Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: UiPBs8Txh1DEGa+qWEjRBf2cpfidJy8lsJI9UjeB5Z0=
Subject key identifier: 94:8B:00:08:DB:1F:6E:8A:30:5B:92:BF:B5:11:D5:F4:0E:5D:DA:F3
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019A533F9DEC6CA08586191B5AF47FCBE2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 03D4
Signing time: Wed 05 Nov 2025 09:01:09 +0000
Manifest this update: Wed 05 Nov 2025 09:01:09 +0000
Manifest next update: Thu 06 Nov 2025 09:01:09 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: tIwjzTo2CaJDVj1arO0PYpcJovEd6rdwoBIMovrHfFI=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:9d:ec:6c:a0:85:86:19:1b:5a:f4:7f:cb:e2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Nov 5 09:01:09 2025 GMT
Not After : Nov 6 09:01:09 2025 GMT
Subject: CN=948b0008db1f6e8a305b92bfb511d5f40e5ddaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:81:19:ad:ee:b2:28:e1:d3:3a:c6:0f:42:
4c:e3:f2:59:83:ab:4e:b1:8c:52:02:e1:bd:a7:05:
41:73:82:bb:3a:25:e1:af:a8:a9:21:73:01:28:77:
8f:09:1b:18:4b:8d:3b:c2:76:99:0c:b3:2e:c1:d8:
2d:61:74:ee:21:93:cf:f2:03:49:fd:94:48:0e:c1:
39:41:31:41:a7:e8:f9:94:10:b5:95:03:eb:43:d0:
91:63:87:03:82:02:55:11:52:c8:d7:20:a8:20:bf:
ce:cb:a2:cf:7f:72:61:8d:90:c5:56:9c:ba:2f:69:
f3:ec:03:9a:fe:6b:fb:8e:cb:ba:2d:ea:2a:e9:fc:
b7:f8:61:c4:92:fa:a6:8d:28:df:b4:99:4e:88:94:
cd:65:45:37:66:e7:0d:b4:02:85:5d:fe:4a:97:9d:
74:d6:4a:0d:52:2d:2f:b9:5d:45:f3:37:c3:45:2d:
ef:aa:33:a7:15:45:38:19:9e:09:03:80:8a:ea:24:
0d:e5:ce:7c:40:70:d3:1a:14:a7:71:ec:c3:86:6e:
a2:95:eb:98:07:15:b8:f3:b4:cb:01:cf:ee:7d:d0:
4a:e1:5d:af:47:47:64:a7:77:41:a9:07:96:5b:3e:
cb:ab:95:b0:88:29:28:dc:5e:40:c8:39:c9:71:78:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:00:08:DB:1F:6E:8A:30:5B:92:BF:B5:11:D5:F4:0E:5D:DA:F3
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:97:64:4e:64:56:0a:f0:fa:09:b9:b5:fc:30:2f:27:bc:60:
b5:84:03:3e:e8:b7:68:c4:b9:09:0e:1b:d4:a3:db:f9:3e:c3:
c6:fb:95:76:66:8d:61:4c:c0:50:0e:7e:2d:b8:48:b8:35:5a:
12:68:ff:93:e5:72:ec:81:f2:19:71:7a:cf:36:8e:32:1b:c7:
97:7a:c6:b2:f8:db:1a:13:7d:44:23:ea:26:5e:a6:54:57:d6:
a7:af:ce:60:22:37:a0:c1:5b:e7:3c:b6:e1:53:37:f5:be:f3:
44:45:a0:c1:6c:41:8e:a2:41:b4:11:78:d2:6e:6e:4e:ad:0d:
ce:cf:2c:ab:e1:b0:75:88:f3:61:55:73:df:eb:8e:d7:a5:5d:
e4:3d:8c:58:98:4e:8c:7f:6f:2c:90:3f:26:c2:fa:3c:4a:7d:
c9:86:a0:7b:61:c8:be:69:19:0e:69:17:ac:59:ea:e0:89:2f:
18:73:6b:0f:da:ac:b9:45:4b:2b:7c:a0:ac:d3:27:d9:09:7d:
4d:85:60:92:ed:24:ee:9b:bd:3b:d2:83:42:db:fa:f8:15:96:
7d:e5:75:bf:5a:ca:f6:85:76:79:50:1e:5f:d7:57:73:ba:74:
57:13:35:b3:24:ff:0f:19:5d:4e:b2:c0:d0:96:43:cd:b8:86:
b9:46:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:06 2025 by rpki-client