Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: 7Q6vz3SQJ8o52KrX7IzO88xw7HTvTP9PnVBHun/XqhE=
Subject key identifier: 4D:2A:C3:D8:69:35:5F:81:00:E7:E0:FB:5E:40:8A:B9:11:69:76:5A
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 019A71B7BC3B7A4E8A50651CC6E301CE8BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 07E4
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: xJEP7B4Muumgs0iXqQ9IdGPhBldVnfhKEakqxmmRGUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bc:3b:7a:4e:8a:50:65:1c:c6:e3:01:ce:8b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=4d2ac3d869355f8100e7e0fb5e408ab91169765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:cc:59:e8:d4:ae:ec:d4:e7:67:e5:6e:15:
c3:fc:80:9f:49:f8:8b:19:e0:16:41:71:99:43:29:
a1:79:57:3c:7a:99:cb:33:3e:47:16:17:13:43:b3:
a6:75:da:f3:7b:36:c7:b2:78:bb:ba:c4:a3:d2:38:
99:c5:ba:11:ac:1c:71:39:00:e4:6c:db:5a:c6:bc:
e0:21:c8:99:19:f2:6a:4c:8c:f8:8e:23:11:cc:c9:
b8:2c:cd:7f:de:12:88:bc:ff:4c:4f:ca:ec:f1:e1:
27:84:f6:8a:04:36:eb:90:df:e4:e6:e8:17:3c:74:
15:5c:f3:33:4e:da:d7:4e:2e:9d:02:43:36:1d:30:
b7:76:48:24:cb:e0:10:91:ec:69:e9:7a:b0:92:9c:
47:ef:cb:62:52:8f:cf:d2:5a:21:68:3e:a1:d5:11:
ba:61:7e:f8:c3:7f:9b:dd:99:8a:6b:22:5c:9d:aa:
ca:8a:29:63:25:01:a4:1c:71:1f:94:8c:3c:b6:fb:
94:03:08:f7:04:25:ee:8e:17:63:e5:ae:af:5c:a0:
1c:7d:28:5e:59:86:55:64:c5:60:82:9c:75:f8:27:
a8:f5:99:e6:83:bf:40:1c:06:86:86:0f:bd:97:ee:
56:3c:07:81:0d:31:44:f9:59:dd:50:45:eb:c1:0d:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:C3:D8:69:35:5F:81:00:E7:E0:FB:5E:40:8A:B9:11:69:76:5A
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ef:40:8f:9f:d7:26:17:ab:4d:e4:84:08:b0:78:3c:6b:b9:
1a:53:b5:11:84:b0:c6:7e:41:cd:21:72:3e:86:e4:5a:54:09:
e3:7b:98:89:7f:5b:3e:c1:f8:be:5e:31:b4:23:27:ee:24:40:
54:79:1b:60:30:ce:f0:50:a3:31:b1:9f:71:34:1c:bd:98:02:
81:cf:cb:bb:c1:21:92:0d:3d:c8:9c:e1:0c:93:12:42:6e:58:
9b:e5:a5:63:28:e5:e1:ad:c5:de:bc:2a:1e:0d:40:10:fa:a2:
f4:aa:cf:d1:e7:4b:55:85:17:15:83:0c:b9:93:71:a9:43:73:
60:d1:db:38:8f:16:45:c6:47:2d:27:f3:38:06:de:40:4e:b4:
86:96:cc:9d:66:d1:fd:ea:aa:28:33:ec:fb:1d:df:60:3b:27:
db:fc:03:61:3b:75:af:c4:0e:1d:05:2c:10:0c:44:e2:98:66:
78:cb:29:8b:e1:05:09:d8:cd:a8:0c:1b:8c:e6:63:14:09:71:
cb:76:d1:08:25:a3:36:cc:dd:00:cc:93:40:e5:fc:9f:60:a2:
f2:e2:b4:d2:5b:e0:12:e6:56:06:69:32:1a:bd:24:66:b8:ad:
0e:e4:f7:d1:81:1e:60:06:ff:38:08:c3:40:4a:19:74:4f:67:
5a:47:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client