Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: XuP6uB6gYmf02YFirNTmLOsIiBp2F7vxwMJZV9Dbf/E=
Subject key identifier: 2C:35:0F:00:FC:B9:59:E4:97:11:E2:85:CA:B1:45:C6:61:AF:38:99
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019881D4E8EE1CC975BA337B728CC8FE7FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0D01
Signing time: Thu 07 Aug 2025 00:01:10 +0000
Manifest this update: Thu 07 Aug 2025 00:01:10 +0000
Manifest next update: Fri 08 Aug 2025 00:01:10 +0000
Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: ZWpVFqwLJUCIyOMbSQGOxgmBbNlB5kAsl9kTP5+gNKo=)
2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:e8:ee:1c:c9:75:ba:33:7b:72:8c:c8:fe:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Aug 7 00:01:10 2025 GMT
Not After : Aug 8 00:01:10 2025 GMT
Subject: CN=2c350f00fcb959e49711e285cab145c661af3899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:6b:3b:b1:fb:f8:3f:a1:9d:bb:5b:d8:13:
85:75:41:5f:12:d7:6e:25:e7:40:c6:dc:84:72:96:
88:5a:54:08:cf:72:74:b3:db:9a:6b:fe:27:1a:84:
c3:cf:f1:46:a2:01:59:af:a3:30:db:a9:85:8d:53:
5d:fb:8f:22:16:d3:1c:88:b7:84:b5:61:0a:25:9c:
75:af:2c:b3:fb:1a:20:93:25:ef:11:c3:08:f5:d3:
35:18:46:c4:50:b7:99:39:77:d9:21:36:88:51:71:
eb:44:1a:c0:22:10:92:c6:46:10:01:79:49:38:fc:
a8:f3:f0:17:46:0a:39:1c:37:8c:5e:bc:40:b2:27:
94:4d:fa:e0:63:4a:4b:4d:eb:c4:3a:23:18:31:65:
61:88:e1:c7:66:c4:22:2e:e4:49:c8:82:43:53:14:
23:69:42:6e:3e:5d:e3:b4:1a:ec:ed:66:dd:f8:8c:
97:f3:3b:12:9e:a4:2e:74:51:ad:d9:d2:df:b4:82:
1b:83:5b:80:d9:1c:43:97:77:25:b8:a1:f9:78:82:
d6:6c:73:c0:56:b3:0d:08:a5:3e:e6:2b:d8:20:70:
3a:e3:24:a0:ec:67:7a:4e:01:52:cb:95:7e:70:14:
2c:fb:e9:15:e0:be:b3:66:a8:2b:92:68:02:2c:35:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:0F:00:FC:B9:59:E4:97:11:E2:85:CA:B1:45:C6:61:AF:38:99
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:68:2e:cd:2b:be:72:21:82:9b:9f:75:61:0d:c4:2b:ee:
92:94:b8:58:ff:13:ce:25:c3:3d:73:8e:70:cd:7f:c3:64:60:
a9:9f:27:7f:03:b5:fd:0c:55:6f:fd:ab:53:5e:9c:de:32:99:
f7:4c:09:07:2f:a7:98:14:d2:bb:1c:b9:48:76:cd:bf:37:58:
ca:b2:00:51:65:56:86:a4:55:16:50:d5:9e:8f:00:d7:e6:25:
bb:67:50:31:01:61:71:f2:99:8f:e6:d3:d6:77:7c:24:41:ab:
2e:0c:0b:7f:96:c1:9a:14:5b:cf:6e:fe:60:91:91:99:40:83:
15:b0:7c:5a:95:b5:59:aa:af:a1:da:0a:b5:2d:6d:b7:fc:88:
0e:9f:e0:8c:f3:a4:22:6a:f7:e8:15:b1:bd:d2:65:72:e7:49:
ae:87:17:b4:33:4c:5b:d7:7e:65:7d:cc:4e:72:c1:dc:b2:39:
83:47:4f:98:44:dc:b3:e1:2d:30:d7:d7:88:8d:dc:f6:6a:78:
d9:53:e9:82:97:4b:96:73:a3:91:af:84:9b:30:39:6f:f9:c7:
9f:99:ad:24:89:8d:3b:3c:3d:ac:f6:d9:93:e3:51:85:da:e9:
a7:e2:db:15:bf:51:70:b9:ed:9d:e4:8b:1a:1d:2d:48:12:a1:
bb:c7:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:30 2025 by rpki-client