Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: BVZhukDHkUWRG5qOIuAdn6siJ1D4tvmg2tAjaNJzT70=
Subject key identifier: C7:68:98:4A:6F:6B:79:C4:0F:23:48:4B:7F:A3:5A:07:B7:EC:56:A1
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 019A4EF4E979A61720C03B4525B27CB763DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: H5FyiZKOl72Nq5c6snkocJLAlPdtAS1Q5IshIU6w7ao=)
2: CoNCbdPpJL-6fbcnJD3B3DbY734.roa (hash: ouhTfA8/5+dNL+YmL8KPLbr0RKoGCNyfOXLbumLXJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e9:79:a6:17:20:c0:3b:45:25:b2:7c:b7:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=c768984a6f6b79c40f23484b7fa35a07b7ec56a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:90:3c:68:97:cb:3f:6a:31:46:0f:0b:d1:
8b:1f:79:a8:fa:31:94:e8:76:58:98:4f:0f:5e:05:
7c:fb:0f:eb:cb:47:17:d2:41:12:5f:f9:66:6a:54:
51:be:7a:05:41:1d:87:b0:e8:56:4c:b5:62:42:dc:
98:0f:78:84:70:a7:aa:79:c1:fb:a2:26:10:a0:40:
9f:e2:7e:8b:46:07:7f:b0:f5:2d:b7:a0:9e:b0:76:
4f:43:f3:28:72:3f:21:e8:16:f8:7c:e7:dc:45:24:
3f:e2:93:c3:5c:34:4e:59:d4:3d:e5:78:06:58:b5:
c2:31:2b:11:8f:cf:0e:ce:3e:ba:b1:a8:47:a2:c2:
d1:4a:35:38:05:15:7f:6a:1e:bf:d3:ec:c0:7b:cd:
aa:d7:f4:5d:e6:5c:15:d2:ca:61:2b:f3:85:93:01:
c6:1d:9e:70:5c:94:ae:f3:ac:32:0c:96:9f:e7:4b:
ac:20:67:22:f3:bd:5a:d1:62:12:39:26:33:92:e6:
9c:1f:48:77:b3:65:39:f6:36:84:e0:8a:6e:08:fe:
a8:56:55:1c:8b:cb:ba:bc:6c:07:ef:fc:f6:b0:93:
f4:70:10:5d:a8:11:bf:86:18:55:2a:82:24:9c:fd:
45:5d:13:21:ef:1a:ab:dc:62:12:de:34:f7:68:74:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:98:4A:6F:6B:79:C4:0F:23:48:4B:7F:A3:5A:07:B7:EC:56:A1
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:dc:f1:99:3a:3e:3a:97:89:94:0e:8c:e7:04:45:89:ee:
e5:05:00:5d:97:59:17:8d:b6:56:90:a7:16:f4:cb:5b:13:8f:
3b:99:38:76:e5:2a:a4:d7:d0:54:c2:50:31:cf:b9:24:ca:d6:
0b:e3:a6:74:05:12:0d:3b:1e:bb:64:f2:6c:07:18:8e:b0:76:
9e:49:12:08:35:f2:6e:0b:f7:b5:7b:1c:f5:c2:51:ab:81:d4:
52:69:da:0d:99:f5:70:ce:9a:af:f0:a3:1d:67:e7:5e:8b:7e:
dc:09:39:d6:35:7e:c2:15:bf:5e:79:70:5f:75:79:60:31:85:
3c:2f:0a:e9:6c:a6:e0:61:34:a4:3a:00:5b:d8:6b:a3:16:07:
54:5d:ea:36:91:ec:0b:d3:a3:7f:20:12:94:28:24:73:0e:d7:
48:20:04:b1:43:d4:2a:ab:e7:b0:a8:a5:ae:3c:10:9b:a5:79:
60:c1:8e:39:95:1d:53:c8:e4:c6:5d:e1:0d:6f:5c:21:a8:e6:
44:84:4d:d2:28:27:7f:30:4b:fc:18:e3:d7:90:cc:a1:9b:53:
b7:df:c2:9f:68:e7:83:4b:d1:35:dd:f8:0d:21:ea:e5:1f:ed:
39:db:81:47:3c:49:0a:95:40:30:ed:9a:11:04:0a:35:d1:76:
f1:fd:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:00 2025 by rpki-client