:99:2D:A0:8D:DA:4F:84:3F:BA:68:0D:06:62:9C
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0199FBEC092568103D43D47B5CF2CEF20262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: tKdykbMKRD2wCXJRnuoIqEUvQbLtsBB6NFCwhXqCbl0=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:09:25:68:10:3d:43:d4:7b:5c:f2:ce:f2:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=c3b429a83fa7992da08dda4f843fba680d06629c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:a3:1b:01:f0:e9:49:ea:a0:52:ab:23:3c:
5e:f5:3c:66:f2:a2:c0:36:7f:09:4c:8c:26:44:d3:
f5:1f:7a:1d:3b:89:62:23:dc:50:62:75:03:57:2d:
0c:2e:ca:c2:12:87:b2:b5:73:69:ed:d9:c3:2c:b0:
78:0d:2f:76:70:eb:5c:61:a5:69:da:72:61:9e:98:
01:81:28:2a:47:fe:47:ff:ab:1f:1b:4b:3a:50:be:
88:d4:85:51:f6:86:75:25:22:a8:d8:a7:1c:a5:e8:
88:58:a4:11:90:91:f5:1f:fc:0e:e5:99:69:8e:a2:
78:eb:65:c3:c5:26:ea:61:bf:c0:5b:71:5c:f2:54:
65:c4:af:b8:6a:a7:ee:4e:75:b9:72:91:86:57:b4:
0a:f2:2d:be:c1:c9:b9:c8:db:9a:34:63:64:09:64:
86:d9:21:df:df:35:61:b8:d5:62:35:47:55:df:59:
2d:b1:73:32:df:ed:17:f1:37:5b:57:aa:46:e0:16:
22:a5:b4:d4:00:6e:e1:f9:04:cd:c3:e9:59:3c:8f:
c4:7b:56:c2:c7:6b:39:e6:59:25:cf:bb:66:e6:50:
b7:df:25:fa:f5:0f:ea:cd:62:b5:ba:30:76:1e:58:
6c:6a:74:d4:c4:dd:71:e7:d3:3d:b1:32:a3:34:ea:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:29:A8:3F:A7:99:2D:A0:8D:DA:4F:84:3F:BA:68:0D:06:62:9C
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:07:75:e3:46:d4:9d:fe:d7:70:88:8b:66:59:4b:20:4f:c9:
b1:7c:15:23:36:45:b4:ed:db:38:3a:bf:98:a8:88:cc:bf:b1:
35:23:c5:40:15:0e:9a:de:fd:70:0e:ec:ee:89:e4:8b:d2:98:
bc:0c:d3:16:3e:91:11:9a:3f:46:21:fb:ac:bb:42:0f:f1:b0:
2f:d9:60:49:55:25:37:ed:79:1b:c8:5c:9f:55:3f:b1:4c:e4:
b1:e3:e4:10:33:e9:c3:5a:9a:4f:85:2b:fb:21:9e:c2:ec:8c:
89:22:30:ed:54:72:2b:37:cc:cf:61:b7:91:de:c9:13:f8:24:
14:c0:e6:5e:01:b3:b3:f9:d8:61:c9:30:5b:18:21:11:02:e1:
f4:b2:ad:7a:c7:89:1e:f4:e4:15:a8:f6:16:78:bc:a3:33:68:
b5:53:b9:9c:33:54:4f:2b:06:c3:f6:12:69:bb:e0:99:2c:40:
23:82:95:44:82:e3:03:3b:59:eb:d7:9b:c7:bd:bf:5f:04:6b:
de:16:a4:44:ed:93:53:ed:cb:32:4e:92:a4:a2:28:0c:a5:79:
90:53:0b:e5:30:de:fa:b4:38:bf:cf:70:50:5a:21:2a:a6:54:
fd:99:b7:2c:22:c7:72:b9:5c:6d:fd:f8:d3:0d:19:08:34:57:
93:2f:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:45 2025 by rpki-client