Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: 31dnDQjw1Y20UCf6NlJFB1J5Ad1sj4LcIGLvRUf95s0=
Subject key identifier: 6A:AE:38:3D:F8:D6:C6:94:99:69:54:3B:F9:0C:FD:2F:3B:64:84:F1
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019860934F858C2EDE1D7A88340C926426ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 086F
Signing time: Thu 31 Jul 2025 13:02:03 +0000
Manifest this update: Thu 31 Jul 2025 13:02:03 +0000
Manifest next update: Fri 01 Aug 2025 13:02:03 +0000
Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: 0NyXJgNRzCix23Qg56aNis/VJt2aJhcFDTpPnwYenAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:93:4f:85:8c:2e:de:1d:7a:88:34:0c:92:64:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Jul 31 13:02:03 2025 GMT
Not After : Aug 1 13:02:03 2025 GMT
Subject: CN=6aae383df8d6c6949969543bf90cfd2f3b6484f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:c2:e8:ca:85:86:61:fb:21:33:bc:65:8f:
08:3f:1e:24:fc:39:e5:52:a2:b7:6b:93:43:f0:57:
f7:fc:23:c7:13:32:1c:84:71:37:a9:c7:a7:a0:f3:
18:14:a4:05:7e:de:91:dc:e6:93:da:cb:01:65:ba:
bc:19:a3:ac:c0:b9:49:26:fd:1d:24:8f:a8:b7:10:
41:cd:b5:d9:cc:1c:8e:49:94:69:fa:84:c6:90:8c:
ab:f9:7d:a2:b8:12:3b:25:87:04:4f:5b:53:f0:f1:
bf:7e:ef:8a:ee:f3:f2:09:4d:cc:97:a5:8a:ce:7c:
ce:89:84:61:d0:4a:dc:36:ed:d4:cc:3b:ca:a5:e5:
ee:51:48:ce:6f:e2:61:01:a1:35:81:bc:4b:11:0e:
7f:7e:50:95:c2:0c:98:86:fd:23:f5:77:68:07:07:
a6:ae:e2:d7:2a:9f:78:a0:5f:a9:98:ae:e4:77:c9:
76:d2:b8:ad:df:2b:9b:d2:8e:35:b3:9b:fa:7d:2c:
ce:a5:00:c4:60:fe:26:dd:cd:66:64:63:a5:c7:88:
68:01:e5:44:25:3d:d9:52:3e:c2:ca:b5:c1:f4:f7:
3c:5d:51:cd:a1:c4:96:40:f7:83:6d:ab:9e:96:b1:
20:6e:90:fe:fa:52:b0:e5:59:54:f1:18:b5:46:38:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:38:3D:F8:D6:C6:94:99:69:54:3B:F9:0C:FD:2F:3B:64:84:F1
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:28:db:6a:15:d3:f9:83:f4:2f:26:ed:38:d0:69:f6:e0:
4c:17:35:d8:54:fc:92:60:cb:9c:4b:47:53:d7:a2:e2:3d:dc:
6e:aa:d4:82:a0:b7:4c:01:d4:fe:31:48:e9:16:1b:ed:6c:ce:
d0:cd:b1:d8:dd:6f:1d:68:6f:7f:25:8d:2f:23:56:33:1e:1d:
26:51:98:89:58:0a:0f:27:6d:79:5b:92:dc:a5:98:58:0e:c5:
22:83:c9:02:50:37:99:e0:cb:06:3e:ff:f4:38:6b:00:9b:25:
c3:61:64:0a:54:17:79:71:72:5e:c7:8a:9d:ef:f4:13:44:e0:
da:51:4c:87:75:8e:d5:4f:8e:4e:1d:be:ff:66:3a:f3:04:a9:
a3:5d:fa:1a:51:e4:f0:10:c9:77:3d:6d:db:c6:1e:3b:c3:d8:
43:20:6d:59:b1:aa:13:1e:13:76:13:c6:16:05:73:83:2a:a3:
31:0f:03:d9:00:e1:9e:87:c1:1e:95:70:bd:17:18:f5:1e:fc:
af:e7:12:d5:74:e5:a0:94:33:30:a4:6d:17:fc:f4:a4:80:ec:
55:b7:16:41:bd:0d:7e:68:09:c9:11:0a:53:17:ef:a9:a0:43:
27:76:91:a2:f2:3b:53:35:a6:0d:93:10:f2:f6:78:dd:b1:43:
77:2e:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:55:54 2025 by rpki-client