Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: s1Bro7hODNLfTE7KUFkKzGY2bHdMIpsFsEWjwhpfCR0=
Subject key identifier: 5A:9B:4E:5C:5C:59:21:51:14:4D:7A:F3:70:2B:AB:43:EE:D5:6E:F6
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019A71B8458CDAE0411C0D065B8AE1E25720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0981
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: QRJ55P8D34fFoqZr/6x7qUHbKLjtgzBdpxgbIuViLk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:45:8c:da:e0:41:1c:0d:06:5b:8a:e1:e2:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=5a9b4e5c5c592151144d7af3702bab43eed56ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:cf:5b:61:c5:d1:89:26:78:1c:0c:55:cd:
1d:37:74:70:01:91:41:69:9f:33:7a:83:04:22:69:
fe:0b:3b:3d:c3:28:da:36:03:cb:91:6b:d6:84:6a:
31:be:55:ba:b7:0a:6d:60:9e:a4:e8:82:e4:40:a2:
fc:8b:b3:08:16:a1:72:7b:73:e3:cb:e9:37:c2:13:
fa:49:5c:78:a3:bc:e1:a1:48:e0:9f:15:29:a3:80:
6c:d5:5f:37:fc:a9:30:f7:d7:b5:74:59:11:89:61:
29:5a:05:50:81:ac:c9:6e:8d:b7:79:73:8f:37:18:
4b:12:f5:1f:88:0e:ed:b6:f2:9a:b1:a5:e6:69:6d:
a7:15:aa:dc:b8:d7:08:fd:b8:0e:0b:d6:6f:f2:e1:
84:df:ef:4e:dc:4a:09:ff:87:db:37:67:ee:4d:96:
d8:15:39:2e:be:a9:2f:55:a2:84:4f:e9:96:19:0e:
4b:dd:57:1f:bb:06:17:8e:a7:66:37:f2:3d:9e:0e:
e3:5b:54:a5:87:7b:a8:ac:12:ae:97:00:85:ed:7a:
9c:b2:52:f0:ff:e8:a8:86:2a:78:97:b2:dc:c9:45:
aa:ec:b9:03:8d:4d:a4:60:ac:77:33:ea:36:68:6c:
75:8c:91:6e:c3:c0:12:24:0c:f5:ce:4c:60:ee:8a:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:4E:5C:5C:59:21:51:14:4D:7A:F3:70:2B:AB:43:EE:D5:6E:F6
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:2b:fa:e2:f3:1c:da:70:07:e1:69:e2:f0:d7:25:1a:4f:
00:cd:86:a1:c2:8b:43:f4:60:30:6a:7d:79:dc:2a:e9:1b:6c:
ad:02:45:f9:7b:3b:e2:ab:24:75:bf:db:01:a0:31:17:50:84:
cd:90:a4:58:c7:9b:0c:71:7d:d5:b0:71:2c:c0:17:dd:d5:6f:
d5:b1:35:ae:18:6e:b1:9e:8d:32:95:97:31:8a:94:eb:83:29:
ba:17:6e:7e:4d:cf:f5:09:9c:c6:73:03:88:10:f3:42:03:56:
ae:d5:73:28:0f:6e:a8:aa:79:91:f8:75:04:8d:0a:82:56:3d:
4b:75:30:ab:6a:7a:71:cc:51:03:26:33:be:bf:8d:d4:89:29:
22:07:fe:57:2b:e3:a7:1c:a7:c6:42:3f:6d:3a:55:36:65:83:
ee:4e:e6:eb:22:ad:8e:58:ea:b7:1b:d2:3c:4b:62:71:5b:8e:
41:40:6d:7d:79:f1:16:ea:db:c6:3c:32:7f:b5:6a:11:33:e2:
37:1d:8b:d9:0d:89:57:4e:bb:54:61:98:e3:be:1e:8b:19:9f:
f9:4b:7a:1f:e9:af:9b:73:2a:73:3e:3b:e4:bf:80:9a:1b:3d:
e7:b8:71:c8:e2:d2:74:73:b6:8e:ec:3b:c5:dd:ae:17:af:fe:
e8:20:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client