Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: REn4ZR/Y9RAQHWRvBkukboM+DMzxXCPrGMq43wdD/xc=
Subject key identifier: D4:F5:6C:A4:FE:00:91:67:32:C6:F2:1A:3C:C5:01:37:E0:1E:50:84
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 019872CF3E5EB87A46535F5A44F9B7ADB131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0D6B
Signing time: Mon 04 Aug 2025 02:00:40 +0000
Manifest this update: Mon 04 Aug 2025 02:00:40 +0000
Manifest next update: Tue 05 Aug 2025 02:00:40 +0000
Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: tYMJBnlCHX5vdi8dZiTbPKVuEq4ncg9a2O6yCMdRe0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3e:5e:b8:7a:46:53:5f:5a:44:f9:b7:ad:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Aug 4 02:00:40 2025 GMT
Not After : Aug 5 02:00:40 2025 GMT
Subject: CN=d4f56ca4fe00916732c6f21a3cc50137e01e5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:4f:23:46:e4:4e:9b:29:b3:1e:86:b3:6b:
9c:17:4e:3f:c0:fb:b3:18:f1:7b:a6:aa:67:75:0c:
6e:30:38:64:e9:89:ae:cb:1d:aa:3a:41:8d:d2:62:
67:da:c2:37:d4:d3:7f:9d:9e:4c:44:8b:5d:a7:d2:
62:c8:66:12:6f:ec:43:1d:2f:2a:96:cf:b5:48:2d:
ac:17:e9:86:4e:4c:c9:19:a4:0c:4b:fb:d5:cf:19:
62:24:cf:da:a7:0c:6d:18:e1:2e:80:a0:1a:0b:12:
ce:63:44:61:d4:4f:a9:cf:56:ca:91:85:54:df:1a:
6c:c4:ee:8d:41:e6:99:2a:52:8f:1f:eb:9e:5f:3d:
fb:18:e8:a1:47:ab:a8:a7:67:b1:27:0d:b9:2a:02:
83:fe:92:78:70:55:82:ff:7c:bc:0e:74:1f:32:04:
4c:16:f8:8e:08:6a:6d:c0:c9:00:7a:72:49:41:a2:
97:63:2a:af:53:33:a3:89:88:bd:35:cf:7b:d1:01:
df:93:23:b6:6d:8b:51:b5:03:55:b0:3a:04:53:e9:
79:b0:23:11:55:16:bd:b1:f3:d7:28:14:a6:b2:d1:
6e:2f:46:7f:6a:1e:f1:16:a5:59:21:98:ba:c2:9c:
ee:11:34:bc:30:c1:28:ec:39:24:58:0f:42:f1:3a:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:6C:A4:FE:00:91:67:32:C6:F2:1A:3C:C5:01:37:E0:1E:50:84
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cc:c8:db:82:7f:87:d3:6c:4c:56:56:88:f6:65:1b:59:0f:
9d:f0:83:9d:12:c5:a1:eb:98:ca:40:1e:ed:1a:7c:23:18:66:
fb:7b:99:fc:7f:af:94:a1:d2:18:17:20:f0:46:80:6e:48:87:
96:50:ee:d3:f6:c9:11:25:83:50:8b:ad:94:22:34:53:ef:4f:
09:38:b4:e0:ff:c7:6a:a2:89:bf:98:7c:49:7b:47:3e:14:82:
6d:b9:a5:86:f4:9c:01:14:60:f2:41:2f:cd:15:6b:5c:0d:e5:
96:ab:cf:ff:a5:ad:f4:03:1d:f5:f9:2a:bc:06:8e:76:7f:4b:
da:d9:b9:ad:10:a2:68:df:98:8b:55:6f:74:ef:fc:71:49:97:
5b:5e:08:06:50:2a:ac:fd:bf:44:65:13:0d:e6:4c:f2:15:83:
69:0e:1d:89:1f:e7:a4:be:75:60:54:55:bb:13:a7:0f:11:c2:
ca:fe:93:bf:74:7b:40:6a:89:81:b3:4d:a9:0f:f0:51:95:9d:
d1:c7:3c:22:c2:55:68:f3:90:76:eb:31:81:96:9b:91:36:07:
ab:a0:21:bb:19:f4:bf:65:2d:ff:39:37:ab:df:69:03:62:f8:
f1:56:af:67:79:84:60:74:cf:02:2f:f1:f3:a8:14:aa:5e:77:
ed:72:b6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzz5euHpGU19aRPm3rbExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx
NGVlZDcwHhcNMjUwODA0MDIwMDQwWhcNMjUwODA1MDIwMDQwWjAzMTEwLwYDVQQD
EyhkNGY1NmNhNGZlMDA5MTY3MzJjNmYyMWEzY2M1MDEzN2UwMWU1MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypVPI0bkTpspsx6Gs2ucF04/wPuz
GPF7pqpndQxuMDhk6Ymuyx2qOkGN0mJn2sI31NN/nZ5MRItdp9JiyGYSb+xDHS8q
ls+1SC2sF+mGTkzJGaQMS/vVzxliJM/apwxtGOEugKAaCxLOY0Rh1E+pz1bKkYVU
3xpsxO6NQeaZKlKPH+ueXz37GOihR6uop2exJw25KgKD/pJ4cFWC/3y8DnQfMgRM
FviOCGptwMkAenJJQaKXYyqvUzOjiYi9Nc970QHfkyO2bYtRtQNVsDoEU+l5sCMR
VRa9sfPXKBSmstFuL0Z/ah7xFqVZIZi6wpzuETS8MMEo7DkkWA9C8Tp0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT1bKT+AJFnMsbyGjzFATfgHlCEMB8GA1UdIwQY
MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut
NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz
LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUszI24J/
h9NsTFZWiPZlG1kPnfCDnRLFoeuYykAe7Rp8Ixhm+3uZ/H+vlKHSGBcg8EaAbkiH
llDu0/bJESWDUIutlCI0U+9PCTi04P/HaqKJv5h8SXtHPhSCbbmlhvScARRg8kEv
zRVrXA3llqvP/6Wt9AMd9fkqvAaOdn9L2tm5rRCiaN+Yi1VvdO/8cUmXW14IBlAq
rP2/RGUTDeZM8hWDaQ4diR/npL51YFRVuxOnDxHCyv6Tv3R7QGqJgbNNqQ/wUZWd
0cc8IsJVaPOQdusxgZabkTYHq6Ahuxn0v2Ut/zk3q99pA2L48VavZ3mEYHTPAi/x
86gUql537XK2zA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:24 2025 by rpki-client