Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: rg9KULu3AaIzFDE+UZf9fbwPdMZABEyqi44SPHK071I=
Subject key identifier: 59:1F:1D:9E:DB:E6:37:27:DD:B9:06:95:4A:67:55:2E:A3:7D:9A:D3
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 01988B0FBAF833C3FB23E8EE4FB3FBE02BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0885
Signing time: Fri 08 Aug 2025 19:02:00 +0000
Manifest this update: Fri 08 Aug 2025 19:02:00 +0000
Manifest next update: Sat 09 Aug 2025 19:02:00 +0000
Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: elGA4zDsLKdYUwQffBhbYfy4HTzw03dUk3hPjmR/0Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:ba:f8:33:c3:fb:23:e8:ee:4f:b3:fb:e0:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Aug 8 19:02:00 2025 GMT
Not After : Aug 9 19:02:00 2025 GMT
Subject: CN=591f1d9edbe63727ddb906954a67552ea37d9ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:68:a9:f9:62:83:6c:9d:96:36:8b:2f:0c:
cc:e5:a0:af:4f:97:35:b7:49:c0:44:57:f7:aa:42:
c8:09:26:37:d0:50:2b:82:f7:d2:b7:cb:68:af:a5:
7d:1f:f0:bd:95:4d:6b:f7:ac:d8:95:af:22:91:3e:
e4:bf:ef:d7:ed:40:a9:fc:9d:81:02:9c:dc:f0:65:
78:a4:7e:9f:01:3d:8d:ec:6f:f0:db:3a:34:ec:d3:
88:b0:9f:7b:af:7b:a6:c4:cf:ee:0e:8c:dc:c2:60:
b1:ca:c1:39:9c:f9:f0:3c:e3:38:00:5d:22:ba:36:
08:a4:11:64:be:49:20:d4:11:7d:33:7f:45:34:93:
4d:ce:4f:2b:3d:2a:08:67:27:f6:28:d7:1e:88:e1:
0e:6d:2a:60:be:e8:bb:e3:bf:3f:70:4e:55:7d:91:
3c:cc:0f:f6:1e:b6:ca:6a:4b:72:03:d1:7d:fd:ca:
37:6a:94:57:b4:90:b3:4a:0b:06:81:a1:d4:8a:76:
d1:13:a6:e8:00:84:72:ab:73:42:2e:93:87:00:2f:
aa:e6:3b:fc:61:73:f5:a9:55:13:e1:bc:1c:cc:6e:
72:66:2d:05:d3:42:bf:a1:bc:6d:88:6e:a2:41:49:
47:03:aa:a5:ae:ba:1c:fe:61:42:53:ab:87:82:10:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:1D:9E:DB:E6:37:27:DD:B9:06:95:4A:67:55:2E:A3:7D:9A:D3
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:da:44:e2:b6:72:52:69:d3:82:00:22:3d:25:57:ab:61:62:
90:65:9d:dd:a9:c5:e6:a8:45:9d:71:f0:7d:81:d4:c9:4d:10:
a8:14:b1:16:78:9b:da:87:92:5c:62:82:bd:f1:08:09:23:c3:
39:35:33:a1:43:e7:aa:4f:04:ce:e6:e3:7c:e6:6e:19:24:2d:
e8:53:7e:da:aa:90:76:e1:4a:23:f3:11:bf:26:27:51:00:1b:
ff:b5:47:91:ec:3b:cc:d2:8d:00:22:f8:25:9a:7d:73:73:e0:
6e:29:64:ff:06:4b:13:cb:69:0b:2b:83:76:d8:10:8d:d9:27:
b4:bb:08:31:23:3a:81:fa:3d:a0:cd:d2:28:d9:a4:8f:1a:9f:
7a:ad:a2:c2:99:78:67:38:06:fd:a5:58:71:11:6c:d4:87:94:
9d:ac:1b:65:f7:bd:f7:ba:0e:e6:a6:e7:cb:17:a3:ba:3e:0f:
ea:85:2d:cd:7f:0c:a1:d2:db:78:52:f8:91:bb:4f:7d:73:cb:
3f:6b:4e:20:35:d5:03:84:bf:ed:ea:3e:5f:3d:36:a9:df:56:
cb:99:7c:83:c0:bd:25:14:33:07:cd:b6:d6:dd:86:aa:96:c5:
cc:d6:8b:09:61:ed:cd:d3:09:c6:9c:79:e4:a4:bc:e2:24:43:
1d:67:dd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:48 2025 by rpki-client