Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: vpftD6r/HXkrDTwLavU48DEbpm2f0YHnHiV1idwr89w=
Subject key identifier: C5:22:39:C0:4C:91:15:92:BA:7F:25:5F:3D:AA:7A:19:BD:56:78:C7
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 019A71B8E1BF1E854BA812C270A59B8F6B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: SzwHt92coNXwSGWjZKkCRwMfJxidJmnEx8KsrnwWFIM=)
2: CoNCbdPpJL-6fbcnJD3B3DbY734.roa (hash: ouhTfA8/5+dNL+YmL8KPLbr0RKoGCNyfOXLbumLXJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e1:bf:1e:85:4b:a8:12:c2:70:a5:9b:8f:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=c52239c04c911592ba7f255f3daa7a19bd5678c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:97:7b:b5:35:94:d3:e5:cc:d6:d5:06:23:
94:1e:b7:b0:8a:c5:c1:77:12:19:a7:5f:b5:fb:d9:
83:28:c7:6f:cf:c7:02:90:1d:cc:e1:c5:8f:fa:a2:
0a:d7:a3:b5:bb:62:57:46:09:d9:10:3e:26:ae:31:
42:db:17:e8:75:c4:41:f2:58:53:3c:54:3d:81:12:
fd:65:cf:39:e2:3b:9e:9c:32:9b:53:89:bb:72:8e:
7e:17:40:3e:c6:cd:2a:40:05:b3:d6:d7:da:62:05:
7f:10:d3:a8:cd:12:98:e6:d3:91:54:74:68:f0:77:
0b:f7:5c:fb:64:f9:ef:ae:19:1f:18:1e:76:e7:ec:
2d:98:34:3d:48:7d:93:ce:89:83:f8:f2:aa:b2:67:
05:ed:36:da:9b:5b:07:ba:9a:09:2a:91:87:4f:89:
68:41:65:82:a4:1a:3b:42:b4:5f:73:45:86:ea:c3:
f1:77:eb:55:20:7c:e3:03:11:d2:96:91:9b:5c:86:
86:f9:10:4f:65:be:b0:ce:5f:b3:aa:6a:8c:9a:4d:
80:58:b1:f6:b4:42:cf:89:6c:4c:0c:e1:75:d3:0f:
d1:fd:2c:a2:1a:39:1c:c4:a4:89:9a:7d:1f:55:25:
65:c7:42:95:17:1a:fa:9c:27:50:22:8d:b1:dc:b0:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:39:C0:4C:91:15:92:BA:7F:25:5F:3D:AA:7A:19:BD:56:78:C7
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ff:1a:37:a0:1d:1d:54:7c:14:ac:e6:73:7b:d5:f5:16:6d:
37:70:63:c8:c0:ad:cd:69:89:84:3a:4a:d1:0e:5a:f7:df:af:
94:10:f4:cf:b9:f4:a2:4a:8a:f4:f8:b4:eb:8b:30:2d:f7:0d:
44:43:f8:10:3c:6c:ab:91:9b:38:e9:33:f2:16:d8:fd:8d:ba:
bb:6d:54:23:64:db:55:35:d9:41:4f:e7:e3:ee:54:27:a7:b7:
7c:d3:bb:0b:7b:f9:a0:f5:24:c5:a9:98:bd:63:5d:2a:ad:f6:
c4:e0:cc:18:6a:7a:1c:09:d1:32:3e:a9:f5:15:60:e4:b1:93:
b8:b3:35:d2:f7:4c:6d:f7:10:d5:01:93:9f:d4:75:ef:f5:1b:
7c:55:f0:e0:28:fc:12:35:02:63:1b:5f:a3:3d:e6:b6:35:92:
3d:a4:79:e6:9a:ef:32:f3:96:be:96:dd:6c:62:54:06:3e:d9:
37:39:4e:3f:76:34:19:a1:b5:73:f1:72:58:7b:18:04:f9:51:
9f:a4:ca:84:dd:db:33:30:bc:33:e0:78:f4:c6:0c:d0:69:1b:
3b:08:d6:d3:19:71:d0:ec:17:5b:ed:4d:bf:88:d8:9b:b9:40:
2c:23:68:3e:3c:dc:a4:80:e1:06:7d:20:ea:81:1d:65:62:8e:
26:df:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client