
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: PkPHEg9bKdTZOt4h6dQ7JFAorGVNNYxfjcDHKNJLX7o=
Subject key identifier: 0F:10:53:15:13:D6:AC:12:15:03:89:05:44:13:3D:E2:89:75:96:D1
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 0199FE46D413B515FEA1CF6DDA6D70345083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0DC6
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: 9SSqyANTV2fgRDYZpbPaCEBHRtC8qygXQHyikCzcxZY=)
2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d4:13:b5:15:fe:a1:cf:6d:da:6d:70:34:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=0f10531513d6ac121503890544133de2897596d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:1c:65:20:b0:92:df:dd:4b:e8:f9:c4:eb:
09:ea:f1:e6:bd:7f:bb:61:61:94:e7:fd:e6:6e:96:
85:6a:27:27:fa:e0:04:a8:42:be:93:55:ad:1b:1a:
00:2d:43:a1:c6:d4:64:b0:22:12:46:dc:73:a1:57:
d1:e0:9a:91:51:fc:88:7c:26:08:ed:8c:17:a3:f6:
82:cc:9d:67:73:14:91:c8:1f:75:33:76:f0:c2:c8:
46:b4:45:d0:4b:a8:a2:59:11:54:ae:d6:80:13:d6:
09:b2:fd:d4:6a:85:3f:b1:6e:67:e5:57:5e:24:e9:
a0:36:b5:f7:3e:1a:f9:b6:c2:5f:f0:66:80:7d:91:
55:a3:50:a8:4f:c8:8b:92:b8:5b:37:a5:dc:42:b8:
31:34:6e:31:05:2c:e9:0f:37:89:52:d2:34:e3:d5:
06:64:dc:5d:d3:14:9c:76:6b:ff:e8:bc:79:14:9c:
14:fb:1b:04:8b:84:4f:0e:91:4c:cb:9c:1d:fc:19:
67:83:f6:fb:31:84:c3:1d:fa:14:a2:b5:24:75:2b:
75:5a:30:a4:36:f3:49:46:be:4e:a7:07:9d:df:70:
80:da:71:4d:81:51:e9:ec:c9:db:98:99:5a:5c:68:
db:a4:9a:f1:e0:04:d0:d7:c9:9d:9e:25:39:38:2e:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:53:15:13:D6:AC:12:15:03:89:05:44:13:3D:E2:89:75:96:D1
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:a1:70:3f:c2:d7:c3:64:5f:de:6b:98:3a:52:9d:17:0d:
42:ce:6f:4a:50:5f:e0:ba:7c:c4:fc:83:5e:62:36:a5:22:78:
0e:2b:9f:a7:1b:eb:90:97:17:08:ba:f9:6f:42:fa:45:73:78:
92:c9:f4:ee:7e:17:08:d3:9c:2c:4c:3b:4c:51:00:be:b9:4f:
73:80:f9:2f:4e:f1:da:9e:a9:d0:70:80:2d:2d:52:f7:12:f8:
e6:1f:58:3e:1b:b9:5b:f5:6c:fb:e3:df:bf:8b:c6:aa:4c:60:
0d:78:14:35:25:9d:55:9e:d2:28:23:ba:e0:3e:70:c6:ef:37:
4d:6e:7a:56:74:5e:7b:b4:16:0a:83:27:1d:3b:58:6a:cf:53:
73:4c:18:42:56:b0:09:f0:26:27:ad:1f:26:f0:07:59:a9:e3:
76:e2:91:f7:cd:ca:61:5b:32:e4:6c:11:80:26:b0:a9:d4:2e:
d7:de:18:9b:7c:e4:db:25:23:ac:b7:f2:a2:c2:6c:21:ab:53:
3f:8b:36:8a:27:c4:c4:a6:25:2e:46:f1:79:6b:90:54:98:03:
6d:6c:32:0f:74:34:38:1a:b2:f1:ec:8d:3c:42:cb:6e:e2:3e:
9f:a3:0e:d5:bc:a8:20:68:8c:aa:d4:bc:be:32:01:e3:40:e3:
71:bf:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:59 2025 by rpki-client