
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: 9bV2UeNzuaa+B5kEwYIGUptGEhDA8akI0pLp6VZpBeQ=
Subject key identifier: 91:61:FC:58:54:03:63:3D:1E:B6:8A:2C:8B:0E:99:5A:96:61:1D:74
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 0198D4E0B53A5EB4A5D302A8096D15B1EBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 15FF
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: 7VZk6yIPU4QChWT9U7lhYpAfX6TfP+9W55ALp7mS2l4=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b5:3a:5e:b4:a5:d3:02:a8:09:6d:15:b1:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=9161fc585403633d1eb68a2c8b0e995a96611d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:c9:b1:18:8e:e4:63:10:bd:44:e7:d1:7f:
bb:22:4f:b7:f7:7d:2d:b6:cc:4b:ac:06:d6:a2:e5:
35:a8:e1:48:7b:47:67:d4:85:05:c1:0d:45:44:e8:
22:59:d4:10:45:41:a1:53:b6:ca:12:68:32:9e:aa:
4e:3c:29:15:9f:ab:10:86:c7:1f:c6:61:a8:e0:1b:
e3:ad:d6:2e:62:76:08:84:34:4f:a6:26:9e:34:97:
a5:7c:ab:35:7a:84:1b:e3:56:28:9a:90:4e:b6:c4:
96:91:fd:8c:c7:d3:9e:6d:8f:45:f0:8a:3d:a1:34:
d5:a0:a4:47:11:9f:b2:49:86:5f:b1:54:57:d3:99:
d6:53:d6:50:0c:cb:0a:a2:cb:8c:4f:cc:69:89:34:
07:2a:98:7a:cf:1c:e2:88:87:3d:67:cb:33:97:05:
24:7a:17:35:5f:23:62:81:ec:17:55:ed:72:09:92:
b1:0c:ac:ee:14:ce:25:07:39:f5:b2:3a:f4:91:90:
34:f0:eb:63:f6:c0:24:62:47:92:2b:3f:9a:ad:ed:
c1:c1:38:40:27:a7:db:cc:0a:b4:ab:c9:58:c9:5f:
ce:36:ee:db:57:8d:20:36:f3:ef:ae:c5:05:cf:65:
65:fa:49:34:71:eb:71:6d:96:d7:c3:fb:66:d4:0d:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:FC:58:54:03:63:3D:1E:B6:8A:2C:8B:0E:99:5A:96:61:1D:74
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:4a:73:a5:5f:f6:04:54:ae:a1:cf:f6:56:8b:2b:18:15:
fb:bd:f2:f1:47:3a:72:a0:34:47:d5:66:ea:b4:9b:30:53:1b:
cf:4a:00:fb:33:d2:3b:9e:ee:e4:73:66:1e:f5:54:a6:94:ee:
c7:50:87:94:05:26:7f:a2:ec:99:94:d4:2f:8d:53:23:07:21:
ab:ee:19:b6:81:7c:ca:70:df:1e:62:24:c3:9f:0c:15:51:c0:
44:fd:63:02:0b:a5:e4:2e:8a:b8:a1:1d:11:7c:0e:a8:03:db:
7d:ef:f7:de:d9:4e:f2:ba:80:a7:9a:92:68:0f:09:93:95:bf:
af:08:92:b5:44:b8:28:16:d6:0d:10:69:8e:3d:1d:f8:90:7d:
61:1b:29:98:d5:f9:f2:b2:02:ea:96:0f:35:2e:40:9b:1f:d4:
4b:61:e4:6d:79:32:59:17:db:c2:0f:da:0e:10:d7:2a:b4:28:
ed:35:04:3e:6a:7e:2b:c7:3e:ca:ce:4a:17:f8:d5:3f:19:e8:
57:07:a2:dc:44:5b:55:ad:23:95:7c:fa:4f:ec:db:bd:7a:b9:
d0:86:fa:b4:c9:3b:8f:72:18:a9:52:37:dc:e4:4c:16:b4:e2:
c5:8c:02:38:77:02:d1:39:df:b7:64:63:ef:ee:7c:7f:81:8a:
3a:fe:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:40 2025 by rpki-client