
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: XuaqYl/Y8d+3gZZHjRzU7p6IY0eSO2ZWlKXKuTsM1aM=
Subject key identifier: 73:9D:BE:25:8F:25:F3:0F:65:D5:52:7E:80:BC:97:6E:5E:13:6B:49
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 01988F2229D6B2CFDC8A11E0A378EB6E7601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 14:00:37 +0000
Manifest this update: Sat 09 Aug 2025 14:00:37 +0000
Manifest next update: Sun 10 Aug 2025 14:00:37 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: apxW7AtVB4wYLh3kzhuEdTKOQ175XQadGPwjyS1UfqE=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:29:d6:b2:cf:dc:8a:11:e0:a3:78:eb:6e:76:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Aug 9 14:00:37 2025 GMT
Not After : Aug 10 14:00:37 2025 GMT
Subject: CN=739dbe258f25f30f65d5527e80bc976e5e136b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:dc:29:db:15:65:d7:48:80:14:4d:ac:4e:
70:b8:39:af:97:ca:b9:64:27:99:78:14:64:00:87:
52:05:ff:8b:1f:10:f7:2d:99:8f:8b:77:e5:d5:47:
f0:5a:18:2c:2e:4c:f2:65:27:9a:4f:b2:b9:7b:51:
19:bf:e5:34:70:f6:ca:d7:fe:28:aa:04:60:02:42:
cd:76:0c:5c:d3:9c:a1:9c:8e:55:fd:da:92:42:b5:
a6:96:ef:7e:a7:9c:e0:db:50:cf:74:7d:90:4e:0a:
a6:0b:2e:50:21:13:e7:8c:87:15:68:f3:ea:be:7a:
f7:68:30:71:e3:ac:d1:c3:10:96:35:f1:17:81:27:
a0:0d:bf:f0:1e:c0:60:f3:f3:a7:b8:cb:68:0c:c6:
60:93:6c:ca:0b:b1:b1:96:8c:e1:40:ac:d7:6a:61:
2d:d7:3f:60:f7:55:da:c9:79:99:e7:f8:8a:18:df:
0c:8f:0a:11:bb:69:83:1c:78:d8:1e:85:3b:43:67:
11:03:62:43:3d:d5:1e:57:96:cd:19:65:6c:c3:b1:
cc:46:94:e1:92:d0:59:69:00:2b:0a:a7:b8:ce:62:
52:92:03:f8:d3:e0:9e:e3:65:d4:7e:9c:04:2b:99:
34:15:8d:f8:f3:00:f0:3a:77:01:0a:6d:7f:d8:88:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:BE:25:8F:25:F3:0F:65:D5:52:7E:80:BC:97:6E:5E:13:6B:49
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:bc:c6:a3:d5:3e:69:09:e6:d2:61:db:fa:1c:90:6b:7d:
c8:f1:bc:19:8e:a2:48:bf:f8:f2:ef:2c:fb:fc:19:32:93:c9:
c9:11:dd:06:4d:82:16:75:48:e9:1d:0a:e8:82:7b:32:95:fe:
64:cf:46:6f:13:85:a4:0b:57:21:91:37:c0:fa:06:80:e1:88:
c5:28:3b:45:6c:b9:65:fb:23:be:0d:dc:48:5f:8c:a8:c4:c5:
7c:b8:2b:41:84:45:e5:7a:d9:77:19:5f:9e:8f:a6:50:1c:1d:
7c:09:a8:80:b0:d8:95:bc:eb:73:ab:2f:9f:b6:78:5d:86:67:
53:d6:03:d6:6a:e7:09:b6:aa:e5:75:49:07:3f:74:01:61:49:
c5:84:ee:fe:4f:b9:f3:23:1e:bf:7b:63:b7:17:61:79:f8:4f:
f6:2a:d2:ea:20:d0:8d:b9:a4:31:8b:a4:e1:62:c2:0f:e7:de:
9c:bd:f3:3e:14:50:df:3e:be:8d:d5:76:9e:5e:0a:4f:35:be:
da:39:7b:b3:9b:0b:ba:45:91:80:8b:96:70:ab:0f:b7:88:b0:
9d:d8:42:cb:c3:56:f6:d1:02:76:da:af:4d:d2:19:e2:5b:4b:
14:ee:37:1f:20:4e:b3:63:32:7c:a5:85:05:9c:1b:04:bd:23:
aa:4d:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:41 2025 by rpki-client