Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: PB9IjWisJHKHaf2svflLxqPOvNj5xgCeFQTdyOCYiSI=
Subject key identifier: 0C:B0:71:DC:9A:A9:85:52:CD:7E:30:0E:E5:E1:AB:AD:95:CA:E5:F3
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019A70DBF2F55E69DDEDBC678CC7DB047F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0CE2
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: gMF0w3r0UL0m0GEOwbEZIKv+o6RcX7fZAe69pSSadBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f2:f5:5e:69:dd:ed:bc:67:8c:c7:db:04:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=0cb071dc9aa98552cd7e300ee5e1abad95cae5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:59:32:a9:6e:1d:b7:e8:80:7c:fa:9c:ad:
8d:de:29:bc:09:a3:e2:d6:05:c9:e9:0f:eb:dd:75:
9c:a7:75:8f:41:09:a1:fe:dc:0a:64:b0:6c:e1:ee:
f1:24:e7:ac:82:08:02:92:7a:1e:64:02:1d:88:eb:
81:0c:51:d0:f9:a3:2c:74:42:4a:3c:b3:8a:16:cb:
91:35:4e:84:e5:e8:23:29:a2:32:2e:7c:c8:f5:f4:
cc:14:c1:12:55:a0:d7:93:c7:2b:c8:26:b2:67:e5:
e2:7a:0b:9d:3b:a9:51:a6:a2:d7:05:42:b0:61:63:
06:00:e1:b7:b0:14:5c:e6:49:22:3e:2e:3a:7f:03:
d4:7a:3d:df:30:30:fb:9e:2a:39:c8:94:52:8e:c6:
2b:b3:17:42:ca:30:6e:d1:e7:a1:60:30:24:7f:e7:
45:b2:5e:6a:e8:7f:48:6f:6b:2f:1a:1c:6f:1b:a1:
78:57:64:78:ea:f1:a0:ac:0b:df:ad:e2:de:0e:31:
6f:10:04:0c:26:8a:fe:65:b2:c4:9e:7e:32:16:76:
b4:13:c6:f4:b5:24:f2:4a:82:c8:7e:f5:f6:c0:78:
d1:ea:18:78:e4:47:2d:ab:3a:00:66:0d:d1:52:b5:
91:12:80:b3:23:b3:af:bc:61:73:cd:76:71:5e:95:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:71:DC:9A:A9:85:52:CD:7E:30:0E:E5:E1:AB:AD:95:CA:E5:F3
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ea:85:49:eb:31:e4:39:cb:3f:ea:04:07:76:68:7b:88:89:
15:49:47:7e:b3:8b:77:58:44:ef:7b:ba:aa:e0:d2:08:92:f1:
99:95:27:71:7d:6f:49:73:58:2c:ac:63:9b:64:d0:2a:09:1c:
01:bd:63:6f:20:3e:14:8a:0c:55:b3:a4:bf:69:43:35:8b:6b:
aa:f8:17:47:15:d3:85:a8:52:71:d3:f0:80:9e:50:41:2c:cd:
88:68:f3:40:f3:3f:b5:6d:e5:06:90:02:91:0e:97:43:a2:bb:
61:70:71:4e:55:a2:85:c6:7b:93:2b:c2:9b:21:99:60:84:16:
57:a8:fa:a1:3b:a3:d6:dc:a9:3a:9d:35:6d:21:16:6d:72:da:
33:6b:af:be:e5:0b:a6:54:07:0b:83:a0:11:70:72:c1:90:80:
8c:91:56:dc:2e:f5:a0:3d:08:26:ac:9f:80:34:59:34:5f:b4:
c7:39:40:a6:df:3f:52:23:e7:50:39:c3:02:fb:89:fc:b3:f8:
ca:31:40:65:b5:d8:17:a1:dd:9c:13:a3:6e:63:a5:16:22:64:
f5:51:5f:88:c8:50:8e:64:ff:6b:62:34:0a:d1:e3:7b:2c:d1:
4d:f4:d9:34:61:3f:f6:ab:9c:9f:0b:74:75:35:54:c0:52:c9:
6b:e0:9b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/L1Xmnd7bxnjMfbBH95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5
MmRlZTkwHhcNMjUxMTExMDMwMDU0WhcNMjUxMTEyMDMwMDU0WjAzMTEwLwYDVQQD
EygwY2IwNzFkYzlhYTk4NTUyY2Q3ZTMwMGVlNWUxYWJhZDk1Y2FlNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2NZMqluHbfogHz6nK2N3im8CaPi
1gXJ6Q/r3XWcp3WPQQmh/twKZLBs4e7xJOesgggCknoeZAIdiOuBDFHQ+aMsdEJK
PLOKFsuRNU6E5egjKaIyLnzI9fTMFMESVaDXk8cryCayZ+XiegudO6lRpqLXBUKw
YWMGAOG3sBRc5kkiPi46fwPUej3fMDD7nio5yJRSjsYrsxdCyjBu0eehYDAkf+dF
sl5q6H9Ib2svGhxvG6F4V2R46vGgrAvfreLeDjFvEAQMJor+ZbLEnn4yFna0E8b0
tSTySoLIfvX2wHjR6hh45EctqzoAZg3RUrWREoCzI7OvvGFzzXZxXpXJdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAywcdyaqYVSzX4wDuXhq62VyuXzMB8GA1UdIwQY
MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt
ZjAwYTE5Mzg4ODFmLzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm
LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuqFSesx
5DnLP+oEB3Zoe4iJFUlHfrOLd1hE73u6quDSCJLxmZUncX1vSXNYLKxjm2TQKgkc
Ab1jbyA+FIoMVbOkv2lDNYtrqvgXRxXThahScdPwgJ5QQSzNiGjzQPM/tW3lBpAC
kQ6XQ6K7YXBxTlWihcZ7kyvCmyGZYIQWV6j6oTuj1typOp01bSEWbXLaM2uvvuUL
plQHC4OgEXBywZCAjJFW3C71oD0IJqyfgDRZNF+0xzlApt8/UiPnUDnDAvuJ/LP4
yjFAZbXYF6HdnBOjbmOlFiJk9VFfiMhQjmT/a2I0CtHjeyzRTfTZNGE/9qucnwt0
dTVUwFLJa+CbtA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client