Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: hfHqf0DEo7nKgTOM7KsfIot+BDL7LzCApfDmCnWRDMo=
Subject key identifier: B5:CE:C4:64:D4:B8:B6:F6:A8:10:10:67:EE:B8:4D:91:8C:E5:32:78
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0199FC58567D50611C6A9362117FD5C63C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 03A7
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: IR4n2VAorII8YwcpVMRjlzeQ0AfZxXVsmQs1cqSLi2M=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:56:7d:50:61:1c:6a:93:62:11:7f:d5:c6:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=b5cec464d4b8b6f6a8101067eeb84d918ce53278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:65:3c:ac:55:d7:87:82:0f:10:8e:ac:f7:
97:54:31:66:0f:90:ce:6b:61:f7:55:1d:85:c5:84:
09:17:07:f9:47:45:97:4d:ee:18:6f:16:5d:53:24:
81:94:61:90:53:e2:9e:11:56:af:e1:e8:69:21:68:
e4:9b:71:a7:93:5b:55:81:83:d7:33:fa:38:f6:aa:
19:05:5f:e9:2d:61:ea:f1:ce:9c:ef:85:c9:26:22:
6a:96:cc:49:3c:bb:91:48:41:eb:2c:7c:c4:3c:bd:
95:5c:fb:01:53:c5:c2:33:47:5d:87:60:79:44:e8:
27:14:fd:a8:dd:95:27:7e:47:a1:f1:dd:24:37:6d:
95:ff:ee:60:4f:bb:e8:78:75:e0:bc:84:26:83:b0:
87:57:79:a9:d1:1d:28:d4:66:aa:de:4b:7d:6a:bf:
06:e5:72:9f:d5:7d:8a:89:84:17:b5:6d:d9:13:f6:
33:d4:3f:8b:1e:0e:e7:03:ce:39:3c:17:41:38:02:
fd:63:0b:c1:78:84:3e:5a:a0:0b:41:d6:ca:51:0b:
a8:46:0e:87:57:f4:5a:d5:bf:d5:c2:05:8c:12:88:
93:4b:c2:69:85:2b:59:40:85:d0:2d:81:3a:f2:f5:
5d:5e:1d:50:57:c6:ce:cd:6f:30:c0:e7:32:04:df:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:C4:64:D4:B8:B6:F6:A8:10:10:67:EE:B8:4D:91:8C:E5:32:78
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:93:ba:ee:0a:ae:29:b2:66:2a:b9:f9:6c:dd:5a:65:e2:
42:59:ff:15:a3:0c:91:0e:fa:d4:bf:86:e3:42:c3:1d:a2:7a:
a3:71:c3:ae:16:f2:fa:84:f7:c1:88:2c:77:12:3a:cf:16:11:
f3:00:99:d5:e4:f5:4a:68:f6:9a:aa:48:07:84:8d:2e:a0:2d:
20:c0:ec:31:e0:52:fe:0f:c4:d7:48:7f:1c:a9:8b:95:42:de:
3f:ba:ce:ec:3c:c6:d3:17:30:75:cd:a9:e5:51:27:84:34:b2:
89:3a:2e:ad:4b:9a:68:3e:8c:5b:1d:cc:bf:89:c4:1f:43:db:
f4:f9:d9:31:0d:21:6c:a4:e2:47:58:10:9f:21:ec:cb:b6:b9:
71:56:b7:ff:4b:d7:63:37:e6:3d:ea:68:6f:4b:8f:18:3e:20:
15:70:99:1f:6e:e2:b2:68:b6:d2:dc:ba:56:8c:ea:0a:d4:57:
56:3d:4e:05:aa:2b:b7:6e:d4:de:13:18:5f:63:10:8f:b9:e8:
75:6e:c6:33:fe:83:4a:af:fd:d7:cf:fb:cd:03:cc:2b:5e:aa:
7d:cd:b5:fa:8e:f4:13:32:52:bd:23:32:9b:9e:a5:73:f9:30:
42:ec:97:17:5a:e6:f3:42:4a:cd:9c:11:cf:22:65:9b:bf:ae:
25:07:dd:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFZ9UGEcapNiEX/VxjwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx
YzgwMTMwHhcNMjUxMDE5MTIwMTExWhcNMjUxMDIwMTIwMTExWjAzMTEwLwYDVQQD
EyhiNWNlYzQ2NGQ0YjhiNmY2YTgxMDEwNjdlZWI4NGQ5MThjZTUzMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2JlPKxV14eCDxCOrPeXVDFmD5DO
a2H3VR2FxYQJFwf5R0WXTe4YbxZdUySBlGGQU+KeEVav4ehpIWjkm3Gnk1tVgYPX
M/o49qoZBV/pLWHq8c6c74XJJiJqlsxJPLuRSEHrLHzEPL2VXPsBU8XCM0ddh2B5
ROgnFP2o3ZUnfkeh8d0kN22V/+5gT7voeHXgvIQmg7CHV3mp0R0o1Gaq3kt9ar8G
5XKf1X2KiYQXtW3ZE/Yz1D+LHg7nA845PBdBOAL9YwvBeIQ+WqALQdbKUQuoRg6H
V/Ra1b/VwgWMEoiTS8JphStZQIXQLYE68vVdXh1QV8bOzW8wwOcyBN9cmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXOxGTUuLb2qBAQZ+64TZGM5TJ4MB8GA1UdIwQY
MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct
NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw
LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfiTuu4K
rimyZiq5+WzdWmXiQln/FaMMkQ761L+G40LDHaJ6o3HDrhby+oT3wYgsdxI6zxYR
8wCZ1eT1Smj2mqpIB4SNLqAtIMDsMeBS/g/E10h/HKmLlULeP7rO7DzG0xcwdc2p
5VEnhDSyiTourUuaaD6MWx3Mv4nEH0Pb9PnZMQ0hbKTiR1gQnyHsy7a5cVa3/0vX
YzfmPepob0uPGD4gFXCZH27ismi20ty6VozqCtRXVj1OBaort27U3hMYX2MQj7no
dW7GM/6DSq/918/7zQPMK16qfc21+o70EzJSvSMym56lc/kwQuyXF1rm80JKzZwR
zyJlm7+uJQfd+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:16 2025 by rpki-client