Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: VZSzv9MCVCBwDx93vLAem7AnyRdgFJyJjZ86CXAVuZE=
Subject key identifier: 47:A3:F6:A4:6D:D2:B0:24:D3:67:A4:46:5C:0A:20:AD:B6:76:64:63
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019922FA09CA4429A003C7B6F800DE8A293D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0D28
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: bdA5mcFP4pp/swZx+synUDSrh4Diz/4Kw8r64NKUOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:09:ca:44:29:a0:03:c7:b6:f8:00:de:8a:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=47a3f6a46dd2b024d367a4465c0a20adb6766463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:dc:6a:c9:a6:0d:8c:b2:5a:3b:79:18:1c:
4c:62:0c:80:d6:56:94:bc:27:9d:ee:40:42:a6:e7:
f8:dd:be:90:42:2b:0d:59:68:e5:18:e2:91:08:50:
4e:c7:66:15:4e:23:3f:a1:49:63:14:1e:95:e0:f5:
c9:f0:3c:5a:d9:fa:ee:65:ff:ae:fa:11:b7:e1:d6:
bc:f9:c7:7f:35:8d:49:27:8c:a1:6a:f9:cc:c9:f2:
fd:f7:c7:ad:e9:fd:4e:0d:e8:21:17:da:af:04:ec:
62:29:0e:e4:d1:b8:65:88:3d:da:8e:b0:0e:31:13:
c1:5d:3c:65:28:80:67:73:3a:0a:9b:f7:86:3d:13:
15:85:8d:b8:c8:96:32:14:0c:59:d7:ca:c7:c1:85:
7e:99:1b:1a:86:68:4c:00:f0:e1:89:90:92:7a:50:
de:7f:82:96:07:35:e7:63:a8:01:9f:1c:50:be:f7:
f1:41:ed:94:fb:88:ec:18:93:b7:07:d8:a0:73:a1:
8f:a0:69:48:38:31:4e:0c:2a:0b:70:df:1a:bb:bf:
60:64:07:0c:76:bd:34:45:ec:26:9f:84:4b:6b:1a:
c2:9b:67:b7:1f:09:a8:f0:e0:b7:73:49:c1:2c:5b:
90:3d:c9:7b:83:03:42:9b:50:6f:09:64:41:82:1d:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:F6:A4:6D:D2:B0:24:D3:67:A4:46:5C:0A:20:AD:B6:76:64:63
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:ae:2e:68:4b:de:75:ae:57:72:32:86:7c:3d:2c:c1:39:
f6:b9:a7:9f:d3:3f:e4:50:4d:21:90:a8:5f:b0:60:87:11:75:
37:d9:8a:40:cc:b1:b5:8f:f5:4b:c6:5c:57:8c:1b:dc:0f:aa:
78:87:5c:f4:75:37:5d:0c:dc:0b:06:b4:e6:b7:ef:9e:2a:dd:
31:a5:82:0e:82:7f:1a:31:db:92:76:69:f1:73:f1:21:f3:6e:
44:8f:a0:a5:ab:8f:f6:bb:7a:47:36:aa:0d:43:77:00:38:b0:
56:24:f5:7a:b4:9e:24:9e:c9:a5:bc:53:4a:f3:cb:e3:be:ec:
e0:6c:7e:34:3b:24:0d:73:2d:a9:73:96:5a:17:94:8a:38:12:
d8:fa:3e:8e:b0:6b:54:93:cc:bb:4e:84:22:2a:26:f0:40:0e:
42:96:56:ba:15:19:56:74:16:7d:e8:4b:e8:58:84:01:fe:35:
df:b0:24:7b:5a:30:73:18:56:f2:ad:c6:b5:2f:e8:4d:b7:ca:
3b:13:ca:10:69:2f:f3:c5:4f:fc:66:48:18:ad:51:08:b7:1a:
32:a9:33:26:c0:7c:34:f9:9e:99:26:ea:aa:2e:bd:f0:98:ca:
dc:87:fc:f1:33:9a:ca:6c:d1:fe:2f:87:05:bf:0c:82:b8:f8:
d7:69:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:24 2025 by rpki-client