Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: dkKTOGVam5vxCR2QpnputtsJJUMxTNUjLpSDk8WfzEM=
Subject key identifier: B2:43:6E:10:F0:B7:56:00:25:EF:2C:FA:15:53:8C:08:D5:C0:11:2C
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 0199FD6AF0ACE01DA866ACE9D2D1E6AA555F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 01E8
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: Z+1CE1N0e/6dICQgY8sWsNYZnrK7Y9WNCPM5NqVjMy0=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f0:ac:e0:1d:a8:66:ac:e9:d2:d1:e6:aa:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=b2436e10f0b7560025ef2cfa15538c08d5c0112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:99:2f:1a:70:41:30:a5:2b:9d:f4:68:ac:
1b:48:1d:d8:8d:6b:3d:cb:e3:dd:78:f4:95:4a:10:
ef:b3:1b:82:6f:65:df:cb:ea:fd:1a:97:33:55:cd:
57:4d:49:5e:c4:7c:26:55:24:f5:3d:fa:1d:e8:03:
a8:0a:e3:20:47:8b:f7:59:f5:71:71:9e:22:07:de:
d2:ca:a6:e7:28:62:ef:ee:5e:9e:66:51:c9:79:a1:
2e:4e:d8:33:b3:11:7d:68:c9:90:37:a1:ae:66:c8:
6f:0d:ba:8c:5b:f8:72:80:33:4f:65:53:eb:8a:16:
10:41:39:bb:c5:a3:b9:37:54:7c:28:03:38:98:37:
7f:0f:f1:44:7b:11:64:3a:5d:02:b5:61:85:58:c2:
bb:ec:f9:5f:0a:1e:3f:99:26:b4:9d:62:7d:9f:47:
71:86:04:d2:ed:77:93:ac:36:1b:0c:84:f5:bc:32:
1c:90:4a:ee:20:6c:64:0c:fc:ac:f7:5b:4a:09:2c:
93:20:bd:6c:8a:48:d6:e5:81:c6:7c:f3:4c:26:c8:
ce:b4:15:ca:6a:6a:b7:21:ab:99:6f:15:5f:58:a0:
6f:00:4a:0b:02:aa:75:7f:f5:c7:7d:93:82:6b:0a:
8c:74:64:86:4b:37:1a:26:88:0e:9c:5a:dd:32:5b:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:6E:10:F0:B7:56:00:25:EF:2C:FA:15:53:8C:08:D5:C0:11:2C
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:51:b3:64:01:b6:8a:16:86:1c:9f:77:1b:b1:dd:9c:97:82:
3f:9b:77:4f:38:1a:49:e4:d9:d1:a6:3a:3a:42:bb:0e:22:ed:
96:93:58:8e:ae:b7:85:c6:d7:de:af:fd:ec:b6:80:62:11:15:
60:02:7b:c6:47:44:83:d2:53:0b:47:7f:55:db:10:63:b4:44:
05:d3:ef:70:4c:a9:be:ab:2d:b7:56:c1:4f:6d:ad:4d:29:80:
80:79:cb:75:17:ca:25:93:19:d1:4f:86:99:a4:b9:c9:73:59:
95:62:c1:9d:63:95:3d:d0:40:0d:14:57:1d:5b:0c:40:52:4d:
40:d4:c6:dd:be:95:c7:fb:35:21:8a:8c:80:c6:a7:56:a1:44:
db:07:71:f1:ba:00:e3:5c:c9:01:24:7d:ab:96:2f:50:cc:85:
7f:40:59:d4:d2:0d:0d:e5:99:99:be:5c:a1:54:b6:0a:a7:85:
98:aa:a3:4f:0c:a2:75:54:e1:53:7d:ab:1c:02:e3:f4:26:46:
85:43:c1:16:f9:b8:ad:e6:39:78:16:fe:0e:5a:12:ff:9a:2a:
72:b1:09:52:84:24:cd:ec:14:c8:13:e3:0f:30:d1:37:c6:2a:
09:7e:aa:b7:b6:3f:b9:49:a2:ca:01:27:d8:2e:b2:4a:f8:6e:
cf:2a:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:46 2025 by rpki-client