Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File: hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier: eadqKGHhPXwT5tMWxYtU9ZvpT0qwCLZmMuV1FAZRbHg=
Subject key identifier: 89:AE:59:0E:A8:A3:BC:02:5C:AD:BC:6E:5C:E3:A7:D6:A4:36:01:CD
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 019873E35E98A991E9F38D9F8A4AE85842B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:17 +0000
Manifest this update: Mon 04 Aug 2025 07:02:17 +0000
Manifest next update: Tue 05 Aug 2025 07:02:17 +0000
Files and hashes: 1: 2ocBNxmBQmUkoRPjhlhWgOYgiMs.roa (hash: vHBT5RZYwMgp/JaFcd7djyz4ta6PJ5W0BzdunzoRb3k=)
2: GLrf-4476lN-mWAGatfWehKzDpo.roa (hash: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=)
3: bAf4pYlPQH01VJAbtj0tnC5SXTs.roa (hash: Is6byuQI/ji+q5pWZ94ZQraf9joydkFIunAau5zwEaA=)
4: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: 9qMpIhmfW2rBQty9L2+QwcP8TOWUSEiqqmfrt9uEyqM=)
5: t7q0gRp_Rjm1TKofQQJGVXRxiQ4.roa (hash: 8i0M18hNbssP3r3dcfAr+F0zW7Rf4keL31Nq8c6T/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:5e:98:a9:91:e9:f3:8d:9f:8a:4a:e8:58:42:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Aug 4 07:02:17 2025 GMT
Not After : Aug 5 07:02:17 2025 GMT
Subject: CN=89ae590ea8a3bc025cadbc6e5ce3a7d6a43601cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:37:20:08:42:68:e9:ab:6d:21:19:ce:1f:
f6:16:77:1b:ba:e4:fe:ca:50:90:ef:59:85:1f:94:
42:c0:1e:d8:9e:eb:f5:fd:02:e0:47:d0:0c:55:29:
91:f7:93:a2:97:dc:68:bf:9e:50:3f:61:83:87:66:
da:a3:0a:59:1d:dd:3d:0e:59:b0:b3:67:1a:8c:8d:
01:8f:f2:1e:01:11:72:d5:29:af:80:c8:c7:2a:62:
96:13:ae:89:2e:ea:03:cc:f8:b2:e4:6e:33:cc:f2:
b6:65:6f:be:c4:e3:69:ef:1c:a0:d0:18:8c:13:10:
96:9f:0e:fb:31:2c:53:c7:e0:9e:67:74:66:fa:3c:
1b:c0:05:f9:5a:f5:0c:f8:39:80:79:f4:7a:a5:46:
3b:ef:9f:04:81:af:72:8a:41:63:fa:e4:83:31:10:
cf:ca:c3:e9:9e:c1:d2:d9:a7:db:ba:ec:03:63:12:
82:14:ec:fb:db:c8:bc:d2:22:d6:fc:23:26:bf:27:
5f:cd:e3:dc:db:5b:4b:d3:ca:53:6b:04:92:76:2c:
15:1a:a6:b9:ee:37:a8:08:23:ea:5e:8c:50:08:62:
7c:7d:06:da:20:d6:1e:e0:d7:3f:c5:60:cd:dd:4e:
05:2d:7d:fa:94:ee:2b:7e:d8:b8:10:a5:66:13:70:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:59:0E:A8:A3:BC:02:5C:AD:BC:6E:5C:E3:A7:D6:A4:36:01:CD
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:61:7c:20:b8:25:a2:44:bf:c1:aa:43:15:95:4b:d7:b5:
8d:d1:e0:f6:9f:67:4a:19:f9:aa:e3:c3:0d:4c:d8:24:42:de:
e0:25:a4:64:0e:b1:45:30:a5:2e:a8:37:3d:32:e6:e2:8b:c1:
c5:18:2e:a4:4b:77:42:f2:07:63:9b:e7:f9:6e:2e:7a:41:2f:
75:12:21:40:8a:9a:10:b6:fa:ef:47:bb:74:6d:a5:e8:a8:a7:
58:d6:74:6e:79:21:20:b4:58:02:c8:85:c9:b9:6e:04:4a:70:
43:48:aa:71:f3:d3:85:63:bb:05:6d:de:2b:1c:46:6b:58:aa:
42:fe:99:fc:3d:52:ef:f9:55:9c:95:67:3a:cf:a3:88:16:8c:
15:16:ce:3c:0e:99:ee:69:b0:1d:4a:3c:14:b5:0d:fb:07:c4:
b8:09:db:2f:5a:c8:ec:02:e1:91:ee:ab:9e:2d:9e:91:6f:f5:
ce:ef:27:be:56:01:45:fe:60:0d:05:89:4b:9b:bd:4c:82:32:
cc:a8:eb:86:fd:7f:98:04:b9:1d:ac:0c:ce:36:3b:05:df:32:
a4:d9:d5:38:93:df:d7:86:dc:d4:0d:62:33:66:cd:37:fe:86:
f4:fe:e2:be:30:50:3f:9b:d4:79:81:71:e8:63:10:a5:41:b9:
2f:14:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:35 2025 by rpki-client