Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
File: hoRh4GD99IzUHTOtknHIB9Qk60I.mft (raw, json)
Hash identifier: cdlujPHvX0Qg58guWQ/dQuevcv+dEULYr2RqXyykt2w=
Subject key identifier: BD:F2:0C:66:00:64:61:37:FB:03:EE:A7:2A:17:9B:89:07:5A:91:FC
Authority key identifier: 86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
Certificate issuer: /CN=868461e060fdf48cd41d33ad9271c807d424eb42
Certificate serial: 0199221EF6B6270394CBD9DF2C16E027B6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
Manifest number: 0196
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: H_XoU52eTHbpZkmpLvAUJ7VlUWc.roa (hash: i8bOFbhv/rSJKPzgYxH26TzbQ5J62pViGnxTa332Y9Q=)
2: hoRh4GD99IzUHTOtknHIB9Qk60I.crl (hash: Wa67FrkotMTVDWOJGbs4na5zM2Ub8OMc/CUFmU6tnMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f6:b6:27:03:94:cb:d9:df:2c:16:e0:27:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868461e060fdf48cd41d33ad9271c807d424eb42
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=bdf20c6600646137fb03eea72a179b89075a91fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:de:d2:b1:ae:d6:48:88:7a:9e:6c:54:aa:
8e:c2:3f:36:31:25:c6:c4:2f:e3:64:d5:a4:5b:e2:
62:42:43:fc:48:b2:33:be:7d:02:d6:ca:03:d3:d6:
9f:dc:4c:3d:fb:6b:4e:c8:ca:51:cd:61:6b:c1:10:
39:fb:f7:04:74:4b:0d:89:b7:1d:a8:8b:a1:c4:27:
1d:c1:10:aa:ef:6b:2c:77:84:89:1f:cf:2b:08:7f:
08:d1:19:21:15:97:20:e7:d1:a8:ad:a3:a3:fd:cd:
71:4b:08:24:cd:91:96:53:fb:73:54:87:80:f7:00:
cb:c7:bc:45:16:f0:ab:8b:8e:ff:48:01:51:d2:23:
60:8a:e9:37:a0:64:57:cb:4b:7e:0d:15:fc:ba:ae:
e7:da:df:b6:10:97:11:0a:c5:c0:fb:5c:cd:89:68:
a9:ad:e8:5f:7d:6d:10:cf:58:c0:b9:be:47:31:28:
f4:67:d3:8c:19:4d:9e:57:f5:df:75:de:d7:7d:25:
3a:6f:a5:73:a9:da:41:14:03:b0:66:d7:42:cd:fc:
15:42:3c:6d:59:fa:4a:ad:cf:53:93:8a:12:ed:e6:
e8:9b:13:fa:66:33:79:d8:a0:27:98:01:b0:9d:19:
e5:25:08:6e:e5:07:61:9e:86:69:69:f3:bb:b5:b9:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F2:0C:66:00:64:61:37:FB:03:EE:A7:2A:17:9B:89:07:5A:91:FC
X509v3 Authority Key Identifier:
keyid:86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ec:e2:ee:a8:4e:bc:d8:85:3e:0e:4f:28:96:67:8a:bf:18:
46:b7:45:94:36:d4:a1:9a:34:3f:39:ca:da:13:56:e6:f3:bd:
5e:80:73:d0:a5:05:2d:92:31:f7:b6:b4:03:80:de:07:83:ee:
f7:bb:ff:d3:0c:8d:f5:52:39:b6:9a:38:f5:ff:28:db:f8:5c:
7c:25:b6:6a:e3:4e:4b:18:fa:2d:ee:0a:ff:ec:d4:8d:da:d0:
16:c4:90:ae:03:7d:a7:fe:e4:d7:38:e7:73:60:a6:23:0a:f4:
43:40:a6:ac:d7:1b:79:c2:f1:06:1d:98:93:d2:57:d4:14:95:
f8:e9:b4:31:e0:38:a5:b0:e7:09:2a:94:22:7f:ca:92:5a:85:
92:dd:42:6f:36:02:d5:e1:9e:3a:32:2c:21:d6:ab:8e:71:ff:
78:11:69:4a:dc:28:68:7d:a8:be:06:b1:c0:17:3b:af:18:11:
d6:36:a7:cf:d1:30:f9:a3:55:52:c6:4b:2e:37:aa:54:35:2a:
2b:7c:e9:a0:25:ed:a2:07:72:96:b3:6e:57:86:78:8d:e1:ff:
68:57:af:6c:44:15:2b:f1:a4:69:0e:0f:3f:72:18:d5:28:08:
71:ea:b6:cb:fe:a2:04:e3:66:e0:88:76:05:5c:59:a4:c2:5e:
3c:16:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:55 2025 by rpki-client