Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: ekyvWVKlWfOCJTTIYuuyLDH+PmPFZO8pTC6LQJSmqc0=
Subject key identifier: 2C:47:BC:CB:83:79:6E:B3:16:E6:AB:F5:4E:63:07:B1:80:B1:56:0A
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 01989034E5C67BF55A745BD68841E9F5298A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0BE9
Signing time: Sat 09 Aug 2025 19:00:42 +0000
Manifest this update: Sat 09 Aug 2025 19:00:42 +0000
Manifest next update: Sun 10 Aug 2025 19:00:42 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: OGmbe02lII/mPTykQfbW40yS/C9+p5QJD0NYF3e7Zak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:e5:c6:7b:f5:5a:74:5b:d6:88:41:e9:f5:29:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Aug 9 19:00:42 2025 GMT
Not After : Aug 10 19:00:42 2025 GMT
Subject: CN=2c47bccb83796eb316e6abf54e6307b180b1560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:06:ea:ef:f4:c0:09:4c:3d:5b:aa:bc:4a:
55:1c:7e:ec:8d:97:f4:58:51:94:35:52:a3:79:bb:
13:eb:ad:67:af:03:0f:fe:b7:b7:a1:f3:4b:84:d5:
22:c5:2e:1c:a9:8a:10:99:fa:42:45:68:21:ba:f9:
66:45:b9:a7:c6:bc:fc:de:1b:a6:10:4f:4c:91:ec:
a8:c0:d8:57:b6:87:57:fd:b7:e3:1f:a5:95:1b:1a:
50:1c:28:77:cd:e6:2a:29:3d:f5:33:f7:e2:9d:cf:
21:1d:ec:6b:5e:d6:65:fa:18:2d:8c:c6:9d:16:c9:
6e:1c:84:98:ec:47:6d:2c:b6:d6:45:b7:7f:b4:9d:
62:d3:b9:6d:fe:7a:77:f5:08:08:16:f2:a5:94:74:
76:b3:f3:66:a9:1a:6b:5a:73:12:63:ea:0f:c5:af:
da:01:85:95:25:1f:ec:7a:3f:b3:12:1c:56:1f:7f:
fc:b1:ca:cd:bf:85:6f:26:fd:69:56:2c:3d:d5:2e:
ad:54:db:ac:f8:54:15:4b:d1:f3:cc:aa:da:62:2d:
f6:23:ef:49:30:92:6a:35:62:68:10:68:19:ef:76:
af:dd:cc:51:5d:3a:ea:02:b2:21:4e:b6:59:fa:fb:
d4:13:32:5b:b9:d2:6d:14:b4:3f:4f:c0:70:54:1a:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:47:BC:CB:83:79:6E:B3:16:E6:AB:F5:4E:63:07:B1:80:B1:56:0A
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:24:60:61:0a:e5:be:dd:2b:e3:64:08:d7:8a:fe:d8:ad:c3:
06:0e:c8:a6:8b:38:8c:db:2c:7a:27:a3:5c:30:55:91:71:4d:
1c:7d:f9:70:9d:8a:fd:19:7c:4d:30:c7:23:c2:2f:e2:34:3c:
52:a4:cd:e8:be:94:23:fa:3c:49:70:4c:c0:e6:4f:05:33:a8:
09:f4:c7:00:27:90:8d:b7:07:75:2e:d1:af:b7:71:ab:a0:b7:
07:e2:30:dd:36:56:da:8a:9c:cc:08:8a:9b:11:3d:4c:6d:62:
d7:15:cc:b2:36:ad:61:2a:63:ce:e9:d7:01:9c:6b:d7:2b:47:
06:96:ea:4d:a6:14:7c:f2:86:76:c3:35:68:d8:c8:e6:f7:03:
8b:25:12:9e:a4:59:a7:8f:e1:22:46:9c:f1:43:1f:a6:e0:12:
d5:d4:bd:d2:e1:36:e5:39:fa:a3:5e:c0:59:c0:79:dc:9e:a2:
6f:7b:fe:1b:12:46:6b:12:47:b0:ab:4f:fc:fc:3b:75:a4:4f:
a0:58:77:32:f9:45:8f:f9:3a:60:03:b8:b1:3a:56:8f:43:ca:
52:0d:1c:92:07:5d:2c:36:f7:90:cd:9b:15:a5:97:d7:ed:de:
0b:8e:ce:5b:a3:13:ff:d4:29:da:bb:e2:aa:74:be:d4:81:ea:
d7:dc:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:27 2025 by rpki-client