Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: RUNWBduiLdPFzoIGMC8IDnXwm7/5cm7rSyLXhoKWvaY=
Subject key identifier: 82:6B:0A:63:96:15:46:82:8C:7F:B4:30:6A:09:68:C5:14:9A:26:CB
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019A4D73C8317CEB6E5B11CBE1569A8142FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 03D1
Signing time: Tue 04 Nov 2025 06:00:24 +0000
Manifest this update: Tue 04 Nov 2025 06:00:24 +0000
Manifest next update: Wed 05 Nov 2025 06:00:24 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: 25EpeKRKlTu07E8QBpUofZbpkCT4HkRR1wb6ztXhMig=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c8:31:7c:eb:6e:5b:11:cb:e1:56:9a:81:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Nov 4 06:00:24 2025 GMT
Not After : Nov 5 06:00:24 2025 GMT
Subject: CN=826b0a63961546828c7fb4306a0968c5149a26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:45:78:a5:3c:9c:18:56:e7:9c:82:cb:0b:
6e:c4:82:35:06:ef:5b:22:e1:1d:2b:2f:a5:3a:17:
d8:47:41:9e:03:61:7e:2d:90:4e:54:0a:c9:94:93:
0d:ed:13:4f:87:60:12:c1:3a:92:32:76:84:58:b5:
c7:ff:2a:f9:56:1c:48:c4:aa:ce:2f:99:31:ca:c7:
7b:c3:81:f9:74:bb:bf:69:2b:c3:18:82:f1:1c:14:
30:e3:fb:60:8e:a1:36:8c:dc:ad:ca:e7:62:96:7f:
67:dd:c4:7d:61:23:f7:8b:f5:06:6e:9e:30:ed:1f:
a1:63:7f:14:40:ef:83:94:64:98:e2:7c:bf:90:28:
bc:51:ab:7b:17:2e:56:d3:63:4b:7b:a2:7c:16:92:
ea:ce:00:06:14:37:8d:f5:ce:23:ee:05:50:0e:c0:
f1:1b:a4:98:ff:c6:fb:36:cf:62:9a:dd:2d:e7:23:
3e:76:5a:ba:97:fa:41:7c:c5:99:fa:dd:c6:84:2b:
5c:6b:e5:1c:14:f1:46:61:7c:7f:fc:72:1b:82:b6:
9b:a1:a0:ed:45:fd:1a:39:23:13:a0:8d:12:18:ba:
53:c7:49:f7:4e:9f:98:b4:44:6a:6c:c3:af:88:85:
b9:9c:52:58:26:a8:46:95:39:6c:75:db:17:5b:25:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:0A:63:96:15:46:82:8C:7F:B4:30:6A:09:68:C5:14:9A:26:CB
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2c:56:14:64:06:5a:21:d3:39:94:ca:1e:43:79:00:a9:30:
32:e7:08:1d:b7:76:42:04:82:67:1a:4c:54:bc:8a:39:21:99:
31:a7:7a:b8:45:e2:d1:98:57:13:07:4a:f6:c7:d2:39:ec:a9:
59:77:b3:8c:22:4b:7f:87:2b:2a:f7:c9:93:b3:b1:05:4b:bb:
de:7d:13:a4:fa:79:19:7e:18:49:89:41:f8:e4:cf:58:30:3e:
d4:1d:5c:37:36:cb:dd:dd:2c:aa:a5:cd:da:36:50:95:ce:e3:
68:be:48:67:e4:bd:91:c2:6e:67:dd:e3:24:fe:83:bc:eb:a0:
5c:ec:3b:dd:0d:54:ac:7b:d4:05:80:cf:16:e6:49:01:8f:41:
2c:09:d3:58:42:3e:79:b0:fa:13:67:c2:53:47:5b:85:5e:10:
18:79:8f:4c:b1:53:42:bc:2e:38:5c:5c:f2:70:af:77:b9:56:
7c:a4:5d:68:a7:ba:50:8d:17:d4:f8:7d:2e:5e:12:06:3b:e2:
8a:a1:be:a3:f9:cb:d0:b0:9e:c3:55:06:29:eb:e3:a6:0f:5e:
c0:b9:52:56:d7:eb:a8:0d:c5:e2:8f:49:f4:d5:81:fd:a7:50:
cc:ca:f8:bd:08:e1:e1:7e:82:96:35:c6:f0:98:76:aa:c8:46:
e7:90:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:37 2025 by rpki-client