Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: JUAzu6r7ZLGqneKeMusj6i88I+rAtUbYN6vTCveyepQ=
Subject key identifier: 4B:53:69:E9:1A:D9:D8:E4:82:82:64:54:F0:44:89:F3:30:91:4F:BB
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 0199FCC6B73593CA9573EB8541E52B2543CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 01F5
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: mU441Mfc5SzCIzoWaKeeKF/yLs38mUHbj+s1+9JcP5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b7:35:93:ca:95:73:eb:85:41:e5:2b:25:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=4b5369e91ad9d8e482826454f04489f330914fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:03:2a:50:f5:53:99:3e:a9:e7:37:30:28:
55:a2:ea:e9:88:ea:51:45:08:30:9c:ce:c3:87:e2:
b4:89:83:21:0b:34:3d:31:93:fa:14:f1:f6:25:05:
db:df:b9:03:ff:a4:94:73:1c:fd:ce:05:95:04:23:
f5:b0:fd:96:11:c4:d9:6e:ed:32:3b:3e:c1:e3:d7:
ab:37:30:55:3a:db:2d:ab:f7:57:d3:6e:25:15:bf:
ca:a8:ae:d6:37:a0:69:0b:86:5e:a6:ae:ac:bd:9f:
1d:54:2b:03:8c:e8:ef:0e:a8:6c:7e:91:f9:bc:bc:
d7:25:b5:c6:4d:c5:a8:9f:64:6c:39:ed:20:02:3f:
e1:b0:78:c0:d0:22:ed:25:71:bf:d7:71:69:66:8b:
7b:78:36:45:e0:1a:6c:d0:e1:04:8c:b6:ba:b5:98:
9d:07:41:83:96:0f:d2:ce:6e:55:14:24:2d:c7:d2:
11:1f:70:9a:56:cc:bb:2c:55:92:7c:36:fa:3a:c3:
6a:25:0b:93:9a:54:cc:d1:2d:04:23:60:97:76:86:
7e:06:79:08:8c:bf:c5:a8:7f:ba:a7:f7:06:6f:a8:
b0:44:ac:5a:b1:11:6e:b5:52:ac:92:9f:81:c7:91:
31:81:ac:cd:81:64:f5:73:66:42:d2:60:1e:0c:86:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:69:E9:1A:D9:D8:E4:82:82:64:54:F0:44:89:F3:30:91:4F:BB
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1f:aa:e6:2b:ba:4a:1d:00:fa:75:ca:6b:fe:03:90:78:ed:
38:7b:e7:95:b2:b8:cf:15:28:e1:fc:30:d3:08:05:81:17:ad:
1b:85:36:72:42:d8:24:3b:61:76:8b:cf:7a:2c:51:d8:77:c8:
a6:52:3f:4e:c6:0b:bb:55:82:70:cb:df:45:0a:ed:1f:cb:ca:
0e:03:6d:32:67:21:38:d4:f8:cc:bd:f5:8b:a4:74:ca:49:9e:
36:b5:d6:66:04:ca:f0:5d:60:8b:60:d3:60:aa:9e:f9:2f:20:
e2:fd:ce:60:a9:04:66:38:5b:b2:8a:79:c8:94:bd:c0:0f:03:
56:7e:97:f6:a6:ba:98:3f:4a:a6:49:b5:aa:96:5c:86:b4:de:
b9:ee:a2:d7:e0:e6:6b:7e:a4:6f:41:a2:3e:4f:36:ad:9f:2b:
aa:e9:17:16:82:29:40:6e:25:d9:1e:be:65:30:f2:be:72:97:
bc:a9:64:84:0d:28:52:2a:26:fd:11:e0:34:14:8b:e0:04:02:
0e:6b:8e:45:6d:c7:08:a6:51:0a:da:7a:8a:5c:62:c7:b3:ed:
08:7a:da:07:8d:05:2a:46:11:0c:e2:5b:f2:f9:98:4d:72:ea:
ba:77:d0:f6:42:d7:ef:fd:f5:f4:44:c8:44:4c:cf:f3:65:64:
aa:ed:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:32 2025 by rpki-client