Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: TRVngsZJG3cNWxPyRM2RSSDxQUSLvTw7huqFqWUwKOE=
Subject key identifier: EA:7A:B4:6D:5A:DB:6F:18:ED:79:45:8E:74:74:BE:D8:72:96:EC:42
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 019A0B5DA31FE29C8957E6F06CADA57A051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 16ED
Signing time: Wed 22 Oct 2025 10:01:17 +0000
Manifest this update: Wed 22 Oct 2025 10:01:17 +0000
Manifest next update: Thu 23 Oct 2025 10:01:17 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: SB3ilYdAeOY6MlwQhgASV/8/BNPpfytbPJFMH7ljdW8=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:a3:1f:e2:9c:89:57:e6:f0:6c:ad:a5:7a:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Oct 22 10:01:17 2025 GMT
Not After : Oct 23 10:01:17 2025 GMT
Subject: CN=ea7ab46d5adb6f18ed79458e7474bed87296ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:59:6f:73:be:b4:38:68:a9:00:e4:98:b1:
ac:22:39:bf:a7:c7:a4:f6:80:71:02:62:d8:a4:25:
09:c5:c8:b9:8a:db:05:29:30:8b:9d:13:4b:56:94:
33:b8:96:ef:0f:7f:e8:ad:ef:24:8e:0c:06:67:fb:
94:b6:35:5f:cb:86:2d:37:93:bb:3f:87:95:1d:40:
83:24:10:ed:c8:7c:fd:4a:1d:64:52:de:50:ff:ec:
dc:b8:26:a1:73:47:58:5c:d3:a2:d5:6b:9d:4b:3d:
62:61:b3:88:12:78:ef:f0:63:f2:11:74:2a:d7:7f:
92:88:5c:1a:cd:0b:32:5a:a3:41:6a:d0:f3:8a:e0:
c5:51:34:cb:95:8c:8f:fb:c4:f9:7d:a1:66:60:dd:
55:57:f7:b0:49:4f:a1:a3:44:da:70:6d:1b:fa:5b:
02:a3:7a:28:e7:0a:80:eb:fe:a7:4a:9e:2e:72:8e:
3a:e1:30:6f:c0:8b:d9:c9:96:33:0a:2c:34:ea:19:
7d:c1:27:ae:9d:af:f3:3d:5f:29:c2:83:7a:58:9c:
18:ea:ab:0a:aa:7f:07:63:5e:95:ae:bb:6c:02:c7:
72:1f:4b:4e:e3:c6:14:aa:da:53:74:b4:f5:2b:1e:
63:5c:aa:44:25:c8:2f:fc:1d:b7:10:33:05:6c:7c:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:B4:6D:5A:DB:6F:18:ED:79:45:8E:74:74:BE:D8:72:96:EC:42
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0d:79:ba:79:60:f0:2d:bc:4c:de:88:1f:09:a6:bd:05:f7:
70:77:36:e1:1b:d6:d2:83:94:d9:5f:44:04:6a:7e:a7:c4:02:
9e:ff:8d:4f:60:d4:03:36:d0:ca:aa:b8:d3:a0:dc:55:3e:b7:
dc:01:a9:2a:6b:47:54:09:8a:98:9b:6a:8c:15:93:b4:dd:26:
13:c2:33:6e:bd:25:42:5e:cf:9c:58:cf:fe:f6:56:72:35:e0:
e0:db:da:4f:a6:23:b0:88:2a:bb:0a:fc:d0:cf:3f:45:48:47:
c7:71:37:73:61:e6:58:65:2b:dc:70:e1:8a:0c:8a:0b:98:df:
f1:55:ab:1b:29:4a:7f:22:d5:b0:3f:c3:84:b6:a0:da:a8:d5:
07:8e:4a:0d:6b:02:d5:34:db:56:e0:60:97:6a:60:e0:94:3c:
34:8b:df:f1:25:78:27:a2:a2:bf:a5:2b:a3:b9:e7:6c:7c:38:
fe:77:31:f1:15:db:23:06:37:e8:69:09:0b:65:34:1f:69:fe:
1c:e1:4c:4d:cb:e4:14:1b:1e:49:04:a9:ce:0d:1b:b6:b7:70:
c7:b7:cd:e6:48:45:31:1f:73:7c:03:04:10:0e:65:44:2a:f2:
37:fd:2e:28:88:dd:0f:5d:39:50:30:dd:58:58:9c:62:92:77:
66:22:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:32:09 2025 by rpki-client