Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: W2kheB/WxhkBf3NFwBNTA0ehEeaeTLhKr3/H5QmyEq8=
Subject key identifier: 06:14:26:07:7F:8E:FF:C3:CB:66:58:EB:02:07:14:0B:50:E7:64:9A
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 0199FBEAA4B699E759B5164E551B2037EEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 07A7
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: KlMg3St2XLb/PwbgKtmD8dSzHjOu6gZNTCgcmR5Q5Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a4:b6:99:e7:59:b5:16:4e:55:1b:20:37:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=061426077f8effc3cb6658eb0207140b50e7649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:7a:70:e2:20:60:18:49:cf:ba:50:47:a2:
43:9e:84:55:04:be:26:72:db:0e:35:d4:dc:9e:5b:
84:d7:94:b1:91:09:76:1b:eb:74:4e:67:ed:4e:e0:
8f:1a:a4:c9:87:1d:75:e0:bc:25:e4:89:78:9a:10:
ab:0f:10:88:c0:f3:a5:ff:5b:78:f5:27:22:6c:8b:
d2:90:19:e0:0f:37:e7:00:50:37:2a:99:f1:39:ea:
4d:62:a4:ff:c6:22:c2:4f:73:40:09:bb:7d:f6:0d:
80:f8:11:d3:e1:f1:40:f0:48:27:f6:b4:d4:4d:d3:
00:b3:44:6a:88:e5:3d:a7:25:6b:b1:d4:5f:9f:f8:
c9:75:bc:c6:d3:27:4e:5e:5e:eb:d5:b2:d9:a2:75:
72:b3:26:4d:2b:1a:e4:04:61:9f:96:54:43:8b:80:
f8:fd:21:92:23:fa:06:c5:32:d4:98:0e:98:93:04:
71:b7:38:c8:ec:97:97:05:7e:ce:30:63:b2:77:72:
9c:67:6b:a5:53:6e:a0:a7:79:59:a6:3e:25:40:65:
49:07:c2:26:b3:06:da:c0:8e:07:ea:4b:5f:b0:55:
0b:b7:6c:ca:22:9a:4c:e7:12:74:65:80:30:29:1c:
a6:eb:d1:02:92:09:8f:1a:8a:3e:42:ed:3a:15:8c:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:14:26:07:7F:8E:FF:C3:CB:66:58:EB:02:07:14:0B:50:E7:64:9A
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d6:15:43:ac:54:01:ba:e3:40:e4:45:eb:49:20:95:e4:34:
72:5b:18:e7:8b:53:f2:bd:ac:5a:24:7c:b2:ec:18:3a:3b:dd:
ef:86:1b:9c:c7:d5:7a:0b:c9:33:ac:fa:ea:90:ed:fe:38:d4:
4c:c3:b7:77:61:6d:91:83:0b:30:65:49:a2:47:5c:af:af:89:
8d:82:79:c1:65:81:f6:3c:fc:4d:d9:4b:a0:53:52:f8:a1:84:
88:a4:09:80:09:70:43:3e:ba:7f:44:e9:01:52:40:52:52:16:
f2:8d:0a:72:56:a0:f7:ac:f2:8a:0e:82:5c:35:d4:0b:21:59:
90:46:eb:b0:77:3b:32:f4:23:5c:e3:a8:55:76:9b:2a:f0:ce:
02:e6:65:7e:45:0a:8b:29:78:24:8b:22:9d:dc:a6:ad:b4:e4:
c2:5b:ba:ac:6b:86:ef:07:be:4f:3a:39:c4:6b:46:d5:f2:55:
8e:25:df:7c:50:b4:cb:69:29:41:89:36:1f:51:8b:a6:57:7c:
20:61:fd:23:81:7d:07:64:d6:de:e4:1b:4b:2f:aa:56:89:06:
47:30:9b:a7:ed:b5:67:72:55:5b:3a:40:a8:df:dd:8b:0e:fd:
4f:a7:ef:2f:4a:14:34:e4:62:b1:75:04:a5:11:d6:aa:45:a5:
7f:7f:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:34 2025 by rpki-client