Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File: hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier: PDBJSPHHUN5J+FAmsvPxt/dxfZpIOzuCOHFk61eS2jA=
Subject key identifier: 0B:26:C8:BD:09:46:69:4E:46:F8:DB:EA:79:90:BF:6F:DB:A1:59:46
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 0198511F343E2DA9B9D1DB3B9ACE55A63223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 13:00:56 +0000
Manifest this update: Mon 28 Jul 2025 13:00:56 +0000
Manifest next update: Tue 29 Jul 2025 13:00:56 +0000
Files and hashes: 1: 2ocBNxmBQmUkoRPjhlhWgOYgiMs.roa (hash: vHBT5RZYwMgp/JaFcd7djyz4ta6PJ5W0BzdunzoRb3k=)
2: GLrf-4476lN-mWAGatfWehKzDpo.roa (hash: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=)
3: bAf4pYlPQH01VJAbtj0tnC5SXTs.roa (hash: Is6byuQI/ji+q5pWZ94ZQraf9joydkFIunAau5zwEaA=)
4: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: DarvSCb5XscYOUB0lI/YLOtmqMhxSYHCk2a+yT8isWM=)
5: t7q0gRp_Rjm1TKofQQJGVXRxiQ4.roa (hash: 8i0M18hNbssP3r3dcfAr+F0zW7Rf4keL31Nq8c6T/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:34:3e:2d:a9:b9:d1:db:3b:9a:ce:55:a6:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jul 28 13:00:56 2025 GMT
Not After : Jul 29 13:00:56 2025 GMT
Subject: CN=0b26c8bd0946694e46f8dbea7990bf6fdba15946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:23:c1:13:f4:21:3e:b9:63:11:2c:99:ba:
f2:88:a2:b2:69:13:13:d5:07:d4:55:f2:b1:b0:b0:
e6:aa:ff:94:44:46:13:c6:92:cc:37:df:b9:c4:9c:
f9:a0:6d:7d:36:db:c5:bb:dd:41:aa:32:cc:ca:e8:
9f:60:b3:c1:54:87:35:ff:a0:02:ef:d7:cc:64:17:
4d:9c:a2:e8:17:6d:58:67:4a:f8:af:78:c4:df:b2:
ef:95:40:60:f8:35:32:ce:20:e6:9c:93:41:dd:38:
45:dd:53:d5:2f:b7:53:1a:81:74:11:14:b6:0b:f4:
04:f5:21:89:bb:df:d9:6a:e9:e5:9e:45:17:3d:ec:
48:80:c3:36:c2:25:18:c2:73:3b:9c:51:4c:51:ab:
6a:e1:a5:05:c2:66:b4:ba:68:ca:b1:4c:fe:34:57:
9f:7f:90:2f:2c:e0:5a:c7:b7:b0:c6:1e:d4:eb:f4:
ce:b3:92:f4:86:a5:71:88:95:b2:40:f6:b8:7d:7b:
14:48:3a:64:ab:f4:a4:18:4d:d2:dc:07:93:4e:48:
c2:10:55:02:15:06:09:96:b1:85:f4:b2:61:a6:36:
be:74:1e:3a:61:9e:15:43:a0:3e:16:a0:73:f3:25:
72:d1:c7:86:07:a4:e7:1e:61:e1:6a:90:44:80:e2:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:26:C8:BD:09:46:69:4E:46:F8:DB:EA:79:90:BF:6F:DB:A1:59:46
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:4a:92:69:8d:66:18:ca:d9:d1:f4:40:88:08:11:33:0b:
39:74:da:2f:bc:8a:b2:e0:4b:a7:6d:e1:b9:68:df:2a:cc:e2:
47:e4:b3:95:bf:be:4b:01:99:24:5a:98:e1:4c:03:ae:c3:5d:
dc:4a:4c:11:04:d9:5d:86:76:a9:4c:54:56:b7:5f:3c:ca:2f:
a7:91:e2:05:38:74:02:a8:4f:47:65:95:72:0e:6d:90:f5:b1:
93:94:ad:13:18:04:9e:b9:5e:8a:c8:d7:41:d2:76:ad:8f:b6:
ec:50:a9:b5:23:fc:8d:a9:3e:cd:0b:4a:b9:ff:d8:37:6e:2b:
04:69:62:83:3a:0d:b1:49:50:04:66:d6:38:9c:cf:14:06:88:
fd:25:7a:f0:c0:f7:0d:e0:38:d2:79:de:39:c4:a0:33:bd:de:
44:6d:d1:ff:0e:c0:08:b3:88:86:57:7b:ff:aa:1a:ea:b3:42:
bd:09:da:83:a4:e2:e5:eb:3d:3d:be:20:e3:b7:ad:3d:db:c6:
f3:38:58:5b:b7:eb:43:25:7f:cf:c9:62:39:53:42:37:7b:86:
2d:18:af:8e:b4:03:2a:ba:a0:3e:76:c2:d7:69:5a:b1:ce:67:
bc:38:6e:fe:bc:a9:f4:cb:74:ac:3e:b4:37:28:92:61:c4:2a:
95:58:f8:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRHzQ+Lam50ds7ms5VpjIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2EyYzc0YWY1YTQ0ZDlhYWU0N2EwYjg5NDI1ZmE0Zjdm
YzdjMTkwHhcNMjUwNzI4MTMwMDU2WhcNMjUwNzI5MTMwMDU2WjAzMTEwLwYDVQQD
EygwYjI2YzhiZDA5NDY2OTRlNDZmOGRiZWE3OTkwYmY2ZmRiYTE1OTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMcjwRP0IT65YxEsmbryiKKyaRMT
1QfUVfKxsLDmqv+UREYTxpLMN9+5xJz5oG19NtvFu91BqjLMyuifYLPBVIc1/6AC
79fMZBdNnKLoF21YZ0r4r3jE37LvlUBg+DUyziDmnJNB3ThF3VPVL7dTGoF0ERS2
C/QE9SGJu9/ZaunlnkUXPexIgMM2wiUYwnM7nFFMUatq4aUFwma0umjKsUz+NFef
f5AvLOBax7ewxh7U6/TOs5L0hqVxiJWyQPa4fXsUSDpkq/SkGE3S3AeTTkjCEFUC
FQYJlrGF9LJhpja+dB46YZ4VQ6A+FqBz8yVy0ceGB6TnHmHhapBEgOKrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsmyL0JRmlORvjb6nmQv2/boVlGMB8GA1UdIwQY
MBaAFIV6LHSvWkTZquR6C4lCX6T3/HwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt
ODM2YWM5N2MwMWJiLzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi
LzEvaFhvc2RLOWFSTm1xNUhvTGlVSmZwUGY4ZkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYElKkmmN
ZhjK2dH0QIgIETMLOXTaL7yKsuBLp23huWjfKsziR+Szlb++SwGZJFqY4UwDrsNd
3EpMEQTZXYZ2qUxUVrdfPMovp5HiBTh0AqhPR2WVcg5tkPWxk5StExgEnrleisjX
QdJ2rY+27FCptSP8jak+zQtKuf/YN24rBGligzoNsUlQBGbWOJzPFAaI/SV68MD3
DeA40nneOcSgM73eRG3R/w7ACLOIhld7/6oa6rNCvQnag6Ti5es9Pb4g47etPdvG
8zhYW7frQyV/z8liOVNCN3uGLRivjrQDKrqgPnbC12lasc5nvDhu/ryp9Mt0rD60
NyiSYcQqlVj47A==
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:03:32 2025 by rpki-client