Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: e4ozeAwW4aFqFtwkXW4V3PBc0CkrAX79jP1UG1f3uIk=
Subject key identifier: BB:64:26:A4:AC:B6:CB:67:91:5B:45:6E:CC:71:1F:D2:5E:E3:DD:A9
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 019A24E653F48CC005EE207DC7F68246CC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0C3C
Signing time: Mon 27 Oct 2025 09:01:05 +0000
Manifest this update: Mon 27 Oct 2025 09:01:05 +0000
Manifest next update: Tue 28 Oct 2025 09:01:05 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: Dr2bpLKRcS7PXzi48V6edIuqdDT1nsN7315qJpdJhH4=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:53:f4:8c:c0:05:ee:20:7d:c7:f6:82:46:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Oct 27 09:01:05 2025 GMT
Not After : Oct 28 09:01:05 2025 GMT
Subject: CN=bb6426a4acb6cb67915b456ecc711fd25ee3dda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:48:b7:b3:20:ec:01:46:73:d6:44:80:f7:
46:61:37:44:cb:f9:ae:8c:1e:d9:1b:4f:29:4b:67:
12:d3:97:23:a3:83:4e:03:72:55:58:92:44:80:23:
de:5e:c1:bb:17:93:68:57:80:9e:00:2f:a5:33:ec:
a3:14:f8:1e:18:4c:3c:86:b3:e7:8d:a8:04:e9:74:
6e:99:8b:94:a9:07:17:c1:9e:c0:6a:57:7c:44:74:
ba:38:b0:a2:1b:02:94:89:21:56:1b:bc:e8:9a:ee:
3c:4c:de:c3:3f:71:fd:5a:0f:84:8d:4a:03:18:75:
f2:ce:95:a6:ae:c8:63:99:f1:1a:fe:5e:8c:b1:8d:
41:c3:4f:9f:e4:03:4f:43:fd:38:4f:0b:36:05:a2:
e9:55:00:0c:4b:e2:47:54:eb:b6:15:b8:67:73:62:
cb:d9:aa:1c:a9:a3:23:14:30:38:71:06:a8:65:70:
28:f7:64:95:22:f1:32:ab:62:a2:19:02:39:18:67:
b9:c2:2b:f2:36:43:23:38:a7:9e:30:36:2e:9d:61:
96:ac:a7:14:c4:77:36:46:9d:79:20:64:9b:b7:cc:
25:26:3c:61:ed:fd:3d:13:6c:fe:eb:7e:d3:f8:af:
26:45:15:ef:5a:cb:16:d7:a1:3c:4e:15:f7:cb:95:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:26:A4:AC:B6:CB:67:91:5B:45:6E:CC:71:1F:D2:5E:E3:DD:A9
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:c0:75:9b:8c:f5:a7:47:57:89:98:57:61:cb:6d:73:ca:
09:c7:39:9c:01:70:e7:f0:8b:ea:66:19:89:47:e7:d0:70:18:
79:ad:4f:4d:f7:29:b0:ad:bf:69:16:a6:fb:66:98:ed:14:f0:
ce:1a:b4:83:1c:74:13:34:a2:0a:57:70:0b:0a:d2:2c:4d:de:
72:f8:fc:63:50:30:67:a5:8a:b1:bb:7e:97:f2:a1:50:6b:75:
0b:83:e1:19:61:cf:c9:b4:c8:4c:07:22:d5:25:ba:b8:1e:5e:
c3:01:7f:a6:33:84:e1:b5:51:d8:d5:a8:e6:3e:cb:f2:65:08:
b7:54:36:ff:3e:c4:79:5a:cc:cc:51:67:54:ce:f9:cf:67:16:
ab:08:21:bd:19:9e:15:a8:f3:23:21:74:7f:ca:f5:e2:e6:0d:
89:9c:e4:c7:59:ee:bb:60:ee:c9:cf:1f:23:35:b7:4c:4a:c6:
c7:c8:e2:b6:d2:bf:d1:1f:ba:ee:85:70:7b:82:e3:5d:7b:06:
e1:cf:ac:51:c8:e4:fa:92:ba:ad:9e:09:27:7c:98:6e:da:3f:
d7:77:0a:25:20:9b:b7:aa:4b:a2:ce:55:c1:a7:9b:76:31:bf:
e2:5b:00:c4:7f:58:f6:48:56:06:28:b5:42:b8:c9:23:94:a6:
c2:4a:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:51:03 2025 by rpki-client