Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: Abtd1xyKxM6vIaiDwluNyUbWk00R1iZLP+SHlekQ9j0=
Subject key identifier: D4:A2:7A:AB:63:A3:60:79:96:6C:49:B3:70:D9:26:B5:B3:97:38:0B
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 0198D5F1B4E74BCB91D7C4F9304F70E227A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 014F
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: Gxfu5yB2XAHuBHiedDWs9C+8I97dOk1ey4/ePqGecG0=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b4:e7:4b:cb:91:d7:c4:f9:30:4f:70:e2:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=d4a27aab63a36079966c49b370d926b5b397380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:30:1f:24:b2:d1:38:11:f4:5b:a9:55:a3:
eb:10:81:91:24:11:91:2b:e3:bb:2c:95:62:85:6c:
cd:8b:8e:c3:ce:2b:dc:0a:e4:ea:37:88:10:f8:85:
78:11:d5:f3:78:f8:5e:0c:03:eb:d1:aa:44:f8:cf:
f3:58:a4:31:71:52:34:9a:81:c8:db:5f:c4:ba:fd:
05:2e:ed:96:cf:96:7b:cc:88:8a:ab:29:a9:2d:8e:
90:8e:78:a0:04:41:bb:2c:b6:b5:22:ea:21:e7:d2:
c7:b5:ec:ac:9d:9c:32:54:05:e3:83:04:a0:97:c2:
dd:4d:95:a0:ea:84:3f:71:76:3f:fc:e9:6e:4b:e7:
f7:7e:ae:9d:fc:23:95:9f:e5:27:9c:fd:08:08:07:
a9:f6:a5:7d:f3:6e:89:5b:85:c0:51:33:ee:b4:f8:
55:45:59:42:12:e1:c2:21:66:c8:93:db:78:cc:28:
2a:dd:a8:b7:20:6e:71:dc:8e:70:f2:43:7a:98:17:
fe:eb:8e:96:11:5a:69:2f:34:4a:13:a1:ca:6f:4f:
26:d0:b6:c5:73:0e:a1:37:70:ef:fd:c9:6d:f1:a3:
6f:7f:2a:44:31:1b:c5:99:d2:49:48:f5:9e:13:42:
bf:ab:69:65:4f:95:28:63:e5:cf:26:8a:bf:fe:bd:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:7A:AB:63:A3:60:79:96:6C:49:B3:70:D9:26:B5:B3:97:38:0B
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:9f:09:4d:28:92:f4:ca:18:0d:f5:c7:9a:81:57:d2:ce:
56:41:25:00:63:ca:b7:d3:4c:a9:d5:09:c9:4e:b4:4e:bb:30:
3c:c1:f7:9e:cc:29:94:1f:c8:ce:d3:50:20:05:b7:cf:90:10:
ba:44:35:8e:62:68:28:a1:35:41:a8:fd:d1:df:f6:dc:cc:fb:
e1:89:57:c0:78:1a:ef:b4:bd:ba:5d:6c:99:4e:be:64:cd:49:
0d:63:32:4c:d3:38:0f:3b:96:c1:2e:3c:d4:e4:37:8f:98:55:
f0:cf:0c:e5:48:ca:d3:9b:62:bf:2f:6a:06:f0:e9:ae:d1:55:
a6:03:9d:a9:9b:54:d5:24:d5:2e:14:8c:e3:24:f1:0b:3d:1a:
44:e1:9f:07:8f:c1:84:a9:74:80:59:c4:44:62:60:70:7d:32:
04:f2:7b:f4:57:a8:16:4b:a3:80:b4:89:d8:95:f8:4b:7b:b6:
3a:67:61:06:df:6d:4f:5b:dd:92:7d:d7:92:5e:d3:df:23:e5:
6b:08:12:17:d1:bf:1d:81:28:ea:8b:38:1f:b5:ed:fc:46:85:
74:ca:82:82:30:f6:d1:10:d6:67:82:16:bd:6e:d2:0c:21:91:
9c:f8:5c:b5:46:ee:84:0a:32:9f:9f:94:94:73:20:c2:1b:9c:
08:af:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:05 2025 by rpki-client