Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: peWfokbXUjl0wpJbfMxhk9rdwnalLtAXCqUUJAIWVS8=
Subject key identifier: F3:A8:33:0B:5C:57:87:78:45:0E:AA:DF:92:DF:EF:34:BA:72:BA:23
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 0198D5161FF7C3DAD5B98794FAD2FE4B8463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: Yeyv9D8ssTnIA4dbRbb4QAWs11gSoYDbCiu6tIbgGNI=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1f:f7:c3:da:d5:b9:87:94:fa:d2:fe:4b:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=f3a8330b5c578778450eaadf92dfef34ba72ba23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:4e:ca:64:12:3e:03:02:26:e3:d5:2f:91:
fa:00:7c:7b:08:e0:2a:ac:a8:f9:9d:5e:fe:61:80:
2a:a5:48:80:ac:f0:70:5d:be:da:da:f6:63:f7:03:
11:42:e1:5c:29:28:e6:c6:73:6b:61:d8:3f:7d:19:
1f:9c:4d:0a:b2:b1:d4:78:d5:1c:5e:07:08:b3:b1:
b7:46:09:d2:f8:55:46:2d:1b:6d:85:2a:ee:76:5d:
2b:7a:39:e5:93:0b:82:81:c4:c6:97:bb:9a:ba:d7:
27:30:8b:44:22:dc:38:2e:5d:98:1e:ad:4c:96:6a:
2d:e8:3f:d9:49:8d:17:9b:1a:05:3c:de:8f:70:a5:
80:e6:67:a7:72:a8:b0:e6:62:23:66:1f:4a:a7:04:
c6:d9:97:91:ef:35:77:11:22:07:ff:9a:5d:94:3e:
a7:6d:2a:33:2d:55:da:89:85:cd:86:aa:ca:47:84:
27:4a:77:0d:72:d9:63:90:a5:3d:f3:a3:4a:3f:a6:
18:5b:fa:de:03:83:e7:4f:56:9d:b9:68:65:3f:d4:
c6:4f:e0:19:22:fd:ee:fe:a5:b1:82:eb:bc:fd:7c:
f9:6f:bc:e0:f0:8e:20:04:a2:78:54:37:cb:74:ab:
2f:38:b2:16:69:19:cf:7a:0c:6f:c8:85:c8:63:ee:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A8:33:0B:5C:57:87:78:45:0E:AA:DF:92:DF:EF:34:BA:72:BA:23
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:27:49:a7:bb:af:26:06:30:36:5e:7d:71:55:8d:38:f8:69:
3f:86:68:41:32:29:85:22:15:13:0d:9b:73:8c:48:69:f6:fb:
55:f8:9d:43:68:83:6a:c6:4c:ed:fe:4e:76:30:12:4f:2f:c2:
33:67:68:29:bd:80:5a:d3:b9:1a:29:6d:87:0d:1a:18:e1:78:
0f:89:cb:3e:0b:d3:20:3f:78:37:74:c8:c1:78:6b:09:30:7b:
a9:8c:52:06:2f:cd:30:07:d4:a3:e1:df:a5:ef:55:c9:1b:c2:
aa:df:59:c1:ce:91:20:e0:47:6a:d0:8f:98:42:74:4e:c6:b3:
01:7d:9d:73:6f:59:33:89:51:ed:f0:e4:f3:bb:6c:31:ec:f1:
d8:8a:f8:08:50:5f:9c:e4:4f:b7:87:84:e7:f2:e4:ae:00:14:
c0:df:6d:40:89:dd:56:b4:78:62:a6:6e:75:7b:00:0e:62:8a:
d9:02:24:fc:e4:c3:44:59:d5:e7:3d:5f:ae:21:fc:17:fb:8a:
2d:1f:e0:62:bb:23:42:4b:a6:79:33:54:50:eb:85:2b:99:a6:
d4:f3:0b:32:09:e9:50:ee:fa:ba:79:fd:cf:6f:7d:ed:5a:ad:
76:c4:db:97:d4:13:9a:f1:82:56:a5:c0:bc:c4:d9:6c:d3:c5:
c0:fd:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:46 2025 by rpki-client