Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier: O1Gi4dQ1BsEQQStR2ru4osoQybv7i5tqtfzfXQ52wvQ=
Subject key identifier: 08:9D:1A:8F:2A:7E:51:65:FD:79:0A:3F:7E:9F:F5:79:C9:08:EF:DE
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 0199FFC859AC44F70ACE19AE071C112DA00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number: 0CD5
Signing time: Mon 20 Oct 2025 04:02:24 +0000
Manifest this update: Mon 20 Oct 2025 04:02:24 +0000
Manifest next update: Tue 21 Oct 2025 04:02:24 +0000
Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: tFE18ldcZj+zdxoEvuRpf59qIujPr/dJOkikb0mFAV4=)
2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:59:ac:44:f7:0a:ce:19:ae:07:1c:11:2d:a0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Oct 20 04:02:24 2025 GMT
Not After : Oct 21 04:02:24 2025 GMT
Subject: CN=089d1a8f2a7e5165fd790a3f7e9ff579c908efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:93:74:14:73:b5:5f:22:30:db:73:bb:b3:
4c:84:aa:4a:1c:a7:5b:9c:7c:f7:4f:28:37:71:b4:
0d:1d:cf:f1:04:96:d1:79:29:95:fe:cd:10:2d:c7:
c8:13:47:f6:77:21:19:71:04:dd:d7:56:ca:97:09:
8e:14:32:ed:7c:b1:3d:39:87:ba:fa:09:c2:3f:86:
6a:1a:eb:bf:e2:eb:39:23:6e:9f:64:c8:d7:1a:8f:
3a:09:b8:41:c1:c2:ac:05:38:78:57:90:91:eb:92:
59:a2:bc:18:18:51:9a:ea:6a:f5:8b:e2:9f:c7:d7:
db:3f:27:21:39:75:12:4c:f4:a2:be:3b:60:69:ed:
d8:46:56:c2:53:c2:b4:99:5f:28:b5:d2:82:95:11:
71:b8:24:7e:1e:52:ba:3e:a3:45:7f:fc:c2:c7:d0:
03:b3:57:c1:0e:25:ae:1e:cc:53:3b:66:23:10:ff:
eb:02:c6:51:d0:61:53:4b:bd:dd:5a:f8:0a:c7:09:
8c:54:b2:2f:81:0e:3a:37:bf:23:c3:cf:f0:e5:5e:
5e:a8:b9:b9:47:88:fc:6f:34:bb:43:23:67:e2:4a:
13:6d:22:76:82:9c:fb:e3:45:84:92:2c:33:09:10:
f5:04:c2:80:a5:3d:e8:54:17:e7:05:bf:ed:72:58:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:1A:8F:2A:7E:51:65:FD:79:0A:3F:7E:9F:F5:79:C9:08:EF:DE
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:8d:68:42:4d:a9:db:17:72:a8:fa:83:03:95:2e:7a:9a:
9f:60:e1:90:b1:5e:a2:85:de:68:9c:3c:b7:5f:52:db:35:0c:
95:e3:c9:36:59:3c:49:24:1e:86:e5:7c:fb:2a:bb:d0:b3:b2:
c6:a7:46:6a:f0:f9:77:74:52:e2:68:6e:e5:1c:c5:b2:70:7c:
8a:c5:93:d1:f9:42:20:34:18:e2:0b:cf:50:06:4f:06:79:dc:
e6:38:a4:3f:db:49:48:03:2e:eb:09:42:1c:fe:5f:22:f9:4f:
6c:dd:ea:46:eb:95:34:af:cd:c8:03:75:30:c0:7a:a0:96:38:
de:8a:2a:ef:eb:f9:08:22:17:58:ce:e6:44:07:2b:b1:1c:bc:
e6:36:4f:e4:43:97:45:bc:69:12:19:9e:70:89:e3:33:4b:1a:
5d:ca:7f:63:ee:84:1e:79:1e:2c:c8:32:ca:06:b3:fd:76:48:
1b:8b:5c:53:27:93:54:2e:36:c8:00:25:3e:af:8b:fe:e6:df:
ad:ef:1a:47:ef:98:d9:6b:25:cf:dc:27:69:be:5c:37:11:e0:
1a:ab:2b:4d:d7:55:68:70:5a:1e:f2:ba:26:05:43:54:05:a1:
bd:60:b5:8b:77:b8:28:0e:54:48:9f:71:c8:62:18:72:73:2a:
bd:af:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:53 2025 by rpki-client