Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: xFRbbB4VcmGaXrl3EhUzq5++MHJ9KMqcEbytVta9kPM=
Subject key identifier: D9:B1:FE:DA:5A:04:64:59:44:6F:45:49:41:37:55:A3:FE:44:48:ED
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 019A71EEAA342CBF2AFC13C8ADC44217E3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0DFB
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: kJTl6dE3a708ayyc6XpG3q0yvLnQfCOKC0QnHNbERP4=)
2: bQ335Qu1IpD2FIjMI78ziScUVGI.roa (hash: ZV4IqpYmx61tlbVAfX/UDuIrlcXCWTu1WQJfIwsAz60=)
3: feXIFkXjQ-D3K9RdNEN9AXi3txU.roa (hash: pbHb2pCafG3K6Mcopun8T/bJ0i5xcQ41Kx0DXDfoxEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:aa:34:2c:bf:2a:fc:13:c8:ad:c4:42:17:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=d9b1feda5a046459446f4549413755a3fe4448ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:3a:72:0b:87:df:56:6e:3d:ea:ac:89:23:
cc:92:88:96:e7:5d:08:96:94:3e:48:ae:45:65:11:
92:f7:00:e4:fc:bb:6c:8f:72:9b:b6:8b:3f:1f:cf:
5e:6e:fa:ae:20:7c:1f:d6:4f:86:b1:00:70:02:e5:
20:ac:1e:88:f9:42:b6:c3:b1:0d:a8:61:eb:21:6c:
29:9f:9e:9b:9d:df:3d:80:1d:0a:fe:5f:75:1d:e7:
8a:24:08:c6:b9:0f:5c:4d:58:87:e2:e5:5c:a1:16:
8b:bd:67:c5:a5:30:9c:24:8d:d9:1a:b2:4d:a8:1a:
67:f0:d2:a1:f0:3f:e9:ad:b3:d2:2e:0c:9b:3a:19:
5c:1f:5b:58:fe:d7:c8:ab:f6:a3:4c:e9:b5:de:10:
69:b2:90:d2:89:6f:cc:2f:eb:d9:cc:3c:06:45:45:
02:e0:88:dd:2d:dd:99:db:05:62:e0:0c:e0:ae:3e:
eb:5d:47:13:fa:20:fd:b1:7f:d6:d7:74:2d:d8:1c:
37:7c:42:ac:40:7d:74:97:a5:75:66:70:1b:ef:a0:
84:66:0d:48:37:0e:a8:1b:3c:c1:28:41:8c:d8:a7:
08:4e:43:9e:8f:a2:3b:db:19:7d:68:44:77:9c:7f:
dd:01:23:e8:d9:8b:2b:57:fc:ce:9a:4d:e7:59:bc:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:FE:DA:5A:04:64:59:44:6F:45:49:41:37:55:A3:FE:44:48:ED
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:0d:92:2c:78:28:8b:64:cf:a3:84:fc:39:29:4f:2f:b1:
66:77:35:56:22:3a:2b:e0:a5:9e:ae:0c:3f:6f:cf:9c:f0:8e:
5b:32:9e:27:ab:ff:25:0c:20:74:ca:df:63:95:65:77:f9:e9:
70:44:52:0c:33:9a:24:11:60:d7:ed:be:18:a7:2e:70:aa:22:
02:46:14:2f:12:5e:ad:0b:9f:c5:5f:5c:47:e5:17:de:06:f0:
43:77:ea:f4:be:8a:7d:d4:0b:82:db:ee:c6:ca:8c:54:1f:5b:
1d:3f:56:7a:61:17:4b:3e:d7:36:c2:ec:e0:ca:90:ee:a9:87:
76:32:68:ee:78:6a:7b:6c:f8:e8:4d:75:d9:60:e4:cc:a8:46:
0d:59:68:9d:a7:e5:3a:e4:a4:02:02:38:d4:35:66:2a:4c:59:
cb:a0:ad:df:80:8c:ce:1a:13:7e:25:87:55:77:22:d0:ad:66:
ed:05:4f:29:2b:b4:f7:f9:16:30:a3:57:e1:3b:0c:a7:e0:a8:
7c:e0:11:bf:e1:ec:af:85:55:3f:bc:f9:33:7f:d3:0e:b6:aa:
fa:aa:6f:e5:20:49:00:48:4f:ae:ec:a0:bd:98:01:6e:5f:e5:
b2:e7:c6:fd:93:40:e7:d6:af:9a:19:e8:94:b1:3d:a2:24:23:
e1:16:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:33 2025 by rpki-client