
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier: xdsCXN+SnQ+QdtI7lyNc4NLsmS4dMsX0XoeKsJR0d18=
Subject key identifier: 52:3F:02:A1:08:1F:9B:B5:0F:EF:CB:D6:3E:90:33:73:FE:9A:80:35
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019A221B810B50F07E358CC6549D7A4321E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number: 1446
Signing time: Sun 26 Oct 2025 20:00:19 +0000
Manifest this update: Sun 26 Oct 2025 20:00:19 +0000
Manifest next update: Mon 27 Oct 2025 20:00:19 +0000
Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: ss6j+kzcc97/rqtifxNjMBqZKvDx6cyEtKwixeAcHrM=)
3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:81:0b:50:f0:7e:35:8c:c6:54:9d:7a:43:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Oct 26 20:00:19 2025 GMT
Not After : Oct 27 20:00:19 2025 GMT
Subject: CN=523f02a1081f9bb50fefcbd63e903373fe9a8035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:e3:0a:dd:87:3a:7f:6a:33:2e:de:64:ad:
6b:26:3f:97:11:12:da:91:4f:6a:7d:46:7a:4b:0a:
ee:2f:b1:5b:80:50:d9:16:ba:f1:b4:ac:7f:9a:53:
a8:b1:2f:82:d7:07:3e:9e:f1:48:d6:a1:84:81:80:
34:73:59:d9:30:8f:4b:d0:e9:ec:ae:98:b3:90:a4:
b0:57:57:1f:c7:a5:ec:76:b7:cb:58:18:31:d9:29:
f9:7d:3f:a6:a1:5c:a7:bd:82:96:17:b2:1e:0f:fe:
52:1c:21:5f:c7:f3:ea:b5:13:7b:49:78:84:84:68:
1e:d3:ff:97:aa:9b:60:4e:a7:14:9e:f1:52:0c:03:
07:3a:ff:e8:92:9e:50:78:2a:b6:d7:e1:dd:b4:b4:
1a:c7:c9:63:97:a7:59:d7:cd:b0:97:f4:58:df:ee:
dc:11:9c:8d:9d:b7:2f:83:74:89:f8:92:58:f5:ed:
0d:54:ab:88:fa:04:c8:7c:0f:d3:b6:af:16:58:18:
ca:1d:4d:50:de:ce:93:b2:33:a6:9f:13:86:1d:d7:
29:ef:49:ea:83:f5:ca:c8:6b:2e:81:8a:ea:af:0b:
0f:45:72:72:b5:12:ee:09:66:bd:fc:e9:e4:05:d5:
a7:95:01:6d:cb:b0:58:77:46:78:f1:98:b9:41:a8:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:02:A1:08:1F:9B:B5:0F:EF:CB:D6:3E:90:33:73:FE:9A:80:35
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:df:eb:94:23:26:b7:e0:c7:72:58:62:d6:be:c6:8e:ca:
a1:33:4d:ad:e9:38:db:7b:51:e4:d2:04:58:a8:35:d0:f8:33:
3d:d0:b6:f3:98:a8:65:0c:3d:04:cd:6b:68:f9:0a:2c:81:69:
b3:c1:33:72:b6:14:86:e1:bd:cb:c7:96:ac:1f:fa:49:56:cd:
48:99:44:1d:9a:87:10:bb:16:48:bb:11:5b:db:fd:46:31:33:
41:2a:08:86:9c:04:cd:65:0a:fc:19:c6:fd:b4:51:ea:40:b6:
16:ce:cb:83:f6:06:cd:b0:55:21:49:35:d9:70:c1:02:71:e1:
89:37:63:f4:43:4e:01:50:38:8e:61:92:f3:61:bf:c1:ab:2b:
db:8d:31:d3:7b:66:86:39:cf:57:cd:8a:67:dd:c9:1e:01:10:
17:72:8f:b5:1b:49:96:90:e8:ce:31:42:f3:0f:ab:9f:76:3d:
c5:5c:cf:91:e2:e1:d4:c3:70:99:4b:dc:9b:ec:58:c4:ee:5e:
2a:f8:74:db:c3:61:fa:ce:eb:11:dd:90:5f:e8:46:6a:e4:35:
56:9a:7f:5a:e6:d3:7d:89:c2:99:74:20:16:03:c7:bd:f7:19:
80:3d:dc:70:45:60:9b:d2:f6:89:3c:ff:2d:6a:c0:3d:3c:3a:
99:72:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:40 2025 by rpki-client