Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: pKKeP8Ft52jlIOPcaxIC8bolByo9wlxqsfAPQFoMAeY=
Subject key identifier: 05:2A:8D:89:69:D6:6A:0E:46:60:98:0A:C9:2E:06:DB:95:13:A2:12
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 0199FE46998E4D2030F1F5C906E439D4F154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 1699
Signing time: Sun 19 Oct 2025 21:01:03 +0000
Manifest this update: Sun 19 Oct 2025 21:01:03 +0000
Manifest next update: Mon 20 Oct 2025 21:01:03 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: 5FRtDf32lRA8gQjA/OtPJ2bn0vPnMxuNzt6/vXnWtqs=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:99:8e:4d:20:30:f1:f5:c9:06:e4:39:d4:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Oct 19 21:01:03 2025 GMT
Not After : Oct 20 21:01:03 2025 GMT
Subject: CN=052a8d8969d66a0e4660980ac92e06db9513a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:a6:b7:5d:15:1a:45:c4:6d:17:b0:0d:25:
24:12:28:30:ec:e7:11:75:62:aa:13:0d:70:ec:a9:
15:39:de:73:b3:64:04:30:4e:cb:5c:5a:5c:a7:64:
a7:f2:fe:5c:a0:3f:b0:5a:b4:4d:fb:d5:9a:18:27:
ec:79:ac:d6:fa:19:57:b6:d5:d3:53:6a:2f:ca:c6:
cd:46:04:5f:b0:fa:37:84:67:2b:c1:99:53:57:65:
3a:e1:e0:aa:8c:92:ca:c9:01:40:c3:13:25:14:57:
2a:e3:da:2f:30:be:66:ca:31:cd:57:65:4d:f7:ad:
3f:87:86:0d:8f:58:95:4a:cc:c3:dc:e2:5f:b6:18:
44:e6:48:84:9d:38:19:47:a0:8b:c7:12:2a:d1:1b:
1e:07:12:95:49:d5:d9:5b:10:e9:50:73:7b:28:39:
69:9a:b6:e7:02:a7:75:97:58:7a:28:82:5b:02:f5:
25:af:f6:c9:7e:c1:1d:9b:81:ee:00:19:ac:a5:29:
d1:3f:28:b6:7b:51:df:89:c3:e4:16:4b:ca:8e:35:
8c:28:9e:a0:e1:ca:3e:5f:47:17:54:3f:11:c6:80:
fa:e4:6c:b7:87:fb:88:78:ec:d4:6b:65:0b:f9:30:
6b:e1:3d:2b:b9:2d:9a:80:b6:34:4c:4f:c4:de:da:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2A:8D:89:69:D6:6A:0E:46:60:98:0A:C9:2E:06:DB:95:13:A2:12
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:94:c6:0b:b3:94:9d:0f:cd:cf:73:e6:53:11:9a:27:8d:88:
1d:d0:ee:17:e8:dd:c5:8b:8c:b2:18:6a:8f:8a:ad:71:b8:52:
d3:0b:d2:b9:47:c0:54:08:65:61:95:53:c9:a7:cd:36:2d:65:
59:28:4c:76:ca:3b:40:b9:72:62:ea:0c:58:46:61:f0:26:8f:
5b:a9:e3:33:20:c4:72:0b:78:29:ab:87:1d:67:f8:f8:a4:03:
43:3b:62:3a:3f:4e:3f:ce:fa:a4:57:fb:ed:27:39:3e:4e:8c:
74:ea:74:23:2b:c3:49:51:e9:a2:11:a6:21:4e:61:82:2f:56:
b1:2b:eb:4a:2a:ec:a6:88:71:0d:46:82:57:74:9f:02:8f:ff:
ed:1b:b0:b8:89:88:aa:69:ff:44:e4:77:6a:9d:af:b7:20:ca:
af:20:e6:ec:b6:9a:34:66:23:e7:15:0e:8e:fe:4c:a4:78:d2:
55:00:95:db:61:4c:c2:ae:99:7f:01:26:4d:64:c1:be:dc:70:
d6:6f:d3:90:7d:58:83:b9:f0:bf:3b:93:f8:39:91:2f:ab:c3:
a3:0e:69:c8:aa:73:02:d3:bc:8e:ab:91:98:c2:12:98:cb:75:
cd:03:31:cc:d3:80:f0:12:f4:16:d0:55:3c:e8:3e:63:90:b0:
97:76:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:23 2025 by rpki-client