Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: 1SVjM/fIpajtdAVLUBaz/S2Oc95/+i75QfilgcNrjtY=
Subject key identifier: E6:14:C4:95:1A:2B:D9:6D:D7:71:F3:C1:7C:60:F1:11:FD:B2:3A:A1
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019A51199E4A4DA7E80BF99DF149BFC43314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0DEA
Signing time: Tue 04 Nov 2025 23:00:24 +0000
Manifest this update: Tue 04 Nov 2025 23:00:24 +0000
Manifest next update: Wed 05 Nov 2025 23:00:24 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: +nY49K3iRNeHxYpoII47zX7o6qdx+uq1J9MLQeQyAHI=)
2: bQ335Qu1IpD2FIjMI78ziScUVGI.roa (hash: ZV4IqpYmx61tlbVAfX/UDuIrlcXCWTu1WQJfIwsAz60=)
3: feXIFkXjQ-D3K9RdNEN9AXi3txU.roa (hash: pbHb2pCafG3K6Mcopun8T/bJ0i5xcQ41Kx0DXDfoxEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9e:4a:4d:a7:e8:0b:f9:9d:f1:49:bf:c4:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Nov 4 23:00:24 2025 GMT
Not After : Nov 5 23:00:24 2025 GMT
Subject: CN=e614c4951a2bd96dd771f3c17c60f111fdb23aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:f5:d0:2f:0c:4a:18:c8:c2:1d:ff:14:d1:
a3:5c:f7:ec:eb:80:4b:8c:75:89:3c:ca:43:39:a0:
c8:85:c8:00:7a:69:74:d9:fe:cb:ce:a0:8a:3a:51:
3d:47:f2:e3:b5:91:3f:5c:58:f3:6f:4f:f7:82:ff:
be:29:4d:4b:a1:f3:0a:25:b2:60:4e:8f:4b:1e:9b:
aa:4e:9b:cd:77:61:10:8b:39:05:b8:ad:73:b9:ce:
14:11:b4:86:24:ba:76:0d:1e:a3:e3:40:17:09:60:
12:eb:71:5b:d7:bd:bf:31:5e:16:0c:85:27:69:b0:
41:19:c9:ed:0d:4a:e4:87:e1:52:1d:5f:3e:59:60:
f6:0f:fb:e1:d6:b0:be:2a:8b:31:9a:73:be:6a:94:
f4:71:d5:91:d3:ee:fa:46:68:d9:e9:9e:22:93:47:
78:23:01:00:1c:02:b3:65:a7:3e:a9:1d:3d:76:3a:
23:ca:77:7a:9e:71:39:d0:de:ed:c7:ec:9a:8a:c8:
9c:78:8d:3b:c7:7e:a7:0d:81:13:a7:6a:1a:18:89:
6a:85:95:88:44:87:dc:3e:c0:59:96:cb:e1:e3:82:
1f:04:3d:d4:c4:20:d0:b1:fa:fb:33:58:3b:d3:b2:
e9:fb:4c:6d:50:62:d4:b5:78:e0:5d:bd:e8:24:c4:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:C4:95:1A:2B:D9:6D:D7:71:F3:C1:7C:60:F1:11:FD:B2:3A:A1
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:e1:ca:a7:94:25:84:3b:20:e1:d4:37:35:71:64:a8:39:
93:65:00:d8:26:88:6c:63:ad:2d:d1:2c:24:16:53:30:01:f7:
25:50:d6:f2:f5:49:0b:8e:52:4b:5e:d4:66:2c:40:c4:ad:d5:
f5:b7:8a:1c:eb:1e:6b:95:f9:63:c1:2a:e0:a6:75:e5:1e:62:
d2:4e:e1:b4:33:14:5c:af:d7:c2:92:7e:1a:e8:9e:83:e7:32:
b6:b4:12:1a:40:28:0b:71:38:ce:5a:ec:7b:ce:d5:0e:86:26:
ec:57:78:cc:ad:74:b0:77:68:e5:cd:7e:51:2d:c5:c8:1e:16:
00:1d:7e:86:a4:3b:13:6d:74:3c:de:2a:39:35:5c:e0:cc:db:
7b:be:7a:68:56:23:32:4e:cf:47:af:e2:8e:46:ab:ea:a6:12:
ed:61:f6:3b:75:e2:1c:62:bb:29:cc:9b:1b:3c:c4:de:af:c5:
ab:7d:e8:5d:40:86:c3:8b:56:e1:45:a0:77:4e:1d:58:cb:ba:
e6:4f:ef:75:13:06:7b:de:3f:26:fe:c7:b9:01:0c:d4:ed:13:
56:d9:bc:fb:2c:c9:34:81:e2:49:16:33:45:65:a3:b2:ac:50:
27:44:c4:c5:f5:3a:45:fc:be:75:65:25:35:f3:6e:ba:8b:3b:
6a:51:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:05 2025 by rpki-client