Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: OA8gHjxutKM/fjSPC0lEZd2TdzILTnYhwJ1GIMsjb7s=
Subject key identifier: A0:2D:FD:85:47:04:AA:88:C3:5C:4B:EA:70:48:3D:CC:58:6A:F7:63
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 019A71B7B953590433D58CFF113056B6639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 1613
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: EmDfNpSg7gzKXEAlI+6k8LqnZEDuee97uIkwI2V5EZw=)
2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b9:53:59:04:33:d5:8c:ff:11:30:56:b6:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=a02dfd854704aa88c35c4bea70483dcc586af763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:1e:a7:f7:a1:98:a1:fe:2c:aa:43:ac:41:
00:49:49:04:34:83:42:ca:ee:a4:a1:c3:4c:6f:bc:
15:bf:5d:5c:fa:3d:d9:52:ad:c7:d6:78:50:3a:fc:
da:ba:50:da:bf:99:49:26:61:00:4a:a5:dd:90:10:
a6:31:39:86:91:c1:b6:68:12:4c:1d:f4:c3:0f:9a:
65:33:34:9a:83:e6:bb:e8:dd:ed:4a:af:74:c2:c8:
ff:a3:0e:82:9f:df:6e:2a:be:7c:c8:57:67:a8:b1:
94:fa:4d:a9:cb:0c:4a:c4:94:cd:b8:66:2f:fc:46:
b0:01:74:82:fb:e3:99:94:9c:59:d5:1b:b1:c3:f0:
89:9b:14:10:61:5b:06:6d:48:16:f1:75:08:77:ba:
de:39:0f:c4:d7:ce:5a:c9:59:16:a7:30:77:de:d6:
d4:38:03:10:6f:48:7f:1a:97:d7:f4:4f:4f:70:e3:
b8:0e:55:48:e4:9c:ea:60:35:bb:b4:dd:e5:27:30:
bc:17:8d:6d:ec:0b:a8:94:be:fe:87:2d:86:e4:f1:
57:46:56:b6:48:ac:e8:63:fd:f6:98:9b:ff:57:9d:
24:27:79:11:d9:23:f3:89:d5:b3:6a:8c:97:ad:0f:
7d:6c:af:a6:f3:ff:f9:4b:0d:2a:31:f4:1f:22:d1:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:FD:85:47:04:AA:88:C3:5C:4B:EA:70:48:3D:CC:58:6A:F7:63
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:66:83:1c:18:2e:df:f9:5f:92:b4:31:0e:ab:ad:d0:ff:08:
75:24:86:cf:ad:67:40:31:e7:dd:71:37:c0:44:b8:58:a1:d2:
50:e6:16:7e:bb:a6:57:af:41:05:c3:4f:24:02:de:19:26:a1:
92:a5:3d:db:9c:f6:9f:a5:48:b5:45:e6:8b:f5:3e:f7:a0:08:
d2:06:33:dc:18:dd:1d:86:48:41:14:53:b1:87:80:81:42:41:
14:7e:ca:9e:da:4b:48:f1:87:4f:f5:06:be:47:25:44:9a:a6:
e4:ba:2b:a3:19:c9:78:ac:c5:7b:49:54:db:f8:5a:0e:0d:16:
1e:af:72:90:60:c1:61:85:9b:6f:42:0c:d0:39:4c:3a:9e:a8:
be:75:bd:2d:61:ca:2e:26:7a:5f:65:38:c7:3d:88:cb:7a:92:
4d:67:7b:52:46:e3:c5:d0:34:4c:78:d3:b8:8f:54:27:47:6c:
7c:f8:3b:b7:56:b4:bf:31:ac:da:83:ce:ae:74:79:18:6c:a4:
9f:c7:54:b8:60:d6:be:21:4f:97:b1:f4:78:43:4d:8a:21:8d:
72:ad:f9:7b:31:cf:44:d4:9d:55:9a:31:a7:fa:b8:24:f0:47:
44:2b:53:d4:18:0c:7a:d9:e7:8e:18:52:e7:c5:c6:0a:9d:f4:
39:a3:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:36 2025 by rpki-client