Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: 3IhOSfk9z9Tu8wxMAK7McR0LgwAwc1kfsXskZWXL8Aw=
Subject key identifier: 52:DD:F5:59:FE:9C:F3:F3:2F:0C:00:A3:7D:FD:0D:A4:BB:BA:3B:17
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019A4E18B6EF18AF3CA0E06DBE832FF5FD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0CA5
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: ZpyB8NtfsAYgkGRjxxPet0IUfmKswKZzEr/99amjZXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b6:ef:18:af:3c:a0:e0:6d:be:83:2f:f5:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=52ddf559fe9cf3f32f0c00a37dfd0da4bbba3b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:fe:4b:1f:cd:86:f3:70:ec:46:6d:14:ff:
d6:07:47:e1:41:b3:9a:80:99:d4:14:17:8a:21:b5:
96:e3:ea:7c:a9:3a:f1:78:4f:8c:ba:0a:bc:b1:b2:
30:e7:62:c0:74:24:6c:3c:8e:d9:60:e4:34:1d:21:
d4:3a:70:ca:48:09:7d:63:bc:19:92:19:36:40:f8:
b3:77:b3:33:21:bc:e2:fd:a3:bc:90:91:8c:90:cf:
40:7b:32:6b:8d:78:18:2e:96:5c:25:7a:6f:1b:da:
f0:3d:40:d4:a8:93:ef:06:14:47:72:2c:96:4b:12:
76:df:bb:69:16:f0:49:73:e2:92:f7:16:d9:9b:27:
80:51:6a:08:15:92:48:93:61:12:c4:a7:c7:ee:56:
a2:8d:b7:1f:cc:37:29:8a:52:ec:9c:e0:16:3a:80:
82:e2:3d:4b:23:f2:7c:30:ab:df:7b:02:43:30:10:
58:b6:50:09:62:bc:ca:ee:dd:fb:24:d7:0d:98:61:
04:4c:33:05:6a:ce:c7:dd:df:02:fc:f2:07:6b:c0:
e5:41:66:02:9a:8d:7a:df:d3:e9:e6:4d:da:06:61:
f1:95:8a:3a:e3:4a:93:18:5d:e1:e6:e9:0d:2f:67:
c8:e3:02:f2:25:19:59:29:af:eb:f1:a1:7d:46:ed:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:F5:59:FE:9C:F3:F3:2F:0C:00:A3:7D:FD:0D:A4:BB:BA:3B:17
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:3b:c8:27:93:f0:3c:58:d6:8b:b3:9f:56:9d:91:0c:a0:
89:89:cc:ab:cd:34:70:a0:c5:2e:13:c5:39:8c:1b:fc:84:03:
c7:c8:76:9e:69:17:50:0a:af:a4:78:49:a6:e2:03:ef:e1:78:
6c:4a:b0:99:d0:5f:b9:16:68:80:85:16:7c:7c:e7:9f:e6:78:
24:0e:b5:73:7d:23:96:c9:05:79:0d:0f:79:15:14:ca:a7:43:
fd:19:c0:4c:6e:c9:ec:52:d7:07:30:d7:c0:c2:83:5b:4c:bf:
a7:88:f0:02:e4:47:f0:d2:82:ca:6a:6f:2a:7b:fd:f6:cd:ab:
42:61:f5:14:9d:40:51:12:bc:c3:7b:9a:62:c0:d2:a3:27:b5:
a0:12:b9:d6:33:ec:08:6f:4d:d1:c2:bd:7e:58:8c:6f:2f:f5:
72:67:b1:13:e5:47:0b:d7:c8:02:86:76:f3:0a:84:5a:cd:eb:
e4:59:96:79:ea:ae:d3:ab:94:57:13:f3:5b:35:b1:37:12:5a:
53:82:7f:fc:0c:69:e8:c6:d4:13:96:19:64:13:32:c7:67:8d:
19:a2:71:7f:3d:9b:16:ae:0d:c7:ad:b8:48:d8:6d:09:12:76:
fa:8a:ee:95:e4:d5:db:e3:3c:1e:8d:e2:4d:ee:89:03:24:0e:
2e:8f:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:45 2025 by rpki-client