Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier: +R846EWDfxU9jPfLpMMraplxVFkRCgS56CO1Zunl37M=
Subject key identifier: D4:34:55:77:33:90:4A:29:C6:50:B9:47:B9:22:10:7C:6C:66:BE:28
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 019A725C711DB69705081DE5A2B969576211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number: 0991
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: u0g1D4auhyzjVx9SowITvBmdKxoxhWv6gvzY9AWkBSY=)
2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:71:1d:b6:97:05:08:1d:e5:a2:b9:69:57:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=d434557733904a29c650b947b922107c6c66be28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:d2:59:68:1a:0b:4e:a7:05:79:d7:4c:a9:
c9:af:77:55:8e:e3:84:b2:6c:1d:69:46:c5:15:a3:
1a:6e:a0:69:5e:e0:80:31:fd:b7:62:52:15:c7:92:
89:e3:b6:54:8c:8f:6d:83:d1:62:d4:f8:1e:31:07:
12:a5:62:35:b4:6f:ed:a8:8e:3a:71:cb:cd:43:5b:
d8:ed:e3:5f:01:ed:3a:12:3d:d1:a6:a0:16:9f:4a:
c9:0b:a9:7c:72:8b:b5:54:d2:ae:f1:14:bb:56:c6:
45:87:e7:a0:04:ba:01:02:17:fe:c4:34:f7:eb:a9:
23:ec:30:26:3c:13:85:6f:13:24:c0:04:d4:eb:1b:
4c:44:5e:e1:58:d8:a4:9d:d5:82:a6:28:e6:55:d3:
9a:09:c9:c3:d7:3d:20:30:b1:31:e6:9d:dc:4d:0a:
83:46:b5:0a:c3:9a:cd:10:1e:18:90:0f:3a:d8:a8:
67:c4:83:5e:4d:dd:1e:16:5f:2e:8a:45:f5:59:0e:
f2:d7:3e:29:3f:bc:7b:65:8f:b8:51:69:f3:0b:5b:
65:42:3b:f3:f3:ae:a4:ca:a4:00:49:08:fb:c3:b9:
5c:56:5a:f4:58:b5:e3:9c:b8:b4:b9:3c:d2:69:fe:
f1:bb:17:e3:94:6c:33:0f:41:49:df:4f:b6:91:0e:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:55:77:33:90:4A:29:C6:50:B9:47:B9:22:10:7C:6C:66:BE:28
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:a9:b8:03:b2:7c:00:c3:f4:93:64:95:e0:7b:8f:1a:34:
55:7f:5d:39:c1:ac:16:57:02:26:f0:79:77:c9:b0:cb:ed:2c:
27:fb:9c:c2:87:2b:12:95:7a:e6:a6:04:03:4a:7e:19:53:c6:
a7:4c:dc:67:bd:df:dc:b4:e5:ad:e9:ed:6b:61:db:90:33:3d:
85:b9:86:cb:f8:55:66:e9:24:24:ae:0f:cc:e3:06:b3:d4:69:
70:29:fa:31:97:83:7e:c0:f0:0c:91:06:3c:98:d1:db:b2:2d:
94:01:31:67:6c:53:bf:46:a4:1e:10:ac:0e:60:26:ec:a1:a6:
7b:11:90:8f:b3:f6:1f:ac:5d:96:fc:33:03:39:cd:76:97:dc:
fa:ba:ca:1c:57:1c:c7:6b:86:c8:22:27:77:a7:23:18:8a:53:
9d:fa:e3:f4:99:69:1a:97:2b:6e:60:98:9b:ca:73:ff:45:49:
fc:13:63:85:1e:d0:a3:ef:4f:15:29:33:f7:5c:69:ae:b1:ed:
23:b2:b9:41:b3:46:f3:76:b4:fe:c7:7c:66:c4:a0:b3:e9:8a:
82:af:ee:16:7d:3b:cb:74:5b:3c:ca:0f:9f:52:31:1c:76:1c:
89:77:3b:19:c0:ea:7b:18:6d:ac:f9:10:48:3c:25:52:4d:0b:
2c:fa:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:01 2025 by rpki-client