Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: HssipxDXAHr3IlWRMTVNDLoJDFPynm15vpgIlpOcpLg=
Subject key identifier: FB:2F:93:CA:85:CC:2D:0E:81:F0:D2:9B:9A:C9:CB:BB:82:9E:1D:CE
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0198481B9A0743EAFE9B99FDD5BB49450261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 19:00:25 +0000
Manifest this update: Sat 26 Jul 2025 19:00:25 +0000
Manifest next update: Sun 27 Jul 2025 19:00:25 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: dGjBiM2YN/FCd7G5zfmRyUjYG1+vbIaJI15VcI8P2Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:9a:07:43:ea:fe:9b:99:fd:d5:bb:49:45:02:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jul 26 19:00:25 2025 GMT
Not After : Jul 27 19:00:25 2025 GMT
Subject: CN=fb2f93ca85cc2d0e81f0d29b9ac9cbbb829e1dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:d2:3f:0b:bd:19:e8:62:87:74:27:3b:49:
b0:6b:58:07:19:a6:d4:35:4b:1c:cd:17:e0:03:d5:
13:9b:c9:6a:b0:07:cd:c8:07:65:09:6a:c1:cb:49:
46:15:34:e6:eb:51:8d:88:65:85:4f:5e:2d:c3:17:
83:50:ca:3d:e7:55:62:8f:e6:0e:92:f5:73:83:fd:
5a:91:33:f7:76:d4:d1:5d:a5:02:a7:6f:60:9a:95:
78:79:ca:3f:d0:cc:b7:e1:64:fc:54:a1:59:2a:4c:
9f:80:9b:e9:b2:e1:13:a2:0e:ac:c5:a3:db:10:e2:
5f:79:a7:b4:42:bd:34:af:88:ec:6f:46:95:99:11:
e0:70:e4:11:b5:ac:b5:d4:5b:61:51:e9:8a:f7:a3:
20:e2:89:b8:0c:8a:01:7b:97:c3:19:80:0a:da:d7:
2e:ff:be:77:e4:0f:a5:af:4e:38:1a:3c:06:0a:1f:
0a:75:e7:88:e1:f3:fc:c1:eb:fb:9a:1a:96:af:73:
bd:e7:02:7d:e1:c3:62:ca:c8:07:6f:5d:82:33:0a:
63:fa:5d:75:d9:2c:de:83:60:99:ad:c0:60:03:f0:
2c:f6:e1:41:2b:4d:95:8b:5b:6d:7d:4e:0c:46:9d:
9f:1d:72:3f:e5:86:84:06:7e:8b:19:03:92:30:fb:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:93:CA:85:CC:2D:0E:81:F0:D2:9B:9A:C9:CB:BB:82:9E:1D:CE
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c4:cc:6b:c1:9e:a2:24:16:f9:7b:cf:f7:63:af:c5:5d:4e:
de:63:f9:dc:6e:f6:d4:7f:d4:63:55:cf:1c:84:fc:dd:26:ee:
b8:d5:7a:85:81:83:9b:fb:6e:0b:22:57:30:d4:b5:ff:f8:dc:
ca:cf:57:44:36:d8:ce:73:19:8d:87:76:37:27:48:34:b6:0a:
90:90:bf:5c:e0:06:ce:08:d6:ca:10:bf:f9:23:97:d8:fb:b9:
30:cb:ab:47:96:37:6d:c0:18:c5:75:68:84:94:80:73:9f:14:
d7:27:5c:19:6d:40:7b:4d:9b:bd:c8:15:65:46:f9:50:a7:6d:
17:e3:73:d3:ee:52:db:da:92:d6:9a:04:c9:d2:d1:e8:ac:8b:
cf:c7:7a:d0:45:28:02:6b:b8:57:a5:18:ee:a6:c7:6d:79:ff:
b2:20:1e:a7:dc:5b:b6:a4:8e:5f:d4:01:ab:62:94:f4:3f:1a:
27:10:76:9c:22:92:90:a0:b4:85:59:61:24:1e:bf:ba:93:a3:
ce:90:66:1a:33:b4:99:4e:30:ca:d9:ce:7b:8e:bf:52:cb:29:
bd:bb:d2:5e:3d:74:01:ea:a8:53:8b:0f:31:ff:6a:17:8d:f0:
0b:e9:a4:25:db:90:de:7d:b9:4d:b7:e7:a8:dc:3e:a2:9c:c6:
ad:de:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:46:55 2025 by rpki-client