Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: FwLs9LzD8GcNqg7kaCZ6Hyhdj6Wvbk6Scbip/kS3b+U=
Subject key identifier: 73:B9:95:8D:7D:24:32:D0:60:60:8E:1E:E8:34:57:CF:CE:55:21:A7
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 0198515566D270DFBB5549C55A7F380B7599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 14:00:07 +0000
Manifest this update: Mon 28 Jul 2025 14:00:07 +0000
Manifest next update: Tue 29 Jul 2025 14:00:07 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: 9+MBwwuteBxneB1P1nU7xhb9ulXXtASerDx5Fy3NB+A=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:66:d2:70:df:bb:55:49:c5:5a:7f:38:0b:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jul 28 14:00:07 2025 GMT
Not After : Jul 29 14:00:07 2025 GMT
Subject: CN=73b9958d7d2432d060608e1ee83457cfce5521a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:49:98:5a:aa:d5:2f:c3:62:29:e1:3c:ab:
ba:de:b0:9d:9d:33:d5:48:7c:bc:84:7f:7b:6e:17:
bb:46:2a:b0:50:23:7b:80:51:10:f9:61:54:33:16:
94:04:6c:4f:43:86:f0:99:db:7a:fd:60:a5:46:68:
36:f4:aa:19:61:78:5d:cb:39:8b:5d:b8:a9:be:37:
03:9d:89:1b:eb:d9:c4:1b:66:31:38:bf:4c:b1:27:
c7:8c:ea:90:99:a4:31:c7:89:4b:79:92:76:d0:f2:
81:d2:27:43:2b:36:e0:8b:2d:0c:18:db:5c:c6:66:
ef:1d:42:da:7f:27:33:96:09:ae:65:6d:76:ce:51:
21:96:48:74:da:37:34:50:30:77:64:df:28:c3:d0:
d6:f5:b6:67:2a:50:e1:37:83:04:be:52:a8:02:15:
35:46:1a:8c:b2:1b:b8:e6:ca:8a:ca:fe:cf:04:e0:
75:59:5a:08:b7:62:a7:63:88:ce:79:e7:1f:b0:dd:
a9:30:a3:41:5f:b8:c1:d8:85:a1:51:b1:92:c0:37:
ee:58:00:08:a9:76:db:26:73:b3:25:73:0e:d2:fd:
8a:a2:0f:21:43:9d:9d:9c:97:d3:93:fc:0e:6f:24:
c7:df:76:bb:d4:62:ef:59:3f:6e:3c:f5:a6:6c:95:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:95:8D:7D:24:32:D0:60:60:8E:1E:E8:34:57:CF:CE:55:21:A7
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:f3:c9:fb:87:f9:eb:5f:42:d4:e7:37:2e:e4:b4:a1:29:
11:eb:e5:a4:92:5b:de:2c:1f:22:f0:d1:da:5b:0a:23:18:c5:
1f:5e:ae:0b:79:b5:f9:76:29:f2:f6:8a:9b:7c:f9:93:93:8d:
dd:4b:b3:e5:0e:6b:4a:1d:29:a4:c5:92:e7:7f:82:80:7b:33:
f5:8c:d4:22:67:5c:78:fa:9e:8f:27:10:c8:00:a2:03:da:77:
94:37:77:af:52:58:5a:3c:60:03:18:2c:30:94:8d:6d:3d:63:
06:51:90:14:c7:b9:5b:88:ff:39:ee:88:5c:3d:78:0c:fc:5a:
60:d3:1d:69:3d:e7:63:8b:94:c6:b4:18:74:af:54:08:fa:9e:
86:5f:a9:29:da:11:d5:e0:64:3c:d7:e5:8f:6f:92:f6:11:69:
ff:1a:58:46:37:90:36:95:aa:fb:49:4b:54:44:cb:6d:22:27:
6e:cd:89:22:70:b3:9e:bd:25:b8:23:40:e1:9f:85:9d:8e:34:
d7:9b:ff:32:e4:9a:44:62:f7:56:5f:03:fb:5c:ef:70:94:95:
f7:fa:4e:db:f2:d4:81:a3:1d:1e:27:de:69:e8:09:fd:87:34:
d9:c8:c5:aa:b5:70:cd:5e:71:3b:da:c2:4a:99:93:a1:2c:f8:
5e:d8:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:12:33 2025 by rpki-client