Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: ARP/CsFP1Ma0LrysrY36KbSiW53HOSFo1MTzxab7jiU=
Subject key identifier: 14:03:32:3A:94:E3:EF:BD:8B:1F:AD:5C:80:54:0D:A7:D6:84:00:51
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0199FBEB4A4B90EB3640C3FD690E2B0621C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0944
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 5Fdl-r1UYISwU-G4_2MqecNlP8w.roa (hash: TAJZY43vWFWcoOa+D6CqSMPTmCKVwuNadSb4SpvtlPE=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: SPO1KOyQnYi20h84peRXpRic56deDQuj+HJ4y0z1Th8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4a:4b:90:eb:36:40:c3:fd:69:0e:2b:06:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=1403323a94e3efbd8b1fad5c80540da7d6840051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:14:d7:fc:4d:7c:e1:98:57:c1:79:b1:89:
a0:d6:eb:01:26:d0:81:93:f6:c7:e9:d9:5e:3c:df:
63:d0:0a:63:d1:f8:e0:8d:b4:e9:0b:8b:00:67:cb:
d8:9a:5f:e6:7e:5e:a2:4d:e9:58:33:5e:e8:3c:87:
f7:db:98:1a:fa:f8:67:58:e2:fa:21:c2:e2:26:1e:
d4:b7:2e:5d:76:bd:6b:e0:c0:d8:58:fe:13:c0:ea:
f2:56:93:9e:34:f1:f3:d5:7c:aa:1d:90:5e:01:ad:
3a:88:61:fe:39:5c:07:9f:09:3c:23:4b:0a:3d:63:
25:13:f1:8b:43:29:cc:02:fc:05:86:a0:ca:55:1e:
f1:ca:ea:5a:bc:0f:13:7f:f0:26:10:b9:4e:81:1e:
1b:a3:16:d1:17:f4:57:3d:7b:78:9a:25:0f:2b:9b:
ee:0b:3f:13:cf:f6:71:24:07:a2:9b:65:19:2b:56:
54:7b:56:dd:8b:80:16:f4:f3:4c:ce:2d:84:05:a1:
f7:4a:68:0a:2b:61:ee:d3:cf:26:d2:6a:d6:1f:56:
85:2a:9b:b2:80:f4:7e:5c:2e:7a:ef:68:49:e8:0e:
ee:92:32:ee:24:c0:df:82:12:17:33:ee:d1:33:b0:
bf:7c:78:55:81:e9:99:b8:db:3d:c0:ed:1e:24:5e:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:03:32:3A:94:E3:EF:BD:8B:1F:AD:5C:80:54:0D:A7:D6:84:00:51
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:16:3a:85:4b:3d:da:d2:dd:30:2b:e8:21:78:0a:c6:fe:
52:85:db:ae:0a:9f:f0:9e:cd:36:71:a0:ff:a3:38:e0:f7:f6:
ce:e9:07:f8:89:56:eb:56:cc:3a:b7:7e:18:7c:92:3f:f1:ea:
b4:89:04:ec:41:43:da:57:2d:ca:4d:9b:cb:5d:bd:02:9e:97:
f4:09:03:ae:35:a4:31:15:22:96:76:12:dc:a1:30:f4:31:8c:
89:ad:79:ed:63:a8:99:37:a3:f7:e5:f4:42:b7:8d:21:2f:c9:
be:85:3b:ad:19:84:83:22:8e:8c:13:02:76:1d:74:c5:c5:62:
71:ee:19:f3:be:6a:80:c7:03:9c:fe:05:32:85:61:77:ef:55:
12:9f:6f:56:06:89:da:cf:2b:6b:37:a4:47:43:97:48:02:58:
a2:80:cc:00:9e:fb:6b:1a:2f:07:14:a2:03:8c:df:66:c0:db:
93:13:68:91:3f:6e:f9:47:36:3a:ca:7a:b4:58:bc:a6:2c:59:
95:22:3e:ef:7f:f2:52:6f:ad:4e:71:c3:1f:5d:8f:37:60:8c:
bf:5d:3a:a9:62:d3:6e:b3:ea:a6:4e:36:2a:a5:b9:d5:b2:16:
96:c0:0a:41:4e:85:52:63:d8:59:ae:a5:42:60:1f:fd:f4:f0:
75:aa:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:12 2025 by rpki-client