Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: rF/1Pl9hou/ravc23hcjul2jGsJALzowluiTcuBz/lY=
Subject key identifier: 3D:5B:37:E5:B0:53:B5:37:70:FF:9B:D7:31:6F:49:80:DB:7C:27:05
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01993380AB5744242528DE6C97C90100D298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0BBF
Signing time: Wed 10 Sep 2025 12:01:34 +0000
Manifest this update: Wed 10 Sep 2025 12:01:34 +0000
Manifest next update: Thu 11 Sep 2025 12:01:34 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: bgCAt5HTubiw7d2COTmn8ghxiHd6R23qftPSpdVDFl4=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:ab:57:44:24:25:28:de:6c:97:c9:01:00:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Sep 10 12:01:34 2025 GMT
Not After : Sep 11 12:01:34 2025 GMT
Subject: CN=3d5b37e5b053b53770ff9bd7316f4980db7c2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:ec:a3:a1:1c:53:92:6d:e7:78:51:24:79:
69:59:a7:13:70:ce:ad:52:00:fd:1e:41:0d:74:89:
c8:be:28:f6:13:b6:80:cb:da:13:02:89:9a:1f:53:
ea:4f:e9:b6:36:36:3a:5c:85:c4:ba:f9:d7:36:e8:
a6:b3:2f:71:e4:7e:a5:b7:a8:82:03:e3:a0:99:46:
b9:45:a1:6e:b9:2e:e7:68:79:8c:ad:04:5d:7d:f5:
2d:dc:e1:12:30:0b:b5:01:05:7d:7a:4b:ec:b3:ee:
13:b7:3d:c1:8a:ab:f5:e8:21:6b:66:bc:5f:96:bf:
68:7b:ef:31:4e:4f:24:ce:c4:ff:6b:2e:43:bd:93:
33:30:62:cc:f7:39:79:d5:65:1f:61:40:64:78:af:
85:bd:0c:53:86:f1:f8:f5:3b:77:28:e4:64:a7:bd:
5c:3f:09:c6:17:16:97:16:bf:d0:f5:0a:00:80:7b:
3c:1a:0f:5f:35:a2:59:eb:d4:92:97:4b:ae:0d:dc:
09:09:32:87:0c:5e:df:eb:ff:c8:9c:0d:da:3e:ab:
e4:8b:a1:f2:97:f1:42:e1:ce:53:ee:80:64:73:cc:
d3:56:ca:e6:b8:7f:b6:33:f7:29:ce:d0:82:32:05:
42:bb:83:c9:61:6f:66:b9:63:aa:84:e6:7e:9a:2a:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:37:E5:B0:53:B5:37:70:FF:9B:D7:31:6F:49:80:DB:7C:27:05
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:8e:fd:8c:9c:ea:c3:ad:6d:9e:26:67:b1:f2:f2:ca:09:
49:5f:44:0e:0e:2a:97:5a:9c:96:6d:f3:48:f0:2b:b3:26:a1:
f3:b0:7c:73:16:02:d1:c0:17:80:bd:96:32:51:26:7b:db:a2:
cd:59:82:28:b2:aa:3c:36:81:f6:45:75:12:6b:09:dc:b9:f7:
1e:64:f7:6f:4d:fd:cc:38:29:25:71:b7:a3:0a:3e:12:6d:d4:
69:18:3f:ba:3f:e4:50:04:e9:53:ec:19:b9:aa:2f:d2:1a:b7:
73:24:25:11:bd:d6:90:31:e6:40:1b:b6:86:1a:3f:39:a3:79:
1e:93:27:a6:3c:ae:40:c1:fb:e3:83:e2:dc:32:c8:89:93:4d:
28:ca:82:b7:2e:df:21:43:91:e9:5b:c1:db:05:36:33:cf:05:
f5:07:62:17:c7:16:60:3b:e9:20:26:b5:82:9b:20:51:c5:98:
19:14:1d:75:84:de:01:72:18:76:56:7d:94:93:3d:16:40:73:
81:ec:28:f5:60:01:ec:6f:51:fa:5c:42:7a:dc:55:43:74:91:
eb:f2:ab:f3:64:3c:32:c8:58:61:30:fa:fd:c3:25:9f:f7:1a:
d7:55:b9:fe:38:b4:39:be:29:c9:b8:a2:ec:92:19:aa:c5:b7:
d1:77:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:28 2025 by rpki-client