Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: Tpdh0I2cTCAZaq9ZUaZQ5e1yRWKV68hMIbf/S2ahENw=
Subject key identifier: A6:B6:E9:76:68:91:3C:0A:AB:25:AD:EB:04:E9:B2:D3:9D:1A:F2:9A
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 019922553E9B39EAB835AAF5F0690C4F8815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:00:35 +0000
Manifest this update: Sun 07 Sep 2025 04:00:35 +0000
Manifest next update: Mon 08 Sep 2025 04:00:35 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: Nyy8koTNFlSVyDGLDLWt53Vm/b2iPQRtJG1b/SZBsx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:3e:9b:39:ea:b8:35:aa:f5:f0:69:0c:4f:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Sep 7 04:00:35 2025 GMT
Not After : Sep 8 04:00:35 2025 GMT
Subject: CN=a6b6e97668913c0aab25adeb04e9b2d39d1af29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:f8:6d:42:4f:cf:a4:4f:3b:3f:e0:48:ea:
17:64:15:44:34:4c:4c:f6:aa:25:50:75:57:d4:39:
bf:ef:d6:7b:91:9c:a0:f7:d8:e3:ac:59:90:0f:72:
3e:26:51:b6:61:0b:29:e0:e9:b7:6e:35:30:9d:46:
fd:22:bc:e2:7a:01:c5:47:aa:74:6f:d0:9d:a5:2e:
fe:6c:81:43:3b:42:f5:98:1d:86:4f:7b:d7:12:c6:
58:de:bf:fd:98:2a:2c:f0:74:d3:f9:05:77:50:99:
90:d4:78:a3:53:11:e0:ca:c4:b2:82:fb:76:57:c4:
bf:c0:1d:b3:8b:4e:15:66:27:7a:d4:1f:47:79:fb:
a4:95:b4:16:2e:e2:ca:ff:80:00:90:31:bd:2b:e6:
92:28:ec:e9:53:91:10:d7:46:b0:af:cd:4d:8d:5d:
e5:88:fb:f4:c4:ce:b6:92:2a:76:17:ca:4f:6d:c0:
fb:25:7a:8e:2b:7c:5f:9b:87:d4:5c:c7:f5:10:67:
4f:8c:2e:15:aa:41:14:2e:96:e0:5e:c5:60:ca:1a:
b7:18:f8:b3:85:23:45:84:1a:5f:5a:f7:62:51:4a:
57:0c:eb:60:22:3b:cb:b3:a8:dc:5a:39:f4:48:3b:
da:86:fe:68:e8:ab:5f:2f:a6:32:21:d9:cc:97:99:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:E9:76:68:91:3C:0A:AB:25:AD:EB:04:E9:B2:D3:9D:1A:F2:9A
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ca:57:3a:6f:43:ce:81:de:d7:ce:c8:49:0b:dc:26:15:ba:
f3:ef:d4:64:6a:c5:22:21:e0:ba:87:35:11:6b:49:ad:ea:b7:
99:bb:8c:92:b2:fe:6b:4c:e4:c6:09:e9:16:f6:f0:47:79:c5:
43:9b:3d:87:43:41:90:d8:a5:5c:96:3e:d3:de:65:b2:f4:fc:
38:03:b5:ab:93:fa:e0:e3:27:b1:11:81:9d:dd:c7:ea:1b:30:
9f:aa:55:d2:72:33:42:99:1f:53:db:c2:13:6b:7c:35:84:5a:
e2:d8:4b:14:a4:27:2b:e5:42:4b:09:e6:8c:6b:78:92:ee:2a:
b1:ff:95:ca:f9:e4:68:d8:dc:82:e8:70:86:2a:91:47:4c:a6:
7b:3e:6d:48:9c:70:30:82:48:f3:75:67:0a:55:2a:33:09:bd:
5b:28:c0:a6:1a:3a:b0:2e:b7:23:17:bf:71:02:7a:a1:ce:17:
3b:2e:85:76:47:86:60:b4:55:b9:8c:57:f5:0e:6f:20:a7:f1:
cc:48:91:16:4a:a9:1f:70:8a:72:dc:eb:5d:3a:ed:7e:92:28:
56:af:34:69:2a:1a:20:71:72:35:c4:8f:ad:6c:6f:d5:85:10:
65:28:60:71:86:10:6f:8b:eb:71:13:42:94:68:03:d7:b3:16:
4d:38:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:01 2025 by rpki-client