Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: 8XwHyLcncp65nbT/0jQlX5+4cyX3svboNtG0SHbNZ4Q=
Subject key identifier: 2C:84:3C:C7:47:EA:F2:06:83:3F:46:D9:42:EE:92:B0:D1:19:B2:1D
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0199FB0F298DF4377AD76FB04B2A52DE3D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0C7A
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: Ey3IUq6cMs2F7LzqcX1ULWHGM/tklwqmy33ffh+AXoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:29:8d:f4:37:7a:d7:6f:b0:4b:2a:52:de:3d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=2c843cc747eaf206833f46d942ee92b0d119b21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:b1:3f:5e:9e:b6:e7:f0:27:9c:a1:d9:5c:
07:60:fe:ef:db:be:fc:ba:ec:a6:c8:89:de:db:2e:
30:15:ed:fd:03:34:0f:07:f1:e8:cf:85:e5:28:bd:
d9:d9:7c:b4:c6:e1:d9:89:58:5e:db:c4:d0:38:5a:
ba:a6:2f:1e:a5:37:53:24:f0:25:de:64:3b:6a:48:
7d:32:53:de:9b:0e:dc:fd:7f:57:ee:ab:11:e8:bf:
89:c3:fa:fe:42:53:68:61:1b:b0:88:d7:9f:1f:f4:
17:95:12:c8:ab:ca:4e:95:fc:a8:10:3f:59:4c:72:
06:f2:38:65:c7:99:c8:14:5d:fc:43:06:63:c0:c5:
97:1b:6d:bf:92:2a:ce:87:f7:12:78:fa:bb:f0:62:
3c:72:c0:cd:ce:4f:e4:11:32:03:7d:fc:83:29:cd:
08:a0:85:b5:ad:c1:fa:7a:7d:27:81:be:7f:f5:bd:
3c:d8:6c:a7:69:0d:36:f7:1a:43:bd:0a:e9:6f:72:
69:40:25:cb:49:6b:4f:4d:48:89:57:50:7e:ef:30:
d6:88:9d:4e:0d:d6:4b:24:08:c1:34:86:89:4d:3b:
c1:95:e1:a4:b1:b9:db:ac:7a:42:cd:74:fc:00:04:
aa:cb:5c:ef:d0:4c:df:21:d9:92:74:bf:5c:3a:fa:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:3C:C7:47:EA:F2:06:83:3F:46:D9:42:EE:92:B0:D1:19:B2:1D
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9a:b0:87:6d:9c:72:35:79:f5:09:44:44:fa:ef:a4:36:8c:
99:72:7e:a8:0a:ab:a1:02:3a:0f:33:8b:52:57:3e:57:3c:40:
e4:2c:6a:46:1d:24:31:eb:82:18:80:de:81:0e:fc:19:a5:ba:
8d:64:f1:c2:f6:8f:14:64:f1:34:60:b4:3b:3d:ec:4d:5f:58:
47:54:79:be:d6:09:be:85:72:9d:d4:12:ba:4d:be:ac:2d:58:
be:73:ca:a4:11:9a:18:96:e3:d5:6e:be:8b:29:93:9f:bb:a4:
86:ef:82:eb:06:a6:83:d5:17:8e:4c:0e:da:38:c7:a7:64:b2:
4c:1d:f2:1c:e0:c3:cf:dc:f9:df:a6:86:89:da:44:92:fd:21:
9a:6e:80:2e:d7:8e:63:ef:a7:a3:67:d9:87:ce:2e:31:71:02:
2c:c7:72:6a:4f:38:90:8a:a8:3f:1b:8c:9f:e6:a0:71:cb:85:
9e:c2:7e:a8:35:27:13:08:6a:48:ca:d8:7e:d0:aa:03:af:d1:
b6:c0:a1:bc:bb:bb:fa:6e:65:6f:a0:93:ef:c6:99:a3:0d:c5:
0c:3a:c4:8b:00:f6:c9:77:b5:ab:73:97:47:d5:30:14:69:70:
0e:29:12:d2:66:cd:6d:31:f9:30:9b:8f:1d:cb:41:99:28:de:
16:af:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:09 2025 by rpki-client