Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: YCVhmG9sAmC77DBp4oz1dh2UV/ui4+pH2kTAqLVnsck=
Subject key identifier: 16:14:60:FD:B2:4D:65:6D:B7:2B:17:F7:4A:50:E0:1E:B3:F6:6C:F8
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 0198D5BB9EE14989B6CB6966F70D85742F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0C0D
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: Q3HJ2784p6Y3KKKNpxGUvXJiykIwOeBo8Gm0RTKmjFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9e:e1:49:89:b6:cb:69:66:f7:0d:85:74:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=161460fdb24d656db72b17f74a50e01eb3f66cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:00:a4:a0:37:b7:5c:50:7a:01:df:41:d0:
59:a6:8a:bb:c9:27:46:49:b9:cc:b2:92:f7:0e:44:
27:4c:3d:eb:9c:4b:d2:b4:b8:51:4c:ca:14:38:12:
b0:f4:1d:30:5a:42:53:5d:54:1c:f1:81:ff:7f:1a:
b3:c1:29:c1:9d:30:5d:27:ee:3a:78:88:da:82:5b:
0e:cf:0a:51:b4:ac:1e:43:2f:7d:1e:3d:28:31:d4:
16:04:7e:a3:ec:a1:ce:88:3e:15:8f:c2:5b:01:c4:
07:72:8b:f3:32:e1:66:3f:51:54:c7:0e:79:88:0b:
59:9c:59:22:47:7c:f6:dc:f3:7c:72:c2:ac:35:50:
86:26:a4:7f:8c:51:1e:7c:62:f2:66:5f:23:9a:a4:
1b:88:64:61:62:f6:a4:7b:04:a6:d7:82:ed:72:c0:
95:91:c6:aa:aa:b1:67:40:48:b4:e7:83:1f:01:07:
8b:17:ac:21:5c:e5:fa:eb:b4:13:4d:3b:ba:af:e6:
30:8b:20:21:4d:e0:be:9a:ca:b0:0a:85:44:21:8a:
1c:a6:cc:8e:f1:72:da:37:c3:19:bf:6e:7d:fe:3b:
a0:11:41:3f:b1:25:0c:c0:e3:c5:30:1a:0f:83:fb:
d2:1f:1f:77:4d:9e:40:d8:2b:b4:77:1a:19:b1:bc:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:60:FD:B2:4D:65:6D:B7:2B:17:F7:4A:50:E0:1E:B3:F6:6C:F8
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:fc:7a:cf:fc:73:ad:9f:0a:ad:cb:b7:dd:82:66:63:6d:
9b:52:4d:1d:6c:65:c5:d8:01:36:fe:be:5b:97:d2:a7:ce:9e:
22:50:75:0b:5a:a0:5f:c0:fa:72:b0:6e:e8:31:d8:91:14:56:
d7:e3:48:d3:5b:7e:1d:05:6a:e2:f8:59:46:30:b1:b0:26:eb:
15:a9:da:52:3d:d0:d0:f8:0e:2c:8e:bd:39:b4:f7:27:8b:0f:
8f:1e:2f:c8:72:2d:51:0b:a6:da:35:c5:09:54:7b:5a:1f:f1:
cf:76:23:7b:56:70:28:08:13:ca:bb:f8:b7:b4:e5:20:55:22:
db:c8:77:98:71:da:3e:ad:82:60:8e:fc:13:75:2e:38:3c:62:
e5:6f:62:f6:4b:46:72:d0:77:e8:7f:c0:af:c3:32:64:ce:43:
10:cd:cf:52:f5:c2:ec:77:39:27:80:29:e4:e5:f6:65:84:09:
54:5c:ec:6d:5c:2a:cf:48:5a:54:cb:9a:19:97:5e:e8:8d:78:
a0:d9:41:bd:ff:47:e9:c5:54:0a:a1:29:0b:be:9f:68:8e:49:
0a:70:9a:30:c6:85:66:ae:2c:a7:d2:20:a4:a7:1e:20:9e:0a:
40:d1:dd:ff:fc:81:df:e3:7f:33:da:32:9c:b4:c8:07:08:34:
31:2d:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:43 2025 by rpki-client