Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: cx1h5IN7TlykJBwyZsgFsFimVCnUWLMprUcFL+yKjLQ=
Subject key identifier: CF:6E:44:0C:80:88:44:67:9A:6B:82:6A:DF:A0:D7:55:29:06:0F:8A
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 019893A3F1EE2FC29A96B44B38D0954AC850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 013A
Signing time: Sun 10 Aug 2025 11:00:51 +0000
Manifest this update: Sun 10 Aug 2025 11:00:51 +0000
Manifest next update: Mon 11 Aug 2025 11:00:51 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: G8JnpQjlkWcSfUz0lMaQAea+vsbxRdKIQppOe6JTD7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:f1:ee:2f:c2:9a:96:b4:4b:38:d0:95:4a:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Aug 10 11:00:51 2025 GMT
Not After : Aug 11 11:00:51 2025 GMT
Subject: CN=cf6e440c808844679a6b826adfa0d75529060f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:f7:58:79:55:88:aa:23:7c:1a:d0:9a:a2:
87:8d:cb:5f:f5:fb:d7:7b:fb:ba:28:e4:52:7e:6f:
43:49:57:f1:60:6b:a2:68:1a:fb:cf:3b:ce:dd:24:
47:49:15:d0:8a:40:f7:32:1a:cc:b3:93:d8:d5:15:
e8:20:e3:54:55:89:e8:f1:a6:bd:f2:8b:5c:bc:58:
08:54:a7:e0:e2:93:51:b9:e6:65:63:1c:0f:6c:6a:
e5:70:e8:35:08:a4:14:4d:dc:1f:01:98:f0:1b:da:
b5:8e:76:77:44:fb:d0:7f:1f:b7:91:5e:60:ac:f2:
9e:db:da:7c:d5:10:fe:46:f8:b3:6d:7b:02:a8:17:
e3:94:c0:cf:0a:d2:86:87:e3:f5:a9:29:c8:94:c6:
bf:74:e4:be:aa:c8:df:40:ac:fe:66:d6:77:c8:18:
c3:d7:1b:5f:b8:92:e2:07:7a:7c:e4:c4:58:17:42:
b0:ee:b5:da:5c:f5:77:f0:e9:40:a1:06:b1:f2:69:
6d:59:09:0f:68:ea:eb:20:65:2f:d9:f6:8f:0d:b4:
32:a3:45:01:d3:16:a4:e0:9b:14:90:9e:30:9a:a8:
09:54:19:62:0b:f2:10:e0:1a:9c:3a:71:96:3a:6c:
b0:44:64:30:36:3a:51:bf:8b:63:78:39:19:f6:e5:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6E:44:0C:80:88:44:67:9A:6B:82:6A:DF:A0:D7:55:29:06:0F:8A
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b7:10:21:ac:cc:5c:2a:3f:97:a2:bd:a3:32:e6:61:95:49:
ea:fc:e3:f1:22:b4:7e:99:03:3e:bf:3a:bc:80:e0:e9:75:e6:
cd:9c:18:63:cc:69:3c:36:91:96:61:8d:87:4f:8a:e8:df:6a:
0e:78:8d:db:c5:2a:4a:06:8d:45:82:c3:f4:09:ec:ed:1a:72:
d6:cb:78:9b:02:9c:63:5f:67:25:f1:8d:a6:e9:b2:91:64:af:
cc:51:41:d8:63:04:bd:fe:59:65:60:f9:0f:7d:f8:78:f3:20:
d7:8c:22:90:01:d3:07:cb:46:34:4e:81:ce:7a:48:2f:6f:fa:
fd:3c:06:94:95:e0:54:4d:fb:97:53:75:76:de:dc:49:70:a6:
4f:a7:f9:e0:27:39:61:7a:8b:4e:22:ac:30:67:1d:a9:0f:9c:
0d:79:7d:cb:01:34:e5:21:74:39:bd:99:92:32:1f:09:48:cd:
ef:94:10:e3:32:22:0d:6e:8a:59:a6:62:2b:df:e2:a9:fb:2a:
32:ec:dc:c5:fc:29:0e:de:b9:e4:88:27:d8:36:7d:5b:e5:8f:
0c:15:6f:0f:6c:c9:81:81:6e:09:69:02:f1:fa:e9:7d:d7:63:
10:d3:d9:b6:e3:39:0c:dc:00:76:6f:70:31:8d:7e:6c:02:bf:
b8:c3:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:01 2025 by rpki-client