Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: ZP61FqzC6Gilgygiem3muDf9+fokuQg2p1jjNiPexwU=
Subject key identifier: 2F:F0:AD:DB:D8:26:84:82:5F:BC:A1:5B:F0:5D:09:07:10:D6:EA:9B
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 019A7149CA849468154A9D964F2A70561697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 026C
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: 3liyadxkeB4PeF6Cj_CpA_Z7U3U.roa (hash: BkpSf3XaltWEFzfRC33a/AQ/WD3A00IBXqDokzMsdrM=)
2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: P678D98qRKwHx8rGLzrvNOR/FeVhIB2FlG5Mj5MsJv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:84:94:68:15:4a:9d:96:4f:2a:70:56:16:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=2ff0addbd82684825fbca15bf05d090710d6ea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:76:4e:07:90:56:a4:42:27:8c:39:ff:68:
8a:e8:7f:87:36:8b:6a:b7:51:1f:7e:b7:90:f1:51:
12:17:84:32:6c:e1:d5:12:3f:27:f1:e1:fd:3a:8e:
59:5a:72:45:30:5f:2e:6d:74:43:85:8e:e9:b1:04:
1c:c2:ad:35:c1:73:b2:58:d8:dd:20:1d:8b:08:0b:
56:13:c3:18:38:82:b9:9e:a8:75:3b:7e:ce:73:8f:
10:5f:4b:bf:25:4f:66:1d:9b:0d:d2:49:83:ec:e6:
8e:82:e2:66:94:77:88:6f:9c:5f:3a:6c:99:c1:ef:
2e:44:06:34:cd:15:0c:0c:ce:d5:cf:ce:be:23:d4:
68:17:ff:92:ce:2c:bf:84:0e:d4:70:88:eb:10:db:
7a:c0:86:01:6d:07:ed:73:9e:fa:85:ed:ca:56:dd:
ed:e5:a7:fc:3e:dc:cc:3d:2e:b6:f5:79:8d:1f:13:
23:04:0c:15:3a:56:f2:63:3a:04:9e:48:19:dc:d6:
7a:78:51:ea:8a:7c:68:2f:2e:f2:03:24:e5:ef:92:
f7:47:31:7a:11:18:26:e0:7b:17:b1:d2:71:68:cd:
16:52:d7:a8:ff:11:dc:b5:04:c9:33:8f:36:45:51:
d4:33:02:cc:c3:19:78:39:a7:f5:3c:b5:ce:8a:5c:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:AD:DB:D8:26:84:82:5F:BC:A1:5B:F0:5D:09:07:10:D6:EA:9B
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f1:b5:23:64:74:8c:69:dc:31:70:5b:9e:c3:14:ba:7d:51:
c1:37:5f:8e:cd:f7:dc:31:e3:b1:3f:f5:a9:15:3b:f8:fb:b5:
8e:92:9f:5f:ba:28:fb:0a:6a:7b:b5:0a:a0:db:f5:fe:b9:c7:
42:d4:dc:26:fe:a2:dd:86:03:99:9e:d7:53:2e:72:a6:87:fc:
af:29:d0:77:13:63:a8:2f:00:f1:07:53:ba:63:ec:c2:88:01:
f0:53:61:da:69:d4:84:85:69:0d:c1:c5:01:db:e2:b6:98:06:
35:84:0c:0b:76:03:87:1e:bf:eb:9d:ce:f1:ac:c8:0d:5c:e4:
f1:74:12:86:f2:a1:72:87:94:7d:1f:8d:d2:58:a2:35:47:58:
21:67:a9:fc:c9:9e:4d:d9:da:e0:88:dd:14:c4:fa:e4:2b:1a:
60:cd:14:07:60:20:cf:48:f9:e3:ab:e6:6e:3b:1b:53:1e:37:
71:5c:4a:17:df:80:72:fc:92:b8:d5:e4:fe:7a:a8:8a:f7:11:
a9:22:b7:be:f9:93:75:5c:00:01:0b:13:cc:b0:fe:f7:05:33:
ec:81:83:85:56:30:0c:e5:9a:ae:ab:da:f8:60:a9:86:91:a9:
a6:e1:e7:3b:92:ea:80:7f:f3:2b:71:7b:ec:1d:67:28:3c:6e:
e1:85:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:12 2025 by rpki-client