Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: KlqpZoYj51YlF7rDxUJssN65SeV0tgM12sk2aVR2yPQ=
Subject key identifier: E3:BA:7D:F2:D1:26:49:0B:D4:F5:D8:08:45:66:BC:90:89:38:11:06
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019A4F62C0601443DBEEEFEAEBCA84167E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 08C8
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 5A31qp8ofGoE6U4J5xylir20QHozcqTsdUHrjHPJMvE=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c0:60:14:43:db:ee:ef:ea:eb:ca:84:16:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=e3ba7df2d126490bd4f5d8084566bc9089381106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:c9:9d:f5:11:55:6d:6a:2a:ec:73:1a:38:
53:1a:53:2e:06:3a:8b:f9:a4:a3:c0:e9:ec:85:44:
72:c9:54:76:fc:a1:f7:a3:cf:41:38:25:21:7b:b6:
6d:9b:9b:5f:65:4c:35:35:49:e1:0d:f1:72:9d:5c:
c6:71:7d:bb:f2:63:47:62:57:a2:6b:52:34:77:3c:
fb:42:b7:1a:c0:48:b5:b3:fa:2f:68:85:c3:98:fc:
6e:41:bd:ef:d7:32:7d:ec:5f:ed:a5:cf:5b:4b:bd:
87:f4:81:44:44:a1:17:58:88:0e:c2:f2:f0:5b:f7:
85:e0:fe:8a:56:78:3c:02:09:8d:b8:32:6c:bd:75:
de:72:57:2b:2a:64:51:04:6e:b7:4e:7f:ac:97:f7:
5a:1d:e3:d8:35:aa:22:40:19:0b:99:33:51:14:d4:
d3:13:a4:83:ef:93:4a:37:4a:7d:19:4e:b0:32:c9:
07:45:bd:95:4c:9c:42:9f:c3:09:7d:15:85:ca:b6:
28:98:d6:78:fe:4f:3c:5a:be:0f:b3:df:df:03:b1:
7b:b6:f8:ce:e6:30:53:b6:21:6b:54:bd:d6:10:c1:
ea:52:7b:ca:5c:8f:ac:74:52:e0:c6:e1:39:b4:75:
92:65:22:8e:f6:4d:a2:82:82:8f:cc:21:9d:93:7d:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BA:7D:F2:D1:26:49:0B:D4:F5:D8:08:45:66:BC:90:89:38:11:06
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2b:c7:3e:fb:c6:62:e7:41:04:28:59:6f:02:8b:14:f7:2b:
65:a8:9d:4b:0d:e8:8e:77:23:61:0a:e4:ac:18:6a:5e:f5:a8:
93:8d:e1:1d:ce:57:22:5c:0a:10:b8:7d:c5:e6:2f:df:a3:3a:
b3:c4:83:3c:8a:4a:e9:d0:d1:cc:52:59:cb:c2:fe:95:9d:b9:
04:9e:ec:ed:42:f3:5b:87:07:e1:8f:31:5d:f0:b6:f3:01:b2:
6f:04:02:e5:66:c9:80:e3:89:af:c9:7e:f8:23:07:89:2a:bd:
45:69:25:a2:18:62:b2:69:16:51:99:43:06:ce:c1:19:d7:f1:
d1:d9:02:ec:84:59:22:e2:3f:8f:a3:61:3e:79:b1:ac:6e:64:
dc:21:4e:e8:68:e1:be:98:60:50:7c:61:3a:9a:eb:77:94:98:
ee:9f:68:d0:40:62:a3:92:fe:43:9a:93:f7:23:d9:ec:90:e9:
ee:9c:64:f4:66:33:eb:fc:6e:e4:a7:f2:27:92:cb:31:d4:4c:
b5:6c:fd:83:3e:fe:c9:3d:31:94:ac:33:02:12:74:4b:14:c3:
09:49:74:fd:04:b4:2a:b3:b3:29:14:5c:e2:3d:96:f4:ac:95:
64:be:21:44:9e:ce:a9:05:8e:12:60:cc:3a:56:8a:fe:42:79:
36:94:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:50 2025 by rpki-client