Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: /oHqEhs7OPiNR19yU7NapRqymZRppw6WKKtejAMIvyI=
Subject key identifier: 4A:6B:10:EB:4D:E8:3D:F7:28:9D:DC:67:1D:0F:26:08:4A:EB:30:62
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 01994474955A68663E2B056BC477252FA2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 1618
Signing time: Sat 13 Sep 2025 19:01:55 +0000
Manifest this update: Sat 13 Sep 2025 19:01:55 +0000
Manifest next update: Sun 14 Sep 2025 19:01:55 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: kzhGev5Vh/8oNbwQg1CW446QEWpptgwFS+vamD/VOjk=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:44:74:95:5a:68:66:3e:2b:05:6b:c4:77:25:2f:a2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Sep 13 19:01:55 2025 GMT
Not After : Sep 14 19:01:55 2025 GMT
Subject: CN=4a6b10eb4de83df7289ddc671d0f26084aeb3062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:85:21:1b:7b:3a:51:19:4f:20:75:15:b2:
37:2e:2a:11:24:8b:10:5b:83:48:3e:5c:17:8b:29:
4a:fd:b3:76:91:d3:b2:d6:0c:0b:2b:b6:4e:e3:b7:
c8:b5:3b:ca:c3:75:9c:67:79:46:f3:38:0e:62:0e:
37:df:ca:d8:13:2c:04:2b:55:48:30:68:4a:09:65:
63:cf:60:aa:12:88:6e:32:64:30:3d:bd:b4:b0:6d:
ed:da:a2:43:47:bc:cd:1e:17:7a:54:0c:2d:d3:92:
6a:06:27:22:5b:d7:0c:6c:1c:ab:70:56:17:6e:ae:
ca:e8:69:78:e2:b0:59:8c:9b:1b:79:f8:3b:e5:1b:
09:c2:01:a7:a2:ea:6d:8c:47:70:56:02:9f:5f:57:
44:29:58:8e:dc:ce:a7:72:7e:11:69:c1:aa:59:64:
df:93:ec:c2:65:e6:0c:ac:e6:0a:d7:13:46:aa:b3:
8a:9f:f0:81:ea:d4:ff:ff:d4:f3:9d:d2:00:e5:64:
86:c2:ce:4e:1d:53:3b:4d:86:93:f5:0a:f2:98:71:
ee:c9:60:3d:c9:e4:a9:41:b0:67:c4:b3:e5:ae:da:
f7:db:a2:42:41:9b:f6:11:30:64:6a:9a:1f:2f:6a:
97:01:c8:cc:21:e6:5b:85:a3:9d:1b:a0:b1:7b:f2:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6B:10:EB:4D:E8:3D:F7:28:9D:DC:67:1D:0F:26:08:4A:EB:30:62
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5c:43:2f:f1:31:a7:bf:ca:02:00:f3:21:47:64:be:ed:44:
3f:a7:a9:15:06:a5:5c:22:cc:f3:3e:4a:fb:9d:00:2e:11:31:
19:db:f6:d2:33:40:16:c9:68:00:bb:fa:05:f6:06:f9:c3:c7:
ba:c6:c6:0e:7c:d1:ee:28:e4:f2:ee:f9:34:42:b6:13:2c:6b:
de:0b:e0:da:6c:a8:ca:5f:de:0c:6e:1b:94:0d:fe:a4:7b:b9:
8b:0c:9e:e0:fe:29:3b:b8:9b:34:c9:44:41:5d:14:77:c6:5a:
ea:f4:e5:6c:40:d1:46:11:31:84:82:06:90:81:a9:e5:d7:73:
1e:b7:32:38:1c:67:d3:65:c1:81:bb:87:4f:e5:17:c2:ed:34:
6e:04:18:29:2e:d3:ba:d9:74:e2:39:b9:f4:1c:5e:bb:33:6d:
c8:3a:f6:ee:9c:cd:e5:a2:53:95:4b:a1:02:da:5f:c0:23:d6:
8d:13:ee:dc:f5:de:9a:60:62:c7:44:42:8d:8c:95:5f:1e:2d:
66:fa:aa:65:06:0e:05:b3:90:c2:75:76:d6:8e:1b:37:0b:de:
ae:4b:e3:9e:75:25:dd:02:d0:a4:b4:d6:eb:a2:72:59:d7:54:
71:48:ab:54:42:95:53:c7:de:8b:0b:22:5d:31:8b:29:84:cb:
c2:90:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 23:10:37 2025 by rpki-client