Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: ead5f59R+01HxL4M9B0XSwp6BCY4ujo9QFBxMuZLcJU=
Subject key identifier: 87:73:F7:C4:79:51:ED:C3:03:1D:D3:B6:97:AC:70:02:BD:50:1D:30
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 0199FD6B240EE0FEEF4940A2EECAAF4FB7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0E75
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: 5UYw+H+x/nmBdOKbvQDRHREnrNLCDG02dYLDANGoSGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:24:0e:e0:fe:ef:49:40:a2:ee:ca:af:4f:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=8773f7c47951edc3031dd3b697ac7002bd501d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:e5:b1:e6:46:31:bb:38:3f:f8:72:a0:06:
c3:e1:0a:9e:4e:7b:ca:22:29:7c:41:63:64:94:07:
55:16:95:f6:fc:43:d3:f2:c4:39:3b:af:71:e7:75:
fd:c4:86:26:46:d2:8a:d5:63:86:96:1a:33:8a:f8:
e2:67:e6:64:aa:d9:65:fc:19:d6:63:3c:81:f4:35:
4f:e4:1a:56:fa:e9:78:78:ea:59:f8:0e:39:f9:d6:
a1:0f:92:85:e3:c5:02:fd:91:77:d8:04:cd:12:25:
93:78:46:3a:38:df:bf:22:93:d7:45:e5:08:53:0a:
96:83:62:5c:a5:c0:63:3b:2a:69:cc:d6:16:a2:c9:
e3:ad:0f:f7:fe:20:bb:d5:40:3d:9e:0f:7b:d5:9d:
9b:13:09:03:8f:f4:4e:7a:09:b0:d0:3c:e6:87:4b:
5e:1c:a9:65:75:77:43:d9:ab:bf:39:45:29:22:ba:
93:97:1f:dc:39:a2:27:40:3f:0d:cb:6f:a0:e8:9f:
e7:41:fa:01:a7:bb:b4:f7:10:ad:43:43:d2:79:35:
8b:ee:71:7a:f3:35:ce:a9:53:ee:78:3a:73:96:7b:
99:06:34:cd:bb:54:ac:b1:1a:8f:c4:c4:a0:06:21:
6f:90:c9:82:60:18:b4:46:24:15:72:f6:27:8c:4d:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:F7:C4:79:51:ED:C3:03:1D:D3:B6:97:AC:70:02:BD:50:1D:30
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:90:f5:50:42:2b:98:9b:1c:17:f6:f5:54:cb:0b:cb:40:f0:
4e:6e:68:70:27:44:1e:13:07:b1:81:a8:ce:ef:e9:59:d2:55:
c3:7e:cb:7f:84:69:5b:7b:2d:14:c0:73:c6:99:d2:e4:28:90:
dd:48:23:bd:4e:47:24:7f:29:5c:e3:89:a1:e6:31:95:e6:9f:
1c:21:eb:ed:fb:50:5f:31:99:0b:9e:0d:48:0d:fd:39:af:b8:
34:e9:51:38:8d:8c:c6:f2:cb:f5:dd:1b:b2:2b:7f:a5:b5:54:
53:b4:1c:fc:f2:83:f9:be:40:53:04:32:d2:fa:6a:4b:98:94:
21:fa:13:d0:23:e0:52:80:64:d6:5c:6f:cd:6c:7f:44:1d:4e:
99:06:c5:bd:d5:54:7a:8e:dc:aa:bc:ee:23:ef:5f:88:be:45:
7d:0a:27:ec:dd:f8:50:1d:e4:50:d0:9e:cf:1c:92:3f:a2:d5:
41:d2:56:95:25:d1:3b:51:a8:28:ba:48:84:4a:e6:65:eb:3a:
29:47:fc:a4:48:14:de:ae:ec:83:d4:f5:83:fa:68:ec:e5:4e:
8a:95:3f:ef:0c:c7:76:2e:ef:fd:df:66:4a:fc:1d:d1:8d:cf:
7e:f0:fb:7d:8d:60:f8:5b:4c:bd:c6:c8:98:40:59:c3:c3:17:
7c:2c:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:24 2025 by rpki-client