Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
File: hoRh4GD99IzUHTOtknHIB9Qk60I.mft (raw, json)
Hash identifier: zWoX8EYaZfjgYpyM0ebKUoQ6lQXA5yCgOGjWPI3WvOs=
Subject key identifier: 4A:8D:A8:2C:80:03:E9:A5:93:1B:E7:64:EA:24:F6:0E:62:B8:57:19
Authority key identifier: 86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
Certificate issuer: /CN=868461e060fdf48cd41d33ad9271c807d424eb42
Certificate serial: 019A72260011C7CFA7502564897353C0CB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
Manifest number: 0244
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: H_XoU52eTHbpZkmpLvAUJ7VlUWc.roa (hash: i8bOFbhv/rSJKPzgYxH26TzbQ5J62pViGnxTa332Y9Q=)
2: hoRh4GD99IzUHTOtknHIB9Qk60I.crl (hash: JruifZjONwcPKwxTFFABnPQPSvFm5+bKt/pdcMo82y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:00:11:c7:cf:a7:50:25:64:89:73:53:c0:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868461e060fdf48cd41d33ad9271c807d424eb42
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=4a8da82c8003e9a5931be764ea24f60e62b85719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:c7:36:30:bb:47:1b:ee:7a:50:6d:dc:1c:
94:98:2e:7e:6b:69:18:c8:97:97:dd:e8:6f:21:93:
54:98:27:a4:03:b7:f9:32:bf:1f:66:31:30:33:0f:
f2:34:0e:dd:86:aa:8f:eb:86:c5:db:53:e2:fa:c7:
2e:e9:21:d2:e7:1b:e9:b9:3e:de:62:68:47:c5:00:
53:dc:1a:a3:e8:ee:6b:dc:0d:e7:de:17:4e:84:fe:
a7:0d:63:41:be:c2:d6:7e:d0:b2:7e:f2:9c:b7:98:
13:d4:7c:98:dd:00:cc:2c:b9:77:e0:2b:e0:fe:47:
f5:d3:1b:2a:29:95:2e:2e:7d:95:6d:18:4d:50:00:
6c:aa:9d:fd:08:1b:aa:8d:40:a7:73:95:02:fe:83:
ab:63:16:1c:03:7f:d7:9c:e4:c5:1e:a2:0f:ef:af:
7a:c2:ab:eb:94:b5:98:26:40:8d:b0:68:2f:a3:7e:
99:8d:e6:3c:d0:b0:f2:0f:b3:49:04:95:75:98:c3:
83:a5:60:51:d3:c0:c1:bf:58:4e:9f:46:7a:fb:f9:
80:a4:22:ce:e4:8f:84:40:6c:3f:c8:0d:d9:e6:61:
c3:73:e3:df:e2:97:df:80:97:76:e2:a5:e6:e9:44:
15:26:12:3e:62:7e:f6:26:50:c8:73:cb:d0:99:ae:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:A8:2C:80:03:E9:A5:93:1B:E7:64:EA:24:F6:0E:62:B8:57:19
X509v3 Authority Key Identifier:
keyid:86:84:61:E0:60:FD:F4:8C:D4:1D:33:AD:92:71:C8:07:D4:24:EB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoRh4GD99IzUHTOtknHIB9Qk60I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4af4be-70f1-4194-911f-59ab96bc35c6/1/hoRh4GD99IzUHTOtknHIB9Qk60I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:97:87:59:23:ef:12:39:0a:d3:47:5b:73:bf:03:dd:db:
0a:d6:12:07:9f:d8:1f:33:98:07:bf:14:36:b3:5d:f7:76:38:
44:8a:b2:d0:98:01:c2:45:e2:76:2f:7a:7a:a2:91:58:d3:b7:
ad:f3:d2:5e:6a:5b:29:0b:23:4c:2f:34:f1:f1:68:f5:9d:bd:
65:3b:99:a3:d5:91:2a:0e:f7:13:14:98:fa:01:40:3b:52:2b:
9e:78:91:16:26:c9:f2:62:35:b4:04:26:cc:72:f9:13:f6:cc:
18:98:f8:59:d2:3f:b8:2b:f2:50:5b:c9:76:60:35:5d:72:86:
51:37:dd:ca:d6:0f:27:4c:24:fc:27:9b:31:cb:39:3a:45:c2:
59:7e:c0:1b:9c:57:c9:8b:71:f0:68:98:01:3d:72:85:76:81:
59:d3:b2:48:fc:fa:8d:d0:7d:b2:65:f4:5f:42:dd:51:c2:30:
7e:2c:86:c4:af:e3:12:23:aa:17:59:50:16:5a:60:b0:50:76:
df:07:5c:d9:cf:41:2c:ef:26:f4:b5:7b:c9:9f:de:bf:37:1a:
65:e8:d4:7f:ba:4b:08:7f:fd:44:f0:fd:93:63:9e:d5:50:98:
ce:97:7b:93:5a:b6:cb:83:fd:d4:6e:bf:ee:91:70:47:41:c6:
3c:d1:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:51 2025 by rpki-client