Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: YtwgHeyOE9nqesVozm8zOF30rRvoNdPN8L0vfQ/ZRpU=
Subject key identifier: D5:62:93:41:D2:00:30:6B:19:52:90:29:DF:DE:AE:A3:00:F7:B5:BA
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0198D73BCF708ADD3535FF7F6A4F79846FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1690
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: CWCFl9FkexFKMghauuDbuZJ9JAw.roa (hash: 0sKv1tPv8lAPLOiOPW1NvNF/jyixixEETK08Yyrw5wU=)
4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: CpEmcjn/3bH4OeFkdR6c5z9AHYmoy8QsMQvs8t6wj3M=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:cf:70:8a:dd:35:35:ff:7f:6a:4f:79:84:6f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=d5629341d200306b19529029dfdeaea300f7b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:03:fa:56:c2:b2:05:b9:2c:48:af:9d:76:
0a:1a:82:de:d4:fd:6e:bc:96:d2:96:b9:6b:dc:6d:
e7:6f:41:92:41:af:8e:27:6f:ce:73:86:0d:ee:a3:
02:e3:18:d3:d1:cf:ef:12:a8:10:aa:b2:e2:36:e2:
02:ef:0e:3f:cf:87:7f:59:d4:59:15:e9:c7:8b:52:
0c:52:0f:0e:42:52:28:34:2d:28:70:9f:be:91:8c:
44:5f:fb:ca:6c:11:2d:03:32:e2:4f:35:d1:ce:66:
98:39:d4:b2:19:4d:98:21:60:87:8d:00:12:28:91:
e4:91:a2:44:4b:61:a2:a3:d0:da:0a:bd:97:a0:97:
f2:28:f0:df:7d:3f:44:e7:94:55:79:13:53:68:71:
cb:df:9c:df:33:04:f6:ac:2c:a3:b9:1f:51:07:ce:
91:bf:e4:33:c7:7e:4a:75:0a:16:d0:ed:88:e0:d6:
6a:c8:4e:ae:19:49:9f:9e:ce:b9:a7:dc:db:68:f3:
61:b5:35:7d:74:d1:02:04:23:94:e7:66:06:66:4c:
6b:55:58:f3:4d:83:08:a5:32:fc:8f:ce:97:a5:4d:
b0:2e:79:a9:2f:ba:97:70:fd:e8:30:c8:2b:a2:1e:
3f:95:bf:18:72:a1:ea:c6:c1:6c:d2:67:4d:58:75:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:93:41:D2:00:30:6B:19:52:90:29:DF:DE:AE:A3:00:F7:B5:BA
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ee:e6:6d:cd:d7:0a:5d:61:f1:be:61:6f:7e:b7:da:4e:2c:
38:ac:a1:a9:74:b3:b7:07:7d:74:2e:75:c1:e6:d4:8c:18:e3:
3e:b7:b5:13:b5:82:2c:73:66:ca:44:56:a4:45:d6:23:49:8b:
48:4c:0e:53:24:a2:21:3c:bc:d2:6f:65:b9:2c:18:91:0c:31:
ee:bc:f2:0e:27:93:ed:b5:5b:2f:94:1b:42:7f:88:e6:17:e8:
bc:7b:06:4c:f5:10:9a:d4:d2:aa:4e:d9:df:d0:db:23:9f:69:
cc:14:ba:26:62:ef:c7:b9:89:19:ad:7c:aa:06:2e:ab:3b:a8:
b4:6a:03:9b:31:a3:44:b1:21:49:5a:a5:db:6e:6d:e6:21:99:
d0:68:cb:ae:5c:b2:e4:cf:87:df:a7:d8:b3:33:b2:f0:94:84:
c7:3c:e6:f5:4e:09:02:fc:cc:dc:f5:1b:2b:a1:8a:d2:a7:98:
d2:c9:6c:16:3c:0d:de:19:a4:66:d2:ce:35:b9:54:90:39:19:
d0:0f:00:61:62:de:ce:e3:8d:b4:54:08:a9:8d:6b:e7:f2:28:
9c:b4:c1:2d:45:60:50:15:84:82:00:bb:3a:6b:e4:ce:3c:5f:
07:8a:86:a3:52:06:d0:55:c9:48:58:6c:be:d5:89:7f:48:c3:
6b:36:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:03 2025 by rpki-client