Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: csrfkA4xsXkNNnVWL5sLDDadC+ZqPq6fVeo0d6jvZy8=
Subject key identifier: 72:8E:F0:32:84:A3:52:24:57:33:23:6C:0A:0D:3B:66:F4:F8:67:E6
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 0199FF230D682BEF3410D76042F0231DC5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0D9A
Signing time: Mon 20 Oct 2025 01:01:51 +0000
Manifest this update: Mon 20 Oct 2025 01:01:51 +0000
Manifest next update: Tue 21 Oct 2025 01:01:51 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: jWTmcSZWd00/7fYmKwTCxyh3BXc6XeGOKNreMyDFWzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:23:0d:68:2b:ef:34:10:d7:60:42:f0:23:1d:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Oct 20 01:01:51 2025 GMT
Not After : Oct 21 01:01:51 2025 GMT
Subject: CN=728ef03284a352245733236c0a0d3b66f4f867e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:74:df:95:27:43:d1:7f:a7:6b:44:a3:4f:
df:a5:61:c0:95:22:51:51:7a:86:c1:70:ba:59:3d:
a4:69:3f:1c:a7:3a:1d:51:18:ac:6e:6f:d2:57:0a:
9c:8c:1a:67:7c:ca:48:ee:7d:be:9e:91:9c:0d:22:
da:6e:f7:5a:0a:04:5d:3e:b6:7b:c2:b6:23:05:12:
74:80:a0:e5:b3:41:bb:cb:35:b6:64:6b:3a:da:7a:
11:ce:3a:33:b4:52:bb:c6:0d:3f:0a:2e:f5:8e:25:
81:c8:7c:51:70:aa:e7:22:54:0a:03:f2:62:5c:d8:
d4:46:47:ed:ed:4e:d9:99:ae:f3:7a:f6:f6:bd:ee:
8a:81:81:0c:44:6b:7e:98:09:91:a3:02:06:d7:88:
0a:7d:37:cc:00:8f:53:fe:c8:73:a6:36:3f:d1:31:
3e:d3:52:8a:4e:85:b7:ac:86:32:6e:3d:cc:27:3d:
c4:e6:ba:d9:a5:04:47:1c:f2:22:59:78:1a:e0:00:
50:40:12:a3:83:49:62:13:50:51:c9:51:b4:46:63:
99:3b:24:74:dc:19:3a:c9:e5:f6:cf:a1:d6:df:c4:
47:b6:2e:de:9e:78:ea:71:a2:ef:21:4a:1b:a0:2a:
f3:cc:36:31:67:81:3e:ce:fc:34:67:7b:5e:e3:3a:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8E:F0:32:84:A3:52:24:57:33:23:6C:0A:0D:3B:66:F4:F8:67:E6
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:fb:24:8d:de:5e:a2:a2:12:1f:21:fb:04:74:bb:86:53:
2e:85:98:a0:47:d6:46:48:93:1e:6f:1a:5c:50:29:6c:0d:9c:
d4:8f:7d:96:2e:3c:d6:36:08:b8:64:07:78:95:50:f2:e0:66:
8d:cc:42:7d:31:de:21:12:bd:aa:1d:da:94:4d:53:8e:f7:ab:
f8:b5:1f:52:cf:0f:d0:c8:0e:d1:e7:5a:22:70:cd:29:b6:fb:
7e:ff:b1:c1:b3:13:b7:42:9c:8a:01:90:0b:29:03:f5:bf:b5:
72:21:a8:ff:61:db:46:4b:20:cb:f3:81:3e:bb:37:4c:17:a4:
78:bb:81:ae:7d:ce:3e:e8:07:bb:fc:cf:45:57:a4:ae:ef:94:
d9:50:14:97:6c:86:97:29:6b:d1:51:5d:5c:72:23:01:ad:76:
35:9a:59:eb:85:9e:7f:d4:8a:f8:12:11:d3:79:7f:a3:09:e1:
cd:cb:2c:a5:16:a3:06:5c:98:08:5e:6d:ad:5b:20:75:be:75:
4b:6f:0e:1f:22:fa:9f:de:2c:bc:76:12:8c:50:0f:7d:5c:55:
f9:14:b0:61:99:1b:dd:cb:f3:ce:d9:5b:69:fc:13:fd:c2:1d:
a6:4a:c6:df:7f:58:8d:9e:e2:e8:97:d4:5c:cc:c1:bf:a0:33:
37:14:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:53 2025 by rpki-client