Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: 8vtBNM+jWG3hslEyjHar53qbr7KfLl1fACEyQlftb3k=
Subject key identifier: 6A:8C:01:06:86:49:BE:3C:FC:16:32:D8:23:14:D2:13:77:06:7E:61
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019A0290F4FCFE50EEE0F3C0C6B799033827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 172B
Signing time: Mon 20 Oct 2025 17:00:45 +0000
Manifest this update: Mon 20 Oct 2025 17:00:45 +0000
Manifest next update: Tue 21 Oct 2025 17:00:45 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: CWCFl9FkexFKMghauuDbuZJ9JAw.roa (hash: 0sKv1tPv8lAPLOiOPW1NvNF/jyixixEETK08Yyrw5wU=)
4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: Ppabd1RmqQ4rOJsMM6oXtP7K5vAjVCNX9BHAhiovvtQ=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:f4:fc:fe:50:ee:e0:f3:c0:c6:b7:99:03:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Oct 20 17:00:45 2025 GMT
Not After : Oct 21 17:00:45 2025 GMT
Subject: CN=6a8c01068649be3cfc1632d82314d21377067e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:e8:2a:ad:0b:8a:74:a5:f0:8a:c0:b1:4d:
33:dc:c6:0c:d8:1c:6c:d1:dc:7c:17:9a:04:3b:14:
b5:04:35:77:02:86:56:a8:df:d5:57:52:cc:41:5a:
81:fc:8c:38:31:23:4c:e3:6e:c6:e9:40:00:5e:95:
20:ac:d4:40:cb:32:13:cb:f5:33:66:61:d0:b3:16:
47:19:9b:c7:3b:99:60:91:59:23:ba:ed:65:2a:b9:
b1:49:f4:8c:3a:69:74:96:07:15:df:0a:cb:34:de:
03:c9:cd:67:19:73:5a:8f:15:4c:18:46:05:88:58:
73:75:f2:f7:be:9f:bb:6e:00:22:96:06:64:78:dd:
e1:c5:19:c2:4a:38:3a:c7:d6:27:56:18:ff:c0:19:
72:e6:dd:85:d5:e4:8f:f7:a7:ed:ee:3e:d2:ee:67:
9b:e9:bc:98:62:9c:c5:15:81:1f:a7:41:b9:38:b6:
b0:3b:92:21:31:fc:00:1e:7e:5c:59:82:6f:4b:8f:
fa:55:30:1e:cd:fd:f6:3c:52:9e:07:b5:a8:41:5e:
84:c5:e5:7e:b6:97:0f:94:9e:85:39:9d:4e:63:27:
54:61:b2:0e:5c:56:71:85:e3:40:f3:5a:80:8d:c3:
0e:d3:2c:38:1d:9d:71:5a:0d:9c:90:ae:3d:76:5e:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:01:06:86:49:BE:3C:FC:16:32:D8:23:14:D2:13:77:06:7E:61
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:2a:e4:12:44:ee:46:8e:1b:d7:e4:4d:fd:dc:7b:63:91:
ab:4f:f7:bd:4b:03:ce:08:c0:d8:f5:32:e7:23:0b:c2:08:99:
4d:e7:41:2c:89:99:56:4c:d1:e2:f5:8f:ea:bc:f9:23:b8:e3:
51:b9:10:60:7d:2d:9e:ca:33:29:14:bb:0c:d7:5a:03:7c:fd:
1c:ef:f8:6a:4e:17:3a:4c:d8:1d:16:ca:5a:cc:13:cb:09:ce:
76:d9:b3:b1:56:52:2e:97:bd:25:7c:6e:26:7e:94:70:60:b8:
52:d8:56:02:8d:8d:d4:7a:b0:31:5d:41:da:2f:3f:d9:5a:39:
c8:d9:00:14:59:9e:0f:98:52:51:e2:da:8d:be:b6:c7:d0:5e:
31:db:4a:b0:52:f2:27:81:de:40:49:98:7e:b7:31:24:db:bd:
c7:0d:72:f5:93:c4:aa:6e:5e:35:03:c3:9b:2c:5a:a9:8b:e5:
f3:ac:06:ed:e5:27:5a:94:00:91:bb:07:05:19:af:e0:f8:fd:
d2:a0:b9:05:af:5c:31:4b:ae:dd:0d:fd:24:9c:3c:df:83:99:
c3:dc:0b:9f:cc:41:f9:4c:d1:91:b6:ef:e9:7e:36:e3:b1:98:
0f:9d:2f:9a:20:15:b0:95:b3:a7:26:c1:d6:c7:bd:2e:79:0e:
e0:1c:5e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkPT8/lDu4PPAxreZAzgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjUxMDIwMTcwMDQ1WhcNMjUxMDIxMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg2YThjMDEwNjg2NDliZTNjZmMxNjMyZDgyMzE0ZDIxMzc3MDY3ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSHoKq0LinSl8IrAsU0z3MYM2Bxs
0dx8F5oEOxS1BDV3AoZWqN/VV1LMQVqB/Iw4MSNM427G6UAAXpUgrNRAyzITy/Uz
ZmHQsxZHGZvHO5lgkVkjuu1lKrmxSfSMOml0lgcV3wrLNN4Dyc1nGXNajxVMGEYF
iFhzdfL3vp+7bgAilgZkeN3hxRnCSjg6x9YnVhj/wBly5t2F1eSP96ft7j7S7meb
6byYYpzFFYEfp0G5OLawO5IhMfwAHn5cWYJvS4/6VTAezf32PFKeB7WoQV6ExeV+
tpcPlJ6FOZ1OYydUYbIOXFZxheNA81qAjcMO0yw4HZ1xWg2ckK49dl4LsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqMAQaGSb48/BYy2CMU0hN3Bn5hMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjcq5BJE
7kaOG9fkTf3ce2ORq0/3vUsDzgjA2PUy5yMLwgiZTedBLImZVkzR4vWP6rz5I7jj
UbkQYH0tnsozKRS7DNdaA3z9HO/4ak4XOkzYHRbKWswTywnOdtmzsVZSLpe9JXxu
Jn6UcGC4UthWAo2N1HqwMV1B2i8/2Vo5yNkAFFmeD5hSUeLajb62x9BeMdtKsFLy
J4HeQEmYfrcxJNu9xw1y9ZPEqm5eNQPDmyxaqYvl86wG7eUnWpQAkbsHBRmv4Pj9
0qC5Ba9cMUuu3Q39JJw834OZw9wLn8xB+UzRkbbv6X4247GYD50vmiAVsJWzpybB
1se9LnkO4BxenA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:10:12 2025 by rpki-client