Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
File: 0HNWUFJtK79SUNl5fknbHZ8cwn8.mft (raw, json)
Hash identifier: esKczP1/f41AO8l7WK/Z4K/TsrUp34epW4m4b3tpQMM=
Subject key identifier: FE:AA:88:C1:C5:A0:4C:C1:28:11:10:5C:D9:B1:5F:9E:AA:9D:FC:E3
Authority key identifier: D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
Certificate issuer: /CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Certificate serial: 019A71EEEF9CF2E910C24DC1F25150B5EA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
Manifest number: 26
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: 0HNWUFJtK79SUNl5fknbHZ8cwn8.crl (hash: Bwq8BreVN6AvUgmRWxK0HYkjlcv0r/tcmj/l297eJPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ef:9c:f2:e9:10:c2:4d:c1:f2:51:50:b5:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0735650526d2bbf5250d9797e49db1d9f1cc27f
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=feaa88c1c5a04cc12811105cd9b15f9eaa9dfce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:ed:48:cf:b3:58:7f:11:8f:76:35:f0:46:
5f:c2:40:f4:15:49:aa:24:13:f8:c9:4f:f1:24:2f:
19:c8:f6:58:11:a4:e1:7b:96:ba:b9:5e:9a:13:c5:
86:93:8c:eb:43:6b:9f:e6:65:82:e6:b1:35:84:80:
f7:cf:20:2d:6e:c5:07:fe:6a:bb:9f:53:bd:01:5c:
00:b5:d7:68:7d:df:ca:95:eb:ca:c1:75:78:9f:4c:
78:8e:34:33:9f:bc:d7:7a:4a:6e:e6:ab:80:27:48:
20:29:2b:30:b1:1f:95:03:70:b3:0c:91:4d:81:ed:
61:fc:51:7e:27:3b:05:7c:c8:7b:49:eb:5b:8b:b0:
0a:5f:06:a2:0b:be:4e:77:29:e9:20:b4:ca:8f:bc:
40:3d:85:80:56:4a:b8:35:ca:44:5a:09:fc:54:c3:
98:7a:73:29:ee:cb:ea:8a:c2:f0:f6:1e:8c:07:ed:
99:dc:73:64:f2:59:74:a0:8e:c7:f8:59:05:a5:b8:
4d:a7:a7:66:6c:d9:ad:13:f2:28:41:59:5a:2b:88:
21:26:58:8a:03:03:52:70:63:c3:28:41:3b:09:29:
43:ab:d2:73:cc:08:a4:d2:9e:6f:2f:53:94:08:04:
84:bd:4e:24:4d:f9:d9:7f:57:7f:cf:54:59:80:7c:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:88:C1:C5:A0:4C:C1:28:11:10:5C:D9:B1:5F:9E:AA:9D:FC:E3
X509v3 Authority Key Identifier:
keyid:D0:73:56:50:52:6D:2B:BF:52:50:D9:79:7E:49:DB:1D:9F:1C:C2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HNWUFJtK79SUNl5fknbHZ8cwn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b49500-0b74-4c45-a882-0c84fd757990/1/0HNWUFJtK79SUNl5fknbHZ8cwn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:2a:1a:7b:cc:b2:b6:27:24:1b:31:e9:27:3e:e1:b5:5d:
a1:c8:74:6c:55:8a:26:91:6b:c0:72:40:93:9b:3d:3f:c7:2d:
a3:4e:cd:9f:c7:09:5b:2f:7d:91:e1:70:30:e4:d1:a3:43:ff:
e1:93:bb:1f:00:bf:cf:6d:e6:a0:a9:4d:f6:81:3b:6f:dc:2a:
5a:3f:a7:92:3d:4d:53:74:c2:04:da:6d:cb:f3:36:88:48:09:
36:a8:5e:83:3b:73:6c:ea:26:b7:a4:37:09:e0:5a:16:04:84:
fa:67:31:d0:85:57:8b:ec:8b:a6:7c:15:a3:f9:9d:b4:83:7f:
ea:59:ff:e0:75:59:93:6c:dc:df:94:b1:a6:8d:8c:b6:15:93:
f6:26:c4:28:a4:8e:c7:da:fe:74:4d:0a:49:aa:c1:1f:ba:2f:
fb:f7:a3:19:1b:69:c3:8e:dd:7a:8e:b9:20:3c:c9:74:30:9e:
57:3a:48:54:df:a6:a2:04:25:24:1e:15:9a:67:4a:e2:43:bd:
17:cb:44:3d:4e:0d:74:d3:f1:dc:0b:54:06:ec:f0:44:38:5e:
c5:f3:dd:bd:77:a0:fe:61:24:4e:7f:ab:e6:bf:46:ae:41:8d:
f3:b7:b4:a6:bc:36:44:41:3c:a2:48:6c:83:03:06:9e:7f:0e:
d4:c8:f5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7u+c8ukQwk3B8lFQteohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzM1NjUwNTI2ZDJiYmY1MjUwZDk3OTdlNDlkYjFkOWYx
Y2MyN2YwHhcNMjUxMTExMDgwMTE1WhcNMjUxMTEyMDgwMTE1WjAzMTEwLwYDVQQD
EyhmZWFhODhjMWM1YTA0Y2MxMjgxMTEwNWNkOWIxNWY5ZWFhOWRmY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6XtSM+zWH8Rj3Y18EZfwkD0FUmq
JBP4yU/xJC8ZyPZYEaThe5a6uV6aE8WGk4zrQ2uf5mWC5rE1hID3zyAtbsUH/mq7
n1O9AVwAtddofd/KlevKwXV4n0x4jjQzn7zXekpu5quAJ0ggKSswsR+VA3CzDJFN
ge1h/FF+JzsFfMh7Setbi7AKXwaiC75OdynpILTKj7xAPYWAVkq4NcpEWgn8VMOY
enMp7svqisLw9h6MB+2Z3HNk8ll0oI7H+FkFpbhNp6dmbNmtE/IoQVlaK4ghJliK
AwNScGPDKEE7CSlDq9JzzAik0p5vL1OUCASEvU4kTfnZf1d/z1RZgHyXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6qiMHFoEzBKBEQXNmxX56qnfzjMB8GA1UdIwQY
MBaAFNBzVlBSbSu/UlDZeX5J2x2fHMJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODIt
MGM4NGZkNzU3OTkwLzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iNDk1MDAtMGI3NC00YzQ1LWE4ODItMGM4NGZkNzU3OTkw
LzEvMEhOV1VGSnRLNzlTVU5sNWZrbmJIWjhjd244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY18qGnvM
srYnJBsx6Sc+4bVdoch0bFWKJpFrwHJAk5s9P8cto07Nn8cJWy99keFwMOTRo0P/
4ZO7HwC/z23moKlN9oE7b9wqWj+nkj1NU3TCBNpty/M2iEgJNqhegztzbOomt6Q3
CeBaFgSE+mcx0IVXi+yLpnwVo/mdtIN/6ln/4HVZk2zc35Sxpo2MthWT9ibEKKSO
x9r+dE0KSarBH7ov+/ejGRtpw47deo65IDzJdDCeVzpIVN+mogQlJB4VmmdK4kO9
F8tEPU4NdNPx3AtUBuzwRDhexfPdvXeg/mEkTn+r5r9GrkGN87e0prw2REE8okhs
gwMGnn8O1Mj1gg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:48 2025 by rpki-client