Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: CV8HMLqqJUh11wt65KTTjgvwjKBiq8PbXztUyNUeBQ0=
Subject key identifier: EB:9C:40:F7:1D:D2:27:6A:DC:1D:42:8C:26:FC:82:A4:7B:B2:72:E4
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 019A72934746D96293B4310BF9EE97378BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 0232
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: 6JrjOwiNcYQa23OCik2xlKprOjj5CQx+fT3RCcd1pe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:47:46:d9:62:93:b4:31:0b:f9:ee:97:37:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=eb9c40f71dd2276adc1d428c26fc82a47bb272e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:b1:73:73:4b:6c:10:95:c9:59:07:90:1b:
31:d4:f9:80:3f:d5:6d:f9:95:82:2d:66:2f:9f:03:
66:86:da:ad:66:eb:be:df:e3:02:2d:49:f0:cc:7b:
ff:49:4f:6f:a8:87:92:25:39:0f:47:98:c2:16:6c:
eb:05:ed:32:30:06:24:13:ed:9a:ea:d6:fa:ce:0c:
eb:ac:1d:79:1f:e3:bd:95:f0:42:70:21:24:6a:e2:
8e:fd:57:aa:57:f2:e0:27:85:c7:ef:c5:2f:e6:86:
be:ba:ee:58:d7:51:18:89:66:5d:48:24:3f:4e:0c:
d6:78:12:31:cb:f8:0d:61:46:f0:18:a8:cc:3c:32:
39:41:4c:ab:15:c4:e6:d6:88:55:24:4b:c4:3b:ac:
23:42:f0:89:0b:a2:a6:4e:62:38:87:aa:78:eb:2f:
e2:e7:71:ba:a6:91:54:96:25:11:79:7e:cd:57:53:
16:0c:ae:e3:83:1c:e5:f0:53:56:6b:c6:4c:73:a8:
7a:f3:8c:01:4f:17:a0:e1:aa:bf:be:95:0b:9d:69:
3c:bd:dd:ae:bd:85:44:8d:78:0e:5c:13:0d:7c:86:
de:92:c9:16:89:d7:27:dc:e9:45:58:2b:58:2a:eb:
d9:35:4f:38:22:b5:9c:2a:e0:1c:2a:c4:8f:ca:24:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:40:F7:1D:D2:27:6A:DC:1D:42:8C:26:FC:82:A4:7B:B2:72:E4
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f5:a9:9a:19:b6:03:bd:16:6a:6e:f0:90:0c:5a:4a:83:e7:
e3:3f:bc:b2:d9:c2:13:c8:70:61:7a:18:62:75:fc:26:bb:02:
59:7c:cf:ab:f9:52:c9:a2:34:84:0e:0a:de:7a:b4:ea:ac:b2:
cf:e2:b1:de:c7:1f:4f:61:e2:49:6e:ec:59:82:d7:2b:53:0f:
03:45:4e:ff:16:3b:43:ee:93:50:d6:f1:32:49:38:b3:4f:cd:
2d:d4:13:f4:04:99:83:85:91:d7:17:f7:29:82:0e:ce:8c:2a:
f0:e7:5f:cd:20:da:51:ca:d6:79:e2:8c:08:95:8d:1c:a7:62:
2a:bc:8b:d6:e6:3a:1e:cf:d8:08:9c:e5:99:ed:dd:f6:b6:ea:
d6:1e:b7:e3:f9:df:f2:8b:27:a4:84:24:6c:b2:50:1a:6c:fb:
11:54:7f:f3:04:27:74:f9:1b:17:9a:56:2e:0a:4b:db:4c:43:
62:6d:f0:a7:d5:dd:ab:11:74:07:cc:8b:72:8d:88:8a:9c:4b:
a3:8a:3f:3e:5e:54:8e:bc:7a:1b:de:a9:e0:8c:64:b2:2a:e4:
8b:24:51:dd:04:8c:c1:6b:3b:57:7e:d2:96:98:f9:5b:a6:b3:
b0:02:ba:0e:06:ab:2c:50:5a:1e:c8:24:9b:26:ba:45:4f:32:
dc:f2:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:09 2025 by rpki-client