Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: pxvDDtEstgERW2ENwDEv75z+Ojth2XjsW7QVTpsPo/g=
Subject key identifier: 29:AE:E3:F8:2C:6A:F6:F4:CA:B5:3C:74:85:F3:C6:33:7B:B9:5F:38
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0198748732D78E2F20C87F7B46F4EEE4B49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 10:01:14 +0000
Manifest this update: Mon 04 Aug 2025 10:01:14 +0000
Manifest next update: Tue 05 Aug 2025 10:01:14 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 2oyDqkO2LJC2RJx4+pLGD+XSqzGy5LEkFPBshe5hTx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:32:d7:8e:2f:20:c8:7f:7b:46:f4:ee:e4:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Aug 4 10:01:14 2025 GMT
Not After : Aug 5 10:01:14 2025 GMT
Subject: CN=29aee3f82c6af6f4cab53c7485f3c6337bb95f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:2a:58:01:51:9d:9e:99:fd:fb:9a:1a:ed:
69:de:ee:11:c7:f2:60:74:e7:a4:21:c4:8b:10:86:
21:96:45:9d:50:7d:ef:1d:dc:5b:06:b2:d1:a9:5a:
1a:fd:c7:75:a4:71:2c:c1:21:f6:e8:d6:95:c7:c3:
7b:d5:2e:7d:3b:5f:e5:2b:f2:11:28:ef:b4:bb:8d:
88:62:aa:3b:88:5a:34:7f:81:d6:48:89:cd:ca:03:
ca:c5:c3:63:f3:af:f8:39:aa:f6:36:2d:89:b4:27:
54:9f:8a:34:19:5b:35:b5:e3:30:d2:e3:32:18:45:
32:79:46:07:6d:11:f5:9c:4c:04:84:46:26:d1:8c:
b1:0b:aa:cb:7d:1c:d8:bd:11:50:e0:e7:bd:61:e3:
18:b6:86:7f:f6:5a:30:53:9f:c5:e8:ae:5a:58:d7:
58:8d:88:84:db:a0:a1:af:8c:06:c4:f7:40:8d:25:
2c:f5:36:8c:9f:4a:87:46:2d:57:72:56:00:95:26:
36:bb:36:da:5e:5c:1a:3f:97:06:9b:34:9d:d9:bf:
f9:ad:92:d4:72:83:3f:aa:13:8a:92:57:49:bc:02:
64:26:fa:b8:d8:5a:5b:63:f1:6f:6c:85:ab:b9:d6:
fe:47:f9:87:8f:dc:17:0a:e0:dc:36:18:6b:6a:f1:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:E3:F8:2C:6A:F6:F4:CA:B5:3C:74:85:F3:C6:33:7B:B9:5F:38
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:90:f9:6b:3c:5d:4b:c3:42:02:4a:3e:c0:29:fd:08:c5:f8:
fc:c7:ce:ca:bf:ee:5f:3a:04:8b:72:c1:d8:0d:c2:dd:ee:21:
4e:dd:3c:8b:f1:79:99:fb:64:a4:ae:5e:c1:7d:a7:07:5b:48:
f9:18:df:fb:8e:af:ed:52:b1:41:49:2c:48:4f:2a:37:3c:15:
43:a1:fa:5b:6f:a3:b9:e2:2a:a7:7f:e2:fe:b1:5d:8a:8e:2d:
ff:18:25:87:f5:18:ff:c4:f4:8e:4b:93:c1:bd:42:db:7d:a6:
14:29:6a:c3:5b:ac:ca:02:17:94:2f:90:91:0b:3f:ba:b1:0b:
a3:ea:77:08:2b:eb:3a:aa:cf:54:0c:91:23:c5:48:65:e3:40:
e9:d4:d9:4b:28:24:dc:01:b4:c4:02:2a:bf:88:8e:f3:7f:76:
d8:59:84:81:1f:83:76:a6:25:13:bf:ed:28:79:66:e0:bc:bc:
fa:e9:db:af:5b:0a:a7:3d:10:78:1a:43:41:3e:88:98:c5:12:
49:a7:cc:bb:f2:2d:62:2f:b8:28:31:d0:7c:07:92:05:37:22:
5a:66:63:12:b5:c0:7f:4c:89:2f:52:be:de:c6:6e:9e:9c:68:
94:55:e1:3f:5b:4b:59:02:e0:a5:83:d7:57:cb:f4:c1:98:2e:
17:21:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:44 2025 by rpki-client