Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: r7nV5MJoUQsQ0PzbSwFMXqrkO8sFTsuo1PP67S9UJlE=
Subject key identifier: 84:6D:42:78:86:D6:BE:F5:DF:9D:8C:B5:13:22:13:2A:04:B9:8D:59
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 0199FFFE52FEF8512DCAEA47AAA4D174C21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0DC0
Signing time: Mon 20 Oct 2025 05:01:21 +0000
Manifest this update: Mon 20 Oct 2025 05:01:21 +0000
Manifest next update: Tue 21 Oct 2025 05:01:21 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: y++Q3HgtNTrYpkhic5fBLZCAKzcCODDw5iYGyRh20pM=)
2: bQ335Qu1IpD2FIjMI78ziScUVGI.roa (hash: ZV4IqpYmx61tlbVAfX/UDuIrlcXCWTu1WQJfIwsAz60=)
3: feXIFkXjQ-D3K9RdNEN9AXi3txU.roa (hash: pbHb2pCafG3K6Mcopun8T/bJ0i5xcQ41Kx0DXDfoxEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:52:fe:f8:51:2d:ca:ea:47:aa:a4:d1:74:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Oct 20 05:01:21 2025 GMT
Not After : Oct 21 05:01:21 2025 GMT
Subject: CN=846d427886d6bef5df9d8cb51322132a04b98d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:24:ff:c5:0e:09:a6:54:e1:a5:12:21:62:
c4:74:5b:d2:bf:f4:62:ef:13:28:61:d5:44:14:0a:
67:c7:14:99:18:ac:95:01:8b:85:9c:98:d2:19:7c:
33:d5:c2:04:37:6a:ff:93:31:87:a8:04:82:23:8b:
11:2d:28:9e:2b:00:a9:be:90:96:d1:fa:f1:e4:c2:
66:30:60:52:81:e6:c0:68:a7:18:83:0a:db:38:22:
af:f2:72:04:86:b6:2a:51:bf:15:eb:ed:5d:ee:a5:
e1:6d:84:92:39:b0:b1:74:50:e4:50:c6:54:fc:a7:
90:51:54:a7:02:02:5f:53:ae:b8:d6:e0:48:2d:b3:
c7:91:0e:8e:ff:d5:01:fa:a2:bb:52:69:88:29:0c:
46:f3:06:c7:c4:81:ee:90:4c:a1:bc:e3:06:3e:15:
05:18:f8:9d:1e:80:de:ca:66:a9:82:5f:8f:7f:40:
f5:62:3f:80:21:13:38:dc:ee:aa:86:b1:f4:f7:84:
8e:5b:3c:06:eb:da:b6:33:2a:e5:09:72:65:fe:be:
00:a4:9c:46:55:59:46:60:63:cc:a0:50:77:ff:33:
0d:28:d4:a1:ca:d5:9c:26:2f:6f:aa:20:ed:ba:cf:
fa:26:b8:ee:db:ac:32:e6:b2:cb:c9:f7:30:77:2a:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6D:42:78:86:D6:BE:F5:DF:9D:8C:B5:13:22:13:2A:04:B9:8D:59
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:79:33:b8:12:70:9e:c9:a7:1b:05:36:1f:d2:a2:ae:aa:
75:7a:c0:00:18:da:03:3d:e3:f9:c5:45:2f:d1:22:cf:4b:b3:
6e:b4:87:54:d1:58:f1:b6:59:cd:90:5f:a4:7b:5a:db:94:e9:
93:50:5a:15:a5:c2:9d:2a:a7:24:77:7e:97:e3:f4:05:bd:f9:
80:3a:16:91:36:1c:65:a7:5f:16:db:e4:a0:82:cc:4b:0f:99:
bd:db:40:08:69:18:d3:06:07:58:24:7b:8c:ca:3c:a2:d8:07:
fd:c9:5e:73:6e:f7:68:e3:26:23:6c:82:ad:21:07:68:86:eb:
57:ff:2a:99:d2:b0:a4:38:f8:8a:b8:9b:42:7e:73:97:32:6d:
48:41:3f:a2:f5:82:a9:df:46:91:69:29:7e:de:4f:2d:23:cf:
f9:04:87:47:f1:92:1e:b2:22:19:31:81:d2:9d:11:9c:fc:ce:
9d:97:43:db:72:53:5b:78:87:ae:f2:58:79:42:1b:c6:52:cf:
96:45:2e:48:44:cc:75:14:18:74:10:c1:75:72:80:40:5f:2c:
90:17:15:72:de:6e:5f:d0:29:b5:aa:47:81:d6:e8:f9:d7:01:
4f:88:61:ec:ab:22:06:3d:c5:0e:7f:ee:1e:8a:5b:00:1d:90:
84:72:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:36 2025 by rpki-client