Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: l5d/2PLAduWnsDChaUWsnQYzKV+vou6qNPsD7QDtDK8=
Subject key identifier: 3F:5F:F3:14:F9:F5:82:72:BA:9A:68:E8:E4:A7:16:46:57:90:D8:11
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0198D698106157CB9A03C66640E11F68E633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: jNOvKjH/Tx6gL70VBvGA6TN1Qa+zOctfgvHqPxRnHKA=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:10:61:57:cb:9a:03:c6:66:40:e1:1f:68:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=3f5ff314f9f58272ba9a68e8e4a716465790d811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:d0:ec:9b:19:3a:d9:e3:f9:4f:71:92:d6:
ae:5e:c4:a0:9b:d2:19:66:be:70:54:ba:7a:bc:30:
38:d4:0e:49:2d:72:d6:bb:0c:69:5a:b9:b5:16:eb:
7d:b1:ac:62:e5:3c:b5:ea:2a:eb:25:b9:a7:40:77:
8a:fa:7e:53:a2:81:5a:68:95:cb:83:d7:64:a3:1a:
13:3f:33:a8:64:ab:69:b1:74:92:c8:42:09:4c:7d:
ca:bb:1c:2a:23:a0:1d:d7:71:e6:49:66:d1:5e:7d:
3a:35:bd:07:e2:58:8c:5e:54:67:3a:3f:e1:d0:ef:
a8:65:f6:09:4d:f3:79:b4:07:1b:ab:34:90:18:ed:
4e:57:db:a5:c3:6e:29:77:95:2e:28:70:3a:c6:26:
cc:78:52:9d:77:d0:b3:e6:af:c3:76:46:0a:f0:5f:
5c:d6:1d:cf:a6:cc:af:c5:21:87:ba:84:57:cd:cb:
80:d9:5e:92:a8:4d:89:d9:c7:78:6e:e1:84:5b:e5:
dc:3b:23:b2:94:21:8e:e5:5b:a8:01:d0:97:30:f3:
6f:67:bf:5b:d4:71:be:f1:fe:fc:4d:de:f0:9b:89:
18:83:d6:f6:35:65:cb:c4:e5:d0:9b:27:8f:e3:c8:
f5:a4:08:60:35:a8:c4:f5:3e:e6:2a:c5:aa:6e:77:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:F3:14:F9:F5:82:72:BA:9A:68:E8:E4:A7:16:46:57:90:D8:11
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d4:ab:b1:fe:ff:34:8e:fc:42:f1:c4:46:b5:d4:e1:b0:7a:
ec:53:56:0d:4d:51:13:c3:e5:fe:cb:88:95:ce:45:23:0d:b4:
f0:0d:f1:82:61:6f:e7:68:3c:f3:37:a2:04:39:9c:29:f1:af:
94:6e:a8:0e:51:6b:62:cc:6c:e5:65:a5:b2:73:6b:81:05:14:
cd:58:1a:9a:2d:42:fa:b9:0f:c7:14:f5:3b:a9:8d:3f:22:4c:
88:00:b5:b7:cd:5b:c5:e2:8e:a2:61:90:89:d1:2d:1e:a0:bb:
a7:d4:22:61:a5:ba:f8:b2:3c:5d:da:3d:09:4f:a3:7b:8d:81:
f7:ce:e9:67:a6:f5:8a:61:8f:d1:8b:db:c7:8f:a5:e2:79:d5:
e2:bc:2c:b4:f7:28:24:39:e8:b3:cf:51:95:f4:e2:d7:78:cf:
d4:36:71:0a:93:8b:42:8d:91:6f:8f:00:2f:44:e7:02:42:2f:
87:2d:c8:e6:1a:84:64:45:a9:27:9b:a4:c6:bd:e4:8a:45:99:
28:17:8a:e5:f0:1c:21:41:49:e0:8c:75:03:15:03:98:b1:41:
4e:ce:56:05:46:99:70:fc:a9:aa:3b:10:57:c9:da:d4:4a:e5:
8b:4c:87:93:c2:44:28:3a:ab:ad:fe:0a:e4:fa:8b:d6:f3:c3:
54:3b:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:17:34 2025 by rpki-client