Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: m4XcTBSdnJBaWZ0eBj5qhV5s8Gt+B3g614bI/po3SCg=
Subject key identifier: A4:E2:A3:AD:3A:14:B9:E6:B2:DC:08:8C:43:91:0E:16:1F:68:2B:BE
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019A73012B75184BF02CC2AE98229F7B580E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0DD6
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: cqPVKZya8IpxTm5a3S94E7o0DzJGt+0zxR3kgNYPAPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2b:75:18:4b:f0:2c:c2:ae:98:22:9f:7b:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=a4e2a3ad3a14b9e6b2dc088c43910e161f682bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:ba:59:6e:1b:8f:c7:52:71:75:01:0e:88:
57:74:56:c6:27:d8:06:b6:e3:20:10:39:01:d4:c0:
01:87:17:d8:57:8f:7f:51:e4:13:5e:ca:70:16:05:
d7:70:e8:24:52:89:d2:e5:39:5d:c6:1b:4f:95:24:
99:7c:9c:2e:59:80:76:84:ab:86:6c:15:c5:93:a9:
74:fc:a2:69:28:5e:e8:a6:fe:53:e4:73:4a:16:aa:
aa:22:1c:10:c6:e0:fd:c2:1b:e7:ad:8f:7e:88:dc:
35:16:22:d9:a5:33:6e:7b:39:03:43:5d:fb:15:e4:
2a:7c:88:71:63:01:e3:2c:77:e7:e1:f0:70:e2:03:
3d:5b:f4:dc:e8:b6:a5:31:4f:1e:e0:9d:31:43:d9:
12:ff:2f:f5:f9:71:2f:4f:a7:d0:5f:4e:37:c8:b8:
8d:1e:c3:00:2d:5a:a8:f6:23:73:e3:11:96:9c:50:
ac:84:66:ee:68:b2:93:3e:33:32:7d:b0:85:fc:70:
ad:04:53:63:3e:df:54:54:0d:68:7e:f6:59:cc:a3:
9c:34:b8:6b:73:24:97:e5:54:f1:35:dc:f4:5d:88:
7a:5c:b8:e7:6c:87:7e:03:fd:ae:18:3c:35:78:b7:
71:9e:5a:5c:78:dd:2b:c7:c4:c5:00:3a:33:22:6e:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:A3:AD:3A:14:B9:E6:B2:DC:08:8C:43:91:0E:16:1F:68:2B:BE
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:07:8f:29:1c:93:66:b5:58:94:5d:4f:60:af:38:2c:1c:
e4:08:bd:fc:ae:5c:a8:2c:ff:9e:db:c8:fe:c6:a3:e7:5b:6f:
66:ed:f1:61:05:f6:1e:c6:ab:7a:5d:77:d4:7f:79:ce:13:8a:
de:bc:ff:d4:10:62:27:7d:30:7c:a7:0c:16:06:e4:33:5d:9b:
65:81:a5:cb:8d:d8:10:2a:60:d1:af:a2:1b:77:04:6a:ad:b9:
75:20:93:ba:68:41:fe:01:47:d6:c6:b8:77:5d:64:bc:61:ab:
43:4f:37:4e:59:50:f8:61:11:bb:e8:42:60:07:53:b0:e7:7b:
53:a9:7f:d5:5d:8e:01:94:b0:5c:21:d7:fe:4f:60:36:da:8d:
1b:35:dd:f9:eb:b2:eb:ac:53:58:2f:5c:e2:c9:1b:97:07:2f:
5a:3f:8e:85:dc:48:2c:01:8e:76:7c:2b:f4:97:76:03:39:01:
77:eb:cf:57:11:a8:90:34:c1:87:89:04:c4:65:51:af:ba:ab:
81:0c:57:7f:40:39:62:f4:9c:e7:e2:b6:21:df:e8:9a:19:e4:
11:b0:a0:b8:a9:3d:ea:93:08:58:dc:db:2c:db:4a:ec:a8:82:
55:a9:51:8d:24:79:69:f0:49:bb:1e:89:c8:99:c4:a1:da:22:
8f:07:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:57 2025 by rpki-client