Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: jcFocAWkTJkgeBOFBXABA8kiM/EGEj3Rq+yBMnfHCp4=
Subject key identifier: 02:7B:E9:6D:40:2D:93:CD:10:82:97:D3:16:67:2A:B9:97:37:5A:DF
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019A70DC2A8276EFC69A4ECF46794FEE10FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0CB7
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: ogFe1SG3Gpu1iHonBYJoSSrsBCDulim4sy4W3FLqS+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2a:82:76:ef:c6:9a:4e:cf:46:79:4f:ee:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=027be96d402d93cd108297d316672ab997375adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:01:7a:4a:1f:18:6a:3d:46:95:dc:37:d3:
62:9b:f5:b2:69:db:ba:7d:71:b1:1a:0e:03:ed:c0:
8f:40:2b:f7:4b:5e:13:74:e7:08:10:7d:3a:e7:ec:
f4:fa:de:bc:90:ea:20:af:0c:dd:b8:27:8a:b6:7f:
51:4f:c9:31:af:8e:af:bf:e3:6e:84:64:6e:93:59:
d7:05:b2:b0:82:17:d6:41:5a:13:19:32:0d:cc:99:
6b:3c:ef:9c:8e:04:dc:ac:ad:3a:0e:70:64:be:ee:
d5:24:d4:52:84:ad:a9:04:eb:b9:74:22:34:99:8a:
6f:e9:c4:7f:2a:6c:1e:b4:85:d9:3e:c3:08:49:0b:
b4:e2:25:75:2f:36:26:43:9c:ae:db:14:0b:14:f7:
dc:0a:27:bb:ea:b7:87:4e:f3:11:f6:09:74:57:e0:
18:42:a1:eb:7c:15:e3:c1:9c:f1:12:05:52:37:20:
6c:23:ea:92:ba:30:99:dc:32:ec:9a:21:81:43:84:
56:5b:09:0d:27:f3:50:95:8a:a1:e7:23:50:25:09:
e6:42:66:b1:eb:8e:8a:0f:c0:90:8f:fa:39:26:8a:
cb:c1:03:bf:60:44:88:e8:83:49:59:1e:f4:fa:09:
6f:aa:b9:e4:86:53:92:e7:d0:67:f9:37:a5:15:75:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7B:E9:6D:40:2D:93:CD:10:82:97:D3:16:67:2A:B9:97:37:5A:DF
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:31:83:95:ff:21:b9:b8:4f:73:62:d6:5a:a5:28:5e:66:
b9:55:8b:13:09:45:86:ee:85:72:f6:04:33:7f:c1:1a:d1:92:
73:0a:9a:5e:cc:79:6d:92:76:2c:35:05:4b:93:ca:b3:dc:7b:
06:db:08:a8:59:9c:17:59:1f:45:13:84:c1:9b:58:a4:42:f1:
28:c9:3c:08:15:f3:25:a4:8e:6f:64:f8:28:51:60:fa:24:b1:
b0:ad:04:74:ee:a4:dd:23:8b:50:bc:f1:ca:3b:73:25:71:00:
39:ad:d6:d1:3c:5d:54:14:7e:00:8d:91:38:38:03:8e:0c:80:
71:e0:5d:55:b1:94:e2:2b:d2:61:29:a2:df:6e:89:2f:9c:a4:
75:b0:0d:9e:25:9c:af:58:c6:dc:ef:9a:76:d9:c8:24:f2:3a:
1d:ba:01:12:24:41:af:7b:52:8e:70:ca:4d:13:85:53:cd:86:
b0:06:6a:7a:49:3c:9d:d7:1f:57:b7:ef:d1:fd:56:1a:de:ba:
0a:ed:16:c8:19:6f:d9:de:48:86:58:32:f3:5e:d8:81:4f:a3:
81:12:da:41:fc:a7:4e:2f:b7:da:05:66:c4:67:52:e1:61:71:
89:46:20:e9:08:2c:cf:3f:44:90:e4:70:5f:c6:2a:28:67:e6:
16:fa:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:28 2025 by rpki-client