Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: 5wVudos7NHK4lJw0Cav6rBrXyaqZ4RH7/TOHJEz29KM=
Subject key identifier: 07:2E:9F:E2:08:42:41:0C:DD:78:37:E1:61:08:68:6C:7F:37:68:33
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 019A4F62D747EB7DB3B31A4161969BD35FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0DF0
Signing time: Tue 04 Nov 2025 15:01:08 +0000
Manifest this update: Tue 04 Nov 2025 15:01:08 +0000
Manifest next update: Wed 05 Nov 2025 15:01:08 +0000
Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: tECxRWqmHvE5PrwhbzPPCQF5W/ev2mTzXRwMG985eR0=)
2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d7:47:eb:7d:b3:b3:1a:41:61:96:9b:d3:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Nov 4 15:01:08 2025 GMT
Not After : Nov 5 15:01:08 2025 GMT
Subject: CN=072e9fe20842410cdd7837e16108686c7f376833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:ca:80:63:83:9e:1e:6f:7e:62:88:44:ba:
6a:f5:55:f3:85:a2:2f:0d:50:9f:50:c4:30:00:b1:
40:af:cb:89:99:e4:fb:da:0e:9a:a9:07:7e:63:be:
12:2a:76:e8:4f:5c:9a:b6:cf:ad:18:67:82:66:04:
f9:9c:e6:26:28:da:09:98:ed:84:10:a8:11:29:e3:
96:4a:46:60:0b:21:a3:e9:9f:18:69:72:25:67:6d:
d8:f9:17:d3:b4:a8:ea:55:6d:4c:73:8b:92:ec:0e:
8f:c4:e1:e7:73:5e:c5:7d:8e:c1:ee:2f:77:dd:45:
fa:a8:82:d6:81:19:0d:b9:c5:3c:52:dc:12:52:ef:
2f:f2:6e:f7:27:54:85:d2:e8:f3:39:c3:0d:b2:8e:
2e:16:13:f1:12:74:0a:44:10:12:79:8a:a4:1a:36:
83:b7:21:f4:7b:03:cc:9f:9f:62:77:00:5c:69:53:
43:1d:9c:95:4b:cd:9b:90:c0:a6:20:08:2b:87:cc:
49:79:4b:d7:2b:bf:a9:1d:11:9f:dc:f3:24:c6:4f:
ee:1f:22:47:52:38:43:d4:7f:db:c2:37:2f:e3:79:
74:7a:a8:c7:31:fd:fb:58:f8:58:d1:14:b7:ab:0b:
b0:d8:8a:cc:42:55:62:d5:3c:74:cc:20:ed:5e:de:
e2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:9F:E2:08:42:41:0C:DD:78:37:E1:61:08:68:6C:7F:37:68:33
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8b:d4:43:45:5a:1e:35:6e:80:a2:11:dc:4d:a9:8b:14:4f:
5f:69:7f:89:d9:2c:00:5b:fc:2c:db:a1:63:2d:a1:e2:db:77:
eb:94:65:79:cf:d7:8c:9c:7c:6f:9b:10:61:88:96:e7:49:62:
90:0e:ac:d2:87:22:d1:0f:5c:7c:58:a1:ef:a4:67:90:5f:44:
25:27:52:98:b3:b6:47:09:d7:a6:58:0e:ac:9a:13:db:83:ca:
12:e1:a5:59:8d:ab:e7:04:4b:d2:15:a4:ab:44:9c:54:e9:0b:
69:2c:69:81:54:0a:42:0b:b0:b2:c7:75:f4:31:95:c6:90:d6:
69:8f:da:5b:e8:87:90:a5:ac:8d:c2:bf:48:cf:31:c2:2d:84:
70:a6:cf:75:31:8b:bf:c0:0f:20:3e:35:98:7d:ca:ac:ce:c7:
df:24:11:55:37:cc:a9:26:69:a9:88:31:c8:83:a5:c1:aa:70:
8f:62:7a:1e:8d:3b:3a:2d:06:cb:1e:f2:53:9e:5a:87:26:de:
b9:d5:67:ef:1c:35:2e:7c:3d:a0:19:af:16:29:af:66:aa:ee:
99:87:b0:31:10:87:59:e2:96:11:ba:ef:d2:17:6e:27:6e:34:
f3:b0:65:1e:b5:ad:e6:66:39:89:c8:a7:2f:a7:68:5e:0d:0e:
80:ae:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:23 2025 by rpki-client