Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: wvQbla7uOGrnTDSrRNH4VddOZ7zoPczpmJ3yf8IFkGI=
Subject key identifier: 26:5F:0D:0E:2F:6D:35:F2:85:F7:CB:99:FF:BF:41:00:81:C8:71:C1
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0199FB7C7F052F078707473485FBE1CF378E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 07C2
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: sqne9ZyZy3dLXrCog/rm6Wqx2c58I098r1PwyxnRaLs=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:05:2f:07:87:07:47:34:85:fb:e1:cf:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=265f0d0e2f6d35f285f7cb99ffbf410081c871c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:4e:79:ad:93:13:16:42:12:d2:d7:b1:d0:
40:c2:64:62:c0:f0:50:11:63:03:ad:8a:27:a3:a5:
06:a3:02:e4:a3:10:0f:38:be:76:cf:86:0d:b0:fb:
1d:84:f8:37:4c:b4:dc:dc:09:5f:4e:e1:5e:4a:ec:
87:5c:5d:f3:29:e1:f3:d5:2f:a2:98:cd:71:22:6e:
28:1f:79:76:07:51:98:14:5a:ab:17:07:de:7b:d6:
df:79:95:25:80:2a:bb:83:ad:b3:ab:0c:50:9c:df:
a7:58:58:d1:11:fd:43:5e:1f:03:fd:65:5a:65:d7:
d1:b4:31:43:3a:93:4e:57:f3:05:42:d3:66:ff:c9:
c3:12:6e:93:f5:0c:fe:df:07:0b:fa:03:10:1a:11:
d8:e2:28:7a:2e:01:14:b7:fe:93:43:f9:92:80:34:
21:da:8c:cf:be:b0:34:cb:4c:4f:69:24:02:6b:c2:
95:29:69:09:3b:ff:f7:f0:90:22:5d:99:79:1a:4d:
62:0c:5e:b0:f0:18:3d:ad:9b:b3:d2:de:29:95:fc:
b5:09:e6:22:21:28:bf:4b:63:bd:f4:86:9c:57:55:
a2:ad:0e:87:d9:05:c7:ff:01:aa:42:75:de:43:e2:
0f:6c:d7:3d:3f:3e:bc:41:6d:ec:c3:42:28:d4:ea:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:0D:0E:2F:6D:35:F2:85:F7:CB:99:FF:BF:41:00:81:C8:71:C1
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9d:4f:52:a7:56:94:a0:31:76:88:01:0b:f5:1d:3c:bd:13:
76:5b:2d:e8:fa:a0:07:05:a5:bd:07:35:63:27:08:bb:52:61:
6c:44:20:cb:d8:f0:27:06:52:44:f9:66:c7:aa:47:dd:e5:cf:
15:66:a2:35:87:10:52:4c:4d:9f:82:c6:96:19:e1:31:9b:27:
6e:49:12:c5:86:6f:80:90:7a:49:b1:25:b0:ea:d3:7b:56:d8:
d6:ba:7a:34:26:0a:08:77:89:90:b6:89:57:0a:56:d5:bb:80:
5a:2b:f8:96:51:f8:cc:2c:cb:1d:10:0f:30:a8:28:6f:1d:3f:
35:41:87:e2:79:54:e0:fa:0f:9c:a7:52:f1:be:ba:88:30:86:
fd:ca:54:c7:4e:eb:49:cf:66:0e:7e:80:fa:db:61:64:37:53:
f0:63:6b:ce:40:da:10:7f:99:ef:4f:65:25:88:83:3a:ab:96:
bf:26:ef:10:41:7d:b5:dd:30:9a:8a:10:4d:a4:7d:ef:d3:04:
b5:6b:00:b5:b0:a2:b9:23:13:74:cd:e6:5e:74:5f:5a:74:03:
02:30:9f:4b:99:45:cb:1c:61:37:84:db:a0:a0:3d:6e:5e:d4:
31:66:36:6c:e1:31:89:64:a4:b9:7c:d7:6c:9b:7d:6a:f1:1a:
cc:66:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:53 2025 by rpki-client