Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json)
Hash identifier: sHSEKVKUUZ1Sh89HwupNr4ydv5nrNbTCFE0Az7aaWhA=
Subject key identifier: BA:FA:86:DB:20:B4:DE:DA:D2:56:54:E2:8B:98:E5:14:EB:9F:F2:4A
Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Certificate serial: 019A00351CFB2DC433ED0071E33A6383C0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
Manifest number: 089F
Signing time: Mon 20 Oct 2025 06:01:12 +0000
Manifest this update: Mon 20 Oct 2025 06:01:12 +0000
Manifest next update: Tue 21 Oct 2025 06:01:12 +0000
Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: 3DwpaA1h3xgWmSE4/hmrO5/tN0GbGStyM2mHefU96Zc=)
2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:1c:fb:2d:c4:33:ed:00:71:e3:3a:63:83:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc
Validity
Not Before: Oct 20 06:01:12 2025 GMT
Not After : Oct 21 06:01:12 2025 GMT
Subject: CN=bafa86db20b4dedad25654e28b98e514eb9ff24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:65:a4:18:33:3a:ab:65:47:30:84:a4:39:
05:62:7c:d9:09:fe:2f:c6:5a:94:50:7a:3b:f4:9e:
40:65:5c:a3:d2:c4:82:78:4f:96:c3:1a:b1:e1:c9:
42:9a:24:e2:2a:3a:26:c5:8f:b2:20:e7:c0:48:a3:
95:2e:b8:70:28:31:62:b8:f1:56:a0:0c:7e:3c:32:
ad:90:22:dc:20:ff:0b:7d:be:18:e9:1c:53:4f:d7:
87:13:1e:52:e7:0f:65:16:78:97:ba:4f:17:73:6b:
76:f1:c3:6c:40:27:ad:ab:86:b5:46:41:b6:31:09:
c6:dc:ea:d8:58:ea:3b:48:4e:39:b0:d7:5a:77:e0:
25:af:ec:7b:b3:b9:4c:45:de:4d:25:01:b0:f8:19:
83:fb:89:3f:cb:3a:aa:de:23:50:10:46:01:ca:7a:
de:00:fb:c3:b1:2b:68:fa:d0:d5:c7:86:1e:b8:22:
00:49:a2:e8:06:e7:57:e6:13:44:59:06:5b:fe:1f:
6b:47:d8:4f:cd:25:d8:f6:f2:c6:62:ca:37:24:28:
28:aa:54:59:d2:28:25:be:69:62:70:e8:e0:c2:b9:
28:a0:d3:79:18:d6:d2:1e:9e:c8:54:d1:43:cf:43:
16:79:e7:0b:ee:ef:45:59:e5:50:c4:e1:33:a2:ca:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:86:DB:20:B4:DE:DA:D2:56:54:E2:8B:98:E5:14:EB:9F:F2:4A
X509v3 Authority Key Identifier:
keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:5d:88:ef:db:c6:15:43:a4:4a:2e:ba:1d:c3:a2:b3:34:
aa:54:4b:79:94:60:07:29:c3:f6:3a:9c:4b:4f:f5:d1:a9:fb:
cb:2e:9a:35:bb:67:e4:61:d7:a1:32:ad:4b:28:c0:59:30:2d:
e0:a7:94:6b:da:70:1d:6d:8f:21:e2:39:fe:12:64:ee:52:2e:
4d:47:33:f5:49:b9:43:5b:6f:ce:15:55:63:b2:c9:7d:51:c6:
21:d5:1b:7c:12:62:fd:39:36:58:74:25:07:f2:82:55:25:92:
3b:ec:26:e1:d1:65:0b:e9:9f:8f:c5:17:64:f9:38:e4:7e:db:
82:f5:a1:63:80:85:e6:3b:b4:c4:60:c9:3a:70:b0:d6:ed:0c:
72:7d:83:67:36:41:2c:94:25:d4:f2:c3:62:83:b2:40:38:f3:
04:02:5e:a2:c5:8e:c3:b1:e7:18:eb:b5:4b:24:4d:cd:42:94:
f0:ac:cb:11:52:48:eb:eb:ba:d3:b1:00:57:e6:20:0d:dd:31:
61:98:89:eb:5e:7f:35:4d:ef:d4:2f:fe:c1:c6:de:89:0f:8c:
fc:40:9b:f5:ca:f7:c6:8c:9a:a2:9f:7a:a5:02:56:7b:47:d6:
80:c2:b7:d3:d9:ca:e2:1c:77:3d:65:ed:5a:fa:bb:57:fc:2e:
6a:5b:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:33 2025 by rpki-client