Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: bBFcWdIe4WFzLrsJ3nQA3biyAkJXjXtExSojAAYHVys=
Subject key identifier: B3:01:91:BF:4E:7C:8E:69:F5:F7:C7:F0:0C:4F:8E:46:95:89:CD:52
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019A0147955324885B608919E3F1FF45C437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1432
Signing time: Mon 20 Oct 2025 11:00:59 +0000
Manifest this update: Mon 20 Oct 2025 11:00:59 +0000
Manifest next update: Tue 21 Oct 2025 11:00:59 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: /3A6SaP6aE8L7MAq7qsEELps403ICLyDdgeCVHS1sK8=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:95:53:24:88:5b:60:89:19:e3:f1:ff:45:c4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Oct 20 11:00:59 2025 GMT
Not After : Oct 21 11:00:59 2025 GMT
Subject: CN=b30191bf4e7c8e69f5f7c7f00c4f8e469589cd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d9:b3:73:33:dd:ea:08:ec:f2:1a:3e:df:9e:
bd:0e:2e:f3:c1:b4:b0:0b:69:30:d1:a3:55:4c:67:
d9:a6:a3:77:e6:86:b3:5b:68:00:1d:d2:b8:a9:5f:
6a:d1:59:60:fa:af:9b:4a:3d:0b:b8:4a:19:8c:a7:
3c:09:00:c6:35:84:49:ad:b6:74:e8:4d:84:25:af:
f1:1f:80:5d:5d:82:6c:a1:ac:b9:36:55:c9:d8:c0:
6d:bb:2f:9f:20:df:86:0f:f7:36:2a:5f:0d:50:fe:
81:1b:c3:8e:f4:ad:68:3a:ca:d8:5d:7b:8c:10:98:
88:a2:b1:b1:86:4a:c2:39:a7:7f:95:8d:51:59:51:
b1:da:44:89:34:2d:86:e8:a0:44:b2:86:8f:68:3f:
61:07:07:1e:a3:c0:a0:29:2c:51:84:c3:5e:ae:78:
55:ba:6e:44:cb:d0:11:9b:43:9a:64:13:f2:3b:90:
2f:1f:ed:7f:28:0a:5c:b1:d6:58:00:98:0b:3e:67:
d6:af:22:85:1a:e4:21:84:27:d4:ab:02:83:73:15:
81:bb:76:47:0a:14:54:d6:57:b0:4b:a2:dd:9a:98:
6b:d0:f1:94:72:18:bd:55:5c:f0:29:26:1b:88:ff:
e8:5c:9c:93:bd:0f:3c:32:c4:9d:a2:20:75:e5:15:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:91:BF:4E:7C:8E:69:F5:F7:C7:F0:0C:4F:8E:46:95:89:CD:52
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:20:ac:be:3c:7f:3e:a7:00:03:c6:39:db:de:c5:01:e3:
3e:d6:61:f3:b8:5a:67:e6:23:62:63:d1:4c:d6:be:24:72:e0:
f9:42:90:65:a6:c5:4b:53:0a:81:7b:96:fb:3c:6b:90:79:59:
d6:66:99:a6:1b:68:23:20:39:20:80:6d:b6:08:f1:a5:51:e7:
18:7b:18:6f:94:16:8b:f3:a3:72:0f:63:c1:56:9c:12:e5:b3:
f7:63:46:a0:c0:e0:e8:c2:eb:2e:d7:6e:b3:dc:e8:94:3e:82:
2a:82:05:38:53:31:af:0f:6b:55:98:65:c2:68:aa:01:ff:46:
4f:08:a1:62:b6:c0:57:8c:00:a4:45:04:6a:dc:44:ef:75:da:
b7:f1:2e:26:d0:12:fa:ed:c5:fa:e8:ba:b1:e1:1f:fd:0b:4f:
bc:4a:24:6d:3e:3d:e7:4d:13:e5:74:c0:9f:61:84:a7:86:ce:
80:33:b2:59:1a:71:fa:f1:66:d7:24:5a:4e:5a:53:60:03:73:
d5:69:a0:56:f4:d3:4c:c1:e6:ec:55:7d:a8:59:1d:23:7f:e0:
ca:73:a6:ac:1c:57:90:97:fc:3d:f7:bd:c9:ff:49:5b:e6:a2:
bd:41:15:04:d8:dd:a5:ce:f9:54:2a:02:e4:7a:0b:05:5e:06:
3e:5f:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:22 2025 by rpki-client