Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: 7ttwfJyL6VsKac/CTHkXFh+WdpBAVB8g8zXhTuS1Jvs=
Subject key identifier: F0:08:58:D8:63:8C:32:E8:7E:B1:57:C3:52:28:7B:99:D2:B0:91:4A
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019A526347BB861499F10FB1B62B9A8EA5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 025C
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: 3liyadxkeB4PeF6Cj_CpA_Z7U3U.roa (hash: BkpSf3XaltWEFzfRC33a/AQ/WD3A00IBXqDokzMsdrM=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: okwGpl919lS/wMNUuiYXe/exDB0FB2hu9v+np10QulM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:47:bb:86:14:99:f1:0f:b1:b6:2b:9a:8e:a5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=f00858d8638c32e87eb157c352287b99d2b0914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:23:9e:de:07:95:3e:0f:9b:e6:34:58:6d:
a0:07:92:e8:07:6e:b2:55:0b:34:fe:ab:02:2f:a5:
fe:4b:2f:39:f5:ba:73:0c:86:b7:b7:6d:38:6a:40:
6d:02:e5:2c:69:05:28:1d:95:36:07:3f:3a:c8:fe:
23:a6:4e:f0:d1:ef:aa:08:f4:de:63:79:9b:a4:c5:
62:62:db:aa:f6:d5:aa:fc:e8:a1:ca:4c:82:a0:cb:
6c:2c:b7:66:63:2d:33:fc:81:d1:ea:76:f0:88:65:
f2:74:c5:67:37:0d:6a:bc:54:1e:c5:7e:1b:71:72:
93:d2:dc:18:16:b6:34:4d:d7:da:c5:c5:f9:94:99:
2b:6d:ee:54:6e:50:01:d5:53:5f:ae:e8:fe:cb:b8:
f9:87:df:8f:65:54:cb:ff:02:f9:14:29:10:a8:d3:
53:ee:cc:5e:dc:59:33:43:35:33:4d:bf:ed:4a:46:
57:e7:18:16:3a:79:5e:5d:eb:a2:42:14:a6:77:ed:
4f:fa:39:40:10:df:c7:7a:e5:90:99:ca:be:2b:45:
90:da:ff:eb:91:8d:10:f2:1e:63:ae:b4:8e:fc:ab:
65:de:74:56:39:94:07:11:fc:98:b9:7b:ac:12:fd:
05:b0:53:09:cc:34:08:6d:fa:03:a6:c8:3c:a9:dc:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:58:D8:63:8C:32:E8:7E:B1:57:C3:52:28:7B:99:D2:B0:91:4A
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:11:77:32:19:58:3e:9a:1a:39:fe:2b:1c:17:3a:52:58:
7c:c1:5e:fd:6e:a9:42:93:9c:0b:83:b5:1f:c7:5d:4e:5c:9a:
f0:12:80:91:c7:a6:0a:6a:48:e4:98:95:28:1c:cf:88:30:1a:
0a:e6:9a:d2:02:dd:1d:85:5f:73:44:cb:15:0c:4f:1f:6d:da:
81:96:f3:0d:db:65:12:84:4a:64:b6:b1:1c:c5:a5:fa:32:16:
38:50:e1:bf:74:4f:0c:32:92:6f:71:a8:62:b1:b9:c3:e0:57:
d9:cf:d4:d4:e8:12:21:f4:bd:d5:bb:01:d9:5a:ac:5d:5a:60:
6d:2b:6a:f0:c6:f2:4d:59:42:0a:31:14:a1:4f:69:66:c6:ad:
8d:d9:e2:29:e8:33:ad:c3:6a:d2:24:cf:a6:40:59:43:77:54:
d5:ed:12:2f:6f:e4:80:7a:28:b5:05:bf:8d:05:a8:83:41:c2:
da:49:9a:34:b8:f9:59:bb:95:97:bf:eb:1d:c0:0a:73:bf:d1:
d8:76:2f:05:9a:7b:e4:16:3b:cf:9c:2a:aa:7b:25:4d:5d:13:
d6:37:3a:04:09:0c:af:d6:60:b4:a1:86:e6:27:d5:59:9c:74:
e1:83:3d:1a:ea:bd:61:24:6c:2e:c6:ac:66:e6:56:d0:6e:84:
c1:81:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:22 2025 by rpki-client