Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: k1SWiSAGhRfHLKvlzSNRVmL0wrCnq7+RtOoifdfCpWQ=
Subject key identifier: 43:C9:8D:29:1F:AF:7B:B2:EE:6E:62:B7:D2:60:CE:BE:1D:98:7A:26
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01986738C809FE504DFFC5F24CCBFF4FFC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 1656
Signing time: Fri 01 Aug 2025 20:00:31 +0000
Manifest this update: Fri 01 Aug 2025 20:00:31 +0000
Manifest next update: Sat 02 Aug 2025 20:00:31 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: CWCFl9FkexFKMghauuDbuZJ9JAw.roa (hash: 0sKv1tPv8lAPLOiOPW1NvNF/jyixixEETK08Yyrw5wU=)
4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: iRxKo775FN1yxRP62/uO7SOaGULB0n+fg3Q+S/tMOkg=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:38:c8:09:fe:50:4d:ff:c5:f2:4c:cb:ff:4f:fc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Aug 1 20:00:31 2025 GMT
Not After : Aug 2 20:00:31 2025 GMT
Subject: CN=43c98d291faf7bb2ee6e62b7d260cebe1d987a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:84:7e:d0:b9:d1:e6:bf:2f:ed:2f:93:c7:
12:c4:97:0e:bf:b1:8b:08:e5:e1:2c:2d:56:d2:2d:
ac:6d:19:a5:fb:f5:0d:21:3f:8e:42:92:65:44:8f:
f8:49:b3:d0:d9:ac:33:d0:ba:bd:73:34:7b:a8:88:
c4:6f:fd:d8:54:c8:e3:b7:f5:b6:ce:6b:80:33:b7:
05:ec:5e:11:6b:6c:c9:86:8b:17:15:fb:4e:52:f0:
70:84:28:bb:93:5b:a0:5b:fb:ca:69:03:28:15:8f:
ad:a9:01:2e:06:57:ea:7c:7b:e1:73:23:93:50:68:
ff:6d:c9:e4:d3:d7:cb:a0:23:8e:c3:be:c5:77:f4:
7f:12:5e:05:3b:f9:ee:bc:24:a1:e7:1e:0c:ce:f0:
e5:13:db:13:8d:f0:a1:5e:90:cc:36:79:c5:18:93:
dd:42:ea:03:3a:db:84:4d:da:8d:bd:ae:8a:9d:50:
84:7c:dc:41:db:96:61:1a:9b:56:3c:58:d1:35:e0:
c9:eb:44:4f:bf:41:8f:0c:3e:01:a0:53:64:f4:f4:
6f:7e:a8:5f:38:f1:cd:6c:f0:e2:44:97:8d:fd:21:
a5:ef:e4:65:2b:cf:e3:7c:bd:0a:a0:4d:39:9e:23:
34:ad:51:82:44:23:48:d6:9b:a5:a1:c2:8d:b1:14:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C9:8D:29:1F:AF:7B:B2:EE:6E:62:B7:D2:60:CE:BE:1D:98:7A:26
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:1b:1d:76:d6:57:63:ae:09:0c:80:11:80:ac:19:0c:88:
fb:ed:26:66:15:fb:76:62:0a:3e:35:c7:01:6a:67:d0:2e:62:
7e:e5:a3:a5:d0:b2:93:3a:7e:92:d0:b4:d7:5a:c6:2a:da:8f:
80:84:5e:5e:28:f0:b2:33:2e:e7:a7:0c:61:8c:48:c8:d5:c9:
dd:2b:1a:fe:0b:6a:ff:4b:b1:7b:30:37:0a:11:7f:4c:3d:ad:
df:2b:65:f4:48:c8:ae:ea:5c:89:ad:bb:f4:31:98:cc:24:1d:
25:17:d7:0a:9f:1f:1e:a2:1d:a8:cf:ad:ba:42:df:79:05:7b:
18:a1:ae:b2:f8:42:d8:e4:75:1a:20:1b:d4:eb:15:8a:fd:9c:
ef:2e:64:bf:08:22:f6:63:88:b7:05:04:a1:35:d4:8b:71:e0:
a6:98:10:a4:04:ca:16:19:6e:7c:a6:4c:b4:48:fe:db:47:2e:
72:73:1e:f9:cd:a8:9a:b5:cc:69:9d:67:3f:6d:54:70:fd:be:
59:75:cb:0d:58:fa:05:81:05:2b:8e:a9:f2:7f:5e:96:f1:e7:
56:e9:96:2c:21:74:48:0d:42:eb:37:40:bf:87:15:ba:22:8b:
71:18:5b:49:ad:12:2d:6f:c9:a0:f5:0e:e1:7b:44:b0:1d:e6:
43:aa:30:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhnOMgJ/lBN/8XyTMv/T/xBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjUwODAxMjAwMDMxWhcNMjUwODAyMjAwMDMxWjAzMTEwLwYDVQQD
Eyg0M2M5OGQyOTFmYWY3YmIyZWU2ZTYyYjdkMjYwY2ViZTFkOTg3YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFmEftC50ea/L+0vk8cSxJcOv7GL
COXhLC1W0i2sbRml+/UNIT+OQpJlRI/4SbPQ2awz0Lq9czR7qIjEb/3YVMjjt/W2
zmuAM7cF7F4Ra2zJhosXFftOUvBwhCi7k1ugW/vKaQMoFY+tqQEuBlfqfHvhcyOT
UGj/bcnk09fLoCOOw77Fd/R/El4FO/nuvCSh5x4MzvDlE9sTjfChXpDMNnnFGJPd
QuoDOtuETdqNva6KnVCEfNxB25ZhGptWPFjRNeDJ60RPv0GPDD4BoFNk9PRvfqhf
OPHNbPDiRJeN/SGl7+RlK8/jfL0KoE05niM0rVGCRCNI1pulocKNsRRkewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPJjSkfr3uy7m5it9Jgzr4dmHomMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9YbHXbW
V2OuCQyAEYCsGQyI++0mZhX7dmIKPjXHAWpn0C5ifuWjpdCykzp+ktC011rGKtqP
gIReXijwsjMu56cMYYxIyNXJ3Ssa/gtq/0uxezA3ChF/TD2t3ytl9EjIrupcia27
9DGYzCQdJRfXCp8fHqIdqM+tukLfeQV7GKGusvhC2OR1GiAb1OsViv2c7y5kvwgi
9mOItwUEoTXUi3HgppgQpATKFhlufKZMtEj+20cucnMe+c2omrXMaZ1nP21UcP2+
WXXLDVj6BYEFK46p8n9elvHnVumWLCF0SA1C6zdAv4cVuiKLcRhbSa0SLW/JoPUO
4XtEsB3mQ6ow6A==
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:39:35 2025 by rpki-client