Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: em/yMQ2X9AnHX2zdKWyg0shBQl//XZTeX1IVBL+M1IM=
Subject key identifier: 65:B1:31:71:90:66:CC:A5:A7:CD:EF:9C:ED:FE:7F:75:A0:52:FF:AF
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 019A73385FC761994164A503D6049647ADA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0EB2
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: fryEmMpTGtGyhqd+AvnGC38NTbqURZOyJpfvw2NxB8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5f:c7:61:99:41:64:a5:03:d6:04:96:47:ad:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=65b131719066cca5a7cdef9cedfe7f75a052ffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:42:67:dc:90:0d:c2:c7:dc:ef:ff:73:e4:
e2:00:d6:01:38:42:cf:59:45:0f:80:21:43:53:75:
9c:7c:58:fe:a5:8e:ed:fd:30:9e:40:2e:54:55:a5:
93:54:77:aa:48:fe:a7:d2:0a:32:e4:fb:27:fe:bd:
f1:f0:1f:97:7a:ad:9b:51:e9:83:8f:17:5f:48:4b:
9e:2f:19:5d:fd:04:bf:f6:5d:69:b9:7e:cb:26:d6:
81:4a:b8:dc:a5:73:33:6f:8f:2d:f1:1f:28:69:d7:
e6:3b:c2:d1:7d:19:38:7a:47:ea:b7:ba:b1:76:ef:
5f:ce:8c:f4:22:f1:f0:17:f0:43:e2:1d:3b:4f:80:
07:44:4d:b9:7a:f3:6a:4d:39:00:3f:ce:d8:fb:e2:
a4:05:03:75:c5:85:5b:61:2a:d3:fd:23:fa:37:d1:
9e:8a:1e:22:d9:73:3d:f9:6b:eb:69:ad:76:9f:0d:
08:ec:70:c8:0d:d8:08:9f:32:da:b2:24:b3:67:31:
a6:72:e9:19:dd:67:eb:d2:04:fb:31:e9:b6:68:7a:
b2:fe:a0:35:a7:3d:b3:df:d2:01:bb:0b:a4:31:f2:
e1:76:29:30:a4:e7:f2:2e:2f:ba:8a:40:50:af:73:
ed:7e:b1:af:d5:0e:db:82:0b:d7:ab:c0:ef:ef:8c:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B1:31:71:90:66:CC:A5:A7:CD:EF:9C:ED:FE:7F:75:A0:52:FF:AF
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:b9:af:6b:d2:01:11:79:f1:f0:35:be:01:04:6e:8d:de:
b1:0e:1c:6f:d7:4f:5c:bf:2f:95:04:b3:f8:14:d4:39:bc:27:
36:0d:ad:8d:04:02:a4:4f:3a:55:e1:cc:f0:eb:78:50:8e:1c:
1e:08:36:a5:78:6e:9a:d6:c0:06:ff:95:3c:eb:46:1c:b8:7b:
02:d6:64:b3:93:2c:00:bb:8b:24:87:37:fd:cc:d4:a6:3f:97:
4f:5e:d1:2e:cb:c8:98:88:58:fd:a4:ea:10:f0:54:1e:46:14:
50:76:ac:b1:de:3e:8a:53:89:06:e0:e3:17:a0:91:a7:e2:96:
47:06:af:c2:b4:5b:b9:b8:60:db:b0:b1:03:d1:20:95:a9:fd:
e1:83:c2:5b:97:b1:cf:9c:2d:d6:bd:7b:7b:df:d2:78:cb:94:
61:02:b3:53:f9:87:c5:ad:8d:00:ed:eb:9c:c6:5c:21:b4:d9:
06:00:0b:0c:c1:87:84:75:63:b3:35:f9:bf:45:16:c5:8b:49:
16:ef:87:2b:c8:a3:4b:42:3c:37:95:9f:7d:fd:af:70:2c:3c:
c8:30:a4:93:f2:4e:8c:04:85:06:dd:2d:a1:95:c1:e4:30:9f:
c6:5d:3c:34:1f:1b:90:ad:25:c4:5d:5b:4c:ab:a4:3c:ac:33:
14:d2:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:28 2025 by rpki-client