Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json)
Hash identifier: ZdLJIzxO3wVDdTXGsINCFxnN1pF2pUh457CApQK3SqE=
Subject key identifier: 39:A3:27:34:BE:BC:EE:5D:19:DB:23:AC:5B:D7:4E:3A:AB:6C:67:06
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 019A7226044320503929857F555CD010F8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
Manifest number: 0DBC
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=)
2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: RSEtKZGtECCyqkKZd50utFLVtbzSqtmFb7sAiSbWDbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:04:43:20:50:39:29:85:7f:55:5c:d0:10:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=39a32734bebcee5d19db23ac5bd74e3aab6c6706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:c5:2d:89:cc:65:96:bf:68:1a:1f:a9:13:
c8:27:7a:17:0b:1c:29:7f:26:35:b8:39:db:2b:de:
c9:27:5b:5c:21:7b:0e:37:40:69:45:f3:77:2b:2e:
df:ff:e7:c6:6f:10:6a:06:c3:74:9e:ae:28:74:dd:
5b:0c:10:f3:cb:05:40:79:f5:69:a2:7c:7a:f0:2c:
d8:26:a0:32:03:73:0b:21:03:46:11:75:25:7c:68:
62:01:47:78:fd:fb:8b:8b:7d:08:17:b5:3b:6c:b9:
4f:ca:35:04:99:b4:fd:9b:6d:63:0c:60:45:bb:f0:
22:48:d8:fe:c0:b4:65:60:0d:d5:99:d0:fa:3d:18:
6d:d7:6b:f9:3f:2f:60:eb:3e:f3:45:6b:12:b9:d7:
8b:5e:32:b1:62:a0:bb:d4:e6:1f:d6:97:20:52:c5:
f0:89:87:98:d3:82:a9:89:96:2a:35:91:cd:ef:a4:
e7:28:74:73:f3:3b:86:62:4c:cf:6f:bb:e7:6f:61:
8c:c8:75:59:76:e7:b8:28:86:a0:52:fc:b4:d0:42:
7b:35:03:92:66:49:7f:80:2c:68:27:95:81:40:b5:
50:85:26:48:74:df:aa:99:5e:1d:a5:68:5b:63:a9:
a8:80:14:42:10:30:15:18:2e:c3:2c:82:1e:ab:b4:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:27:34:BE:BC:EE:5D:19:DB:23:AC:5B:D7:4E:3A:AB:6C:67:06
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:31:28:72:06:6a:61:fd:65:c8:3e:85:67:2d:a0:36:92:
6a:b1:25:a2:d6:ac:5c:61:07:d6:f3:14:46:04:23:1b:49:b5:
03:26:70:a9:b8:a0:43:71:c5:da:8d:f4:aa:ac:90:93:5d:b8:
d2:fd:43:51:17:b3:32:ef:aa:2a:f8:b3:a9:1f:a4:70:6c:93:
b1:dd:5c:bc:f5:40:a9:18:13:a5:7c:d2:a3:1f:93:17:55:3b:
4a:d7:d7:99:0e:4a:ac:41:56:f5:71:d8:bc:7c:2f:0a:4c:a8:
5c:19:9d:17:3a:7b:8e:b7:56:e9:6d:70:60:3b:ae:a9:10:1a:
60:c4:9b:80:da:8d:d3:b1:48:df:ad:b9:a8:bf:78:05:15:c0:
6a:a9:00:03:74:56:1c:18:5d:d8:c6:55:31:d1:43:e6:2c:85:
e8:5f:4f:75:68:29:24:02:24:38:7f:81:b6:83:49:20:be:91:
a8:76:4a:c5:02:0f:1f:20:d6:2e:ab:7d:85:7e:21:5b:71:6d:
2c:e6:d5:9a:a0:64:67:37:f6:c5:42:ad:80:08:fd:10:60:27:
e1:0a:42:b5:0d:41:52:c4:c7:e9:c5:9c:52:7a:82:62:5e:9e:
02:82:bf:cc:20:25:02:d6:4b:bf:4e:a6:8d:4a:90:c7:bd:ab:
12:c1:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:00 2025 by rpki-client