Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: LqLK3de3o+fYcZxCUiL2v3B9iOF8u6grtGWplyXNlpk=
Subject key identifier: E1:43:88:4F:D6:CA:54:DF:2E:2B:98:E5:78:2B:A6:3E:FB:7A:3E:A5
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 0198974A2867CAD2C0A6CF64B273A16F4729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 089B
Signing time: Mon 11 Aug 2025 04:01:16 +0000
Manifest this update: Mon 11 Aug 2025 04:01:16 +0000
Manifest next update: Tue 12 Aug 2025 04:01:16 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: Hk9H4nioVr+hpdB3Eq5MqfO8eSAik8Fqz+fvYxg6ExQ=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:28:67:ca:d2:c0:a6:cf:64:b2:73:a1:6f:47:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Aug 11 04:01:16 2025 GMT
Not After : Aug 12 04:01:16 2025 GMT
Subject: CN=e143884fd6ca54df2e2b98e5782ba63efb7a3ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:97:a1:6b:9e:89:f6:1f:f2:4e:49:78:ff:
c5:7d:f1:88:7c:e6:d8:f3:8a:b4:c6:04:f3:f3:2b:
4d:b2:2c:bd:91:e4:dd:9c:2b:e0:ea:10:ea:52:1c:
56:dd:76:68:68:59:64:a1:7d:15:d4:b6:ea:0f:4b:
29:db:a7:0e:63:91:9c:6e:78:f3:12:ef:0e:96:99:
8b:b0:bf:37:ee:6d:8d:ef:fb:25:21:0a:3e:18:e9:
9d:c3:8e:f1:e9:55:da:bb:e4:23:66:5c:0d:c3:4e:
d3:be:2d:b1:14:af:80:d5:7d:6d:38:1d:7f:be:9c:
68:46:49:c2:0b:a3:09:6a:9e:d8:d4:d7:4b:2a:2b:
c5:15:18:1e:6f:f7:1b:9a:36:3c:91:31:53:93:20:
c0:ee:63:1b:62:c5:4a:84:d2:09:20:d1:d9:f1:53:
3e:ef:3f:88:c8:f0:cc:73:20:5d:c9:8d:18:d5:08:
f3:ca:d5:05:dd:e8:5b:eb:d5:df:f1:8f:eb:d1:07:
0b:e1:68:b6:ca:0f:e4:ad:7e:8c:bd:5a:74:46:f3:
2c:c6:52:17:1e:65:32:a9:ac:5e:4e:09:bf:5a:e5:
10:5a:cb:c3:de:65:b5:7a:24:3a:73:1f:c0:38:92:
2e:9e:28:86:14:d5:42:b6:9c:b2:aa:cd:65:cb:4c:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:88:4F:D6:CA:54:DF:2E:2B:98:E5:78:2B:A6:3E:FB:7A:3E:A5
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:12:f6:0d:a1:04:89:9a:f4:e3:5e:ad:68:8e:d6:a3:90:
af:b6:7c:4c:f4:b7:30:f0:e5:ce:38:1a:25:c4:97:a1:7e:ff:
bb:4d:d4:9e:10:e9:a0:23:93:25:16:d3:70:d6:7a:b4:a3:25:
37:f3:86:aa:2d:66:59:f1:31:96:e3:e1:79:1c:3c:91:19:35:
e0:9f:af:8c:d4:c8:cd:a6:c9:8c:cb:86:68:01:48:54:53:94:
35:f6:dc:a5:ad:97:71:fa:56:33:dd:55:12:73:17:f8:e8:96:
61:97:e1:13:f8:27:8e:75:4b:c1:dc:df:05:7d:8a:30:06:a5:
25:19:98:51:17:e7:89:b0:b6:c9:c2:dc:9d:e9:08:03:84:4a:
29:3b:07:ae:9f:66:b4:2e:11:70:cc:aa:97:5d:ee:40:8c:73:
6b:c3:36:7c:a8:f1:22:f3:02:2a:75:9d:97:72:d1:2c:ea:39:
90:47:3f:0a:fc:3b:09:ce:c0:e9:d0:af:35:2f:e1:2f:3d:b1:
9c:af:fa:0a:81:8d:a0:1c:da:87:47:a6:35:16:c5:9f:f9:88:
71:fe:66:e3:0b:23:18:98:53:76:29:63:75:b1:7b:fc:b3:88:
db:6c:12:1c:3c:c3:f6:af:50:71:09:c2:a7:ac:36:24:fd:11:
68:f4:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:00:52 2025 by rpki-client