Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: ovXhskrWqs69WY78+W8ynMPTNaAT86z1Y6YEBTfjNpw=
Subject key identifier: BD:1C:65:E7:F3:C0:B6:1D:C5:8A:3D:95:69:F9:10:C8:69:FC:F1:60
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 019A71B8AC2B54F08DCB2A1D75A5FF693B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 0799
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: s3YeGI6Nv5vmBa3gKz0KTCqVgvHd3NC+3u61gwM4dSs=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ac:2b:54:f0:8d:cb:2a:1d:75:a5:ff:69:3b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=bd1c65e7f3c0b61dc58a3d9569f910c869fcf160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:48:fb:65:46:75:36:ab:80:ad:b8:9b:aa:
9e:f0:1c:8e:57:35:b6:ad:c1:30:87:12:ea:f3:a3:
50:ae:3b:c4:14:da:66:cb:c7:6f:d7:11:ca:c4:18:
32:b7:fb:1b:aa:93:b5:2e:b2:ac:79:66:de:ac:4c:
34:7b:7e:1c:79:88:75:38:c1:eb:cb:43:ae:3b:9e:
cd:4d:6b:af:d0:c1:d3:eb:be:da:e3:49:6a:0c:96:
48:d3:39:c2:78:19:07:6d:a2:a0:f5:06:f5:86:49:
34:89:99:f4:f5:26:d6:7d:81:09:17:8d:26:d7:8b:
75:73:cd:5b:67:4d:b2:d8:ee:00:52:8e:1c:73:1e:
cd:bd:09:f5:64:e5:7b:75:0c:a1:38:bf:00:5c:fc:
d8:30:c8:05:64:33:97:7f:f8:59:1e:05:c7:f0:e5:
d8:00:1a:9f:22:8e:98:46:f7:59:68:99:02:8f:99:
59:56:7a:bc:6f:ba:6a:3c:c7:5c:6e:cd:bc:c7:b0:
86:81:9c:32:7f:5b:e2:13:ce:31:3e:3e:a0:c4:f2:
9a:07:e4:8d:65:d2:c5:0a:82:a4:48:3e:cf:b9:d5:
7d:87:3b:39:a0:b4:3b:33:6e:a5:fa:0c:f0:3a:d5:
f9:a5:58:07:91:80:07:b9:be:e0:fb:3b:29:2c:53:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:65:E7:F3:C0:B6:1D:C5:8A:3D:95:69:F9:10:C8:69:FC:F1:60
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:98:8b:ef:e1:2e:e1:f4:ef:43:27:98:d0:18:59:69:4f:9a:
34:21:f4:e5:47:4b:c7:09:76:12:17:cc:cc:d8:d2:d3:01:dd:
99:ac:4f:41:2d:39:78:5f:6d:5c:40:b4:9d:8b:56:33:a5:14:
b8:6b:88:a6:82:8e:31:03:0e:ae:a8:8b:ec:26:b0:24:b8:04:
61:c0:92:aa:a6:c7:09:cf:e1:70:16:29:66:be:5b:f9:e3:b7:
cb:02:82:be:42:de:c1:89:40:ad:53:09:99:c5:c6:3b:e6:6d:
1c:6a:c1:4e:b0:a6:b2:55:44:4e:4b:0c:66:1d:57:03:f9:db:
f4:6c:b5:af:18:ae:31:8b:12:58:b6:28:91:85:73:fb:68:47:
36:0b:d9:b6:56:00:0f:d4:65:b3:17:89:b1:63:54:ca:54:19:
53:60:52:ac:bb:23:79:33:37:86:ff:85:36:f6:30:9b:32:fd:
d1:53:9a:01:ef:89:0b:10:fa:62:08:1a:71:a7:9e:08:ed:ae:
97:53:cc:c5:57:1c:90:f5:dd:66:c6:bd:64:45:ba:9c:0c:03:
1d:45:22:4d:b5:a1:6f:4e:4b:a6:00:dc:db:9c:fe:25:ad:e4:
00:46:7b:e5:60:1e:9d:6d:1e:ea:2f:5c:f8:91:85:6d:5e:09:
79:2f:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:43 2025 by rpki-client