
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: a0hVgSNrYY0Y3elPWrwPmt/NygxojnSgA7V7bfw3Qgo=
Subject key identifier: 1B:1C:87:D0:09:57:36:14:A3:07:C3:D7:73:1E:53:0C:4F:22:7E:5E
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 0199FC21BFB8FAE9195889D7C8BA8BCFE433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 104E
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: StQ1Ua64ZmlbHAmgMOxqhsQ2AfLWOUhHWx56BVo1C2A=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bf:b8:fa:e9:19:58:89:d7:c8:ba:8b:cf:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=1b1c87d009573614a307c3d7731e530c4f227e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:33:b3:65:a2:77:73:e6:0e:d2:87:0b:93:
c2:27:82:72:5e:64:fb:86:6d:38:91:22:b5:93:eb:
7a:06:cb:fd:45:4b:0e:f1:aa:0e:a3:d9:46:1c:26:
9f:95:2b:64:ab:4c:ed:c2:9d:f8:78:0e:a8:56:fc:
fe:5d:a4:cb:60:25:f8:67:e9:43:66:ee:4c:7a:70:
3f:cb:71:bb:05:b7:30:3d:6a:09:7f:6d:7c:05:08:
4e:c8:25:18:bc:da:48:e4:84:94:a8:8c:48:88:97:
0b:72:90:99:69:c6:a1:cf:b7:f7:de:db:f5:fb:52:
2f:88:f8:48:04:60:1d:1b:a4:85:45:1e:7e:c2:72:
c4:27:9d:e5:82:eb:70:7f:d3:49:aa:b1:33:69:f5:
13:e4:38:86:79:bc:10:80:e2:9d:11:5b:22:99:8f:
46:de:b1:fd:15:76:6b:76:8f:40:41:bf:6e:28:dc:
86:70:66:c2:17:d1:9a:f7:8c:df:8b:0a:3c:82:62:
fe:fd:7a:7d:49:38:13:c7:58:b6:78:f1:75:91:60:
30:22:b9:70:af:c0:7f:47:a6:83:be:24:2b:a4:96:
61:50:94:82:73:52:37:27:ad:0a:e3:01:29:7a:8d:
26:5a:21:1e:64:c2:d8:b1:e7:34:d6:93:52:68:c6:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:87:D0:09:57:36:14:A3:07:C3:D7:73:1E:53:0C:4F:22:7E:5E
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:a5:87:26:ee:b5:35:5c:d1:21:d7:65:e6:61:1b:bc:13:
49:d8:68:d6:72:38:65:3e:35:a3:6a:ba:98:73:1e:32:88:68:
2a:da:7d:49:3d:cb:17:1d:de:11:5a:5e:65:85:df:ee:62:df:
1f:f9:74:21:e0:0e:d8:2e:74:bd:6e:07:74:99:73:0c:fb:2f:
fe:43:67:d9:d3:d0:8c:d4:b9:17:75:47:36:db:39:3c:79:bb:
25:af:bb:6d:4d:54:ce:86:17:0f:3b:a4:9f:5a:3c:b6:f9:a1:
ef:b9:08:8e:cb:db:35:45:58:55:e6:9e:81:8c:9f:47:61:61:
ec:73:6c:da:a5:1c:91:7c:63:94:8e:1c:cd:e4:a4:12:90:4c:
fc:40:c8:cf:eb:ee:c4:96:39:8f:0c:36:22:bc:98:ca:0b:4d:
ce:fe:eb:37:72:ff:49:39:07:e7:3b:58:6e:a5:18:59:7d:f7:
a8:1e:bb:63:4d:7d:23:ab:58:8f:a3:c8:f3:d0:5f:cb:5d:6a:
d5:11:d2:a4:b4:8b:60:f4:a8:3b:f2:23:5e:f2:5e:d6:ea:87:
b8:e7:db:58:41:36:b2:02:49:3e:4c:59:40:43:08:7e:c6:b3:
17:f5:31:2a:ff:20:0b:34:44:7c:8e:e2:74:3d:2e:0c:1d:c9:
58:f5:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:50 2025 by rpki-client