Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: gwL3ibzSfcDSYE0GYlIfCKM5j61Tj5fbDHqfihFHms0=
Subject key identifier: C6:E5:4E:01:A1:9A:56:BE:61:18:C9:0E:5A:A1:01:02:57:7C:71:64
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 019896A6C36DC9E88F77CFD018B31691BA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 15BE
Signing time: Mon 11 Aug 2025 01:02:48 +0000
Manifest this update: Mon 11 Aug 2025 01:02:48 +0000
Manifest next update: Tue 12 Aug 2025 01:02:48 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: xZJNJbhJq7b52sGX/+jIXqHTyVrA0rapWJjHtEnYklE=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:c3:6d:c9:e8:8f:77:cf:d0:18:b3:16:91:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Aug 11 01:02:48 2025 GMT
Not After : Aug 12 01:02:48 2025 GMT
Subject: CN=c6e54e01a19a56be6118c90e5aa10102577c7164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:ed:03:14:22:da:bb:0f:0e:6e:85:46:05:
01:87:96:7e:f7:b9:d3:d5:19:ff:35:6b:cf:12:52:
69:8b:1f:59:05:dc:a0:8f:48:6d:7a:b8:ea:16:f2:
25:66:d0:31:b2:cb:a7:e6:d1:54:56:8c:13:1b:b3:
e0:68:5c:5c:bf:4d:a1:ae:f4:23:b6:25:ee:3f:1a:
77:59:a1:02:93:f8:42:8d:ea:21:a3:d2:78:53:a8:
1f:3d:df:a1:dd:8b:16:b5:50:6f:f4:51:94:29:61:
d2:82:f4:a8:6d:f1:96:a5:db:26:3f:2d:56:33:f5:
35:80:95:9d:0b:22:d1:d0:4f:7c:c4:c3:9a:8a:bf:
56:36:9b:ee:03:35:5e:50:44:e5:c8:11:f9:22:8e:
79:92:6a:9a:bc:46:7e:20:5d:c0:51:38:58:f2:2c:
74:d1:3b:2f:16:b4:c3:cc:f6:d7:7d:98:ed:3b:02:
60:31:5c:1f:39:34:a2:59:f3:db:c7:bf:fa:fe:ae:
4e:bf:d2:d2:fb:84:55:c9:65:4e:10:aa:c4:47:4e:
bf:d5:c9:ac:75:9d:0e:42:b1:30:ad:8a:63:5f:b1:
4b:fc:d2:01:cd:fc:5f:20:d6:f4:f7:07:5f:6a:d7:
c3:a2:06:d6:94:05:e5:0f:ff:36:83:01:9c:aa:27:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:4E:01:A1:9A:56:BE:61:18:C9:0E:5A:A1:01:02:57:7C:71:64
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:05:fe:18:54:ac:23:a5:49:ef:71:7e:65:8a:23:58:31:2a:
db:18:a6:72:5f:10:22:08:8f:a4:37:f7:41:ab:fe:d0:71:e2:
6e:00:a5:01:89:5c:33:ce:dc:3f:c5:e4:75:90:07:a8:75:99:
3d:0f:cb:42:3b:86:da:40:9c:3b:c6:f1:62:c8:b3:a6:50:5b:
07:e1:89:78:0a:96:74:19:dd:5e:ee:f5:cb:2e:3e:08:b8:dc:
b4:02:84:fa:b5:43:a1:2a:36:6e:72:7e:9b:4d:4e:70:8b:0e:
54:78:e5:b9:63:b4:5a:ea:cd:d2:46:4b:37:b4:69:2c:f5:e7:
e9:20:62:e3:af:e5:4b:51:42:3a:8c:c7:a3:05:cb:e7:1e:50:
9e:34:b2:ac:f0:80:7f:5a:2d:3c:d7:8a:02:64:1e:b8:7f:65:
de:ad:e0:08:88:1d:9f:b6:2a:b2:f8:78:dc:73:19:8c:33:d2:
d9:af:96:26:c2:89:56:26:2a:d5:81:bf:ff:d2:42:5b:d7:67:
bc:fb:48:03:ae:bb:36:5e:e9:74:e4:18:1c:70:59:28:37:20:
77:0a:5f:a2:5d:93:29:ad:3d:61:2d:f9:25:fc:4d:b5:ef:f7:
52:af:ca:3c:4b:2c:71:92:dd:72:8f:16:2f:7e:ed:4f:0d:f9:
f2:ad:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:14 2025 by rpki-client