Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: +nD62RDxjIMlZF9/hdfQmvg4L6MN2BaKsOsUA5v4A2U=
Subject key identifier: AD:E7:03:41:7C:CA:61:C8:D5:17:DE:06:0C:C7:E5:84:3F:48:CF:4B
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 0199FF22CA252AB5C32607F1F932A08A7982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 0239
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: 7sLKGVGT_a4aX4JcAS8Cl-dwrZk.roa (hash: IALVV6z17EuCMGIEd1EYplZQwtixCOladk+EbbZKzBM=)
2: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: /Vm9Jc193duzR7ND5eUqxM8Xkd1T213A14kpnOFiBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ca:25:2a:b5:c3:26:07:f1:f9:32:a0:8a:79:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=ade703417cca61c8d517de060cc7e5843f48cf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:d8:40:2a:6d:ba:bf:5b:34:5d:59:7c:5a:
db:8a:71:b3:d1:1c:6b:ac:25:5b:69:d4:a6:32:b6:
0c:b1:1f:76:1c:a6:3b:f8:5d:6b:04:ef:76:39:ab:
58:50:12:ea:c6:a7:41:19:f7:67:c4:82:cf:03:77:
87:49:3b:10:f2:1f:6f:ff:6f:c7:58:10:9a:8e:9f:
2f:d4:42:0e:56:07:74:4a:9d:44:c1:cc:ef:ef:60:
16:59:12:da:78:c6:a4:71:2b:11:cc:db:b1:3b:df:
22:6c:d6:bd:a9:0a:ac:1a:40:93:50:d5:ec:be:98:
30:67:00:df:5b:42:c9:c9:58:e3:8a:77:a3:f8:a2:
28:c0:a3:51:4b:7d:1c:d1:9f:11:e3:9e:61:70:ea:
35:51:84:fc:05:ae:ac:d8:31:0d:09:5f:68:d2:0a:
be:dc:74:1c:0e:1b:8f:9b:96:3c:10:07:d6:07:5f:
41:5a:19:35:5c:3b:81:ee:29:35:62:ac:b6:e2:a6:
5f:1f:4b:f3:08:01:50:8f:8d:5a:82:ed:3d:3f:3d:
e4:e0:64:4f:52:cf:53:bb:a5:9f:00:4c:f5:86:f6:
a9:64:3d:23:de:d5:97:c7:fa:39:a9:d8:50:a4:af:
2a:3a:15:8a:f5:ca:fb:f2:5a:04:80:35:f3:00:25:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:03:41:7C:CA:61:C8:D5:17:DE:06:0C:C7:E5:84:3F:48:CF:4B
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:db:90:e7:d6:b0:f6:69:ea:33:41:22:4e:f9:71:c0:a2:92:
41:6d:d9:00:ba:52:cb:12:5d:b1:0b:1d:59:bc:0b:cf:9c:51:
00:4d:0e:da:d4:71:1e:5c:2f:d1:8f:0a:f9:20:04:76:22:d6:
96:69:66:3c:0c:1b:ac:e4:90:a7:fb:54:cd:bd:08:4c:e8:e1:
bb:e0:9d:85:1f:be:79:d5:27:77:7b:21:fc:52:bd:c3:04:77:
2b:27:ed:e7:ee:14:37:4f:88:20:c1:43:f7:cb:35:97:dc:ba:
a9:56:2d:94:e7:76:c3:e1:e6:68:0c:35:ec:48:ea:70:00:41:
80:ea:5a:66:ff:4c:06:87:a8:f3:e1:26:f8:bc:85:80:e1:d5:
16:e4:6e:1a:cd:cd:8f:92:c1:ec:cb:76:6f:46:f9:cb:d8:21:
da:51:5a:24:9a:b8:61:54:8e:7e:b8:e3:64:77:28:f9:5d:32:
eb:49:d1:70:0b:af:b3:ea:35:9e:b7:80:c9:0b:83:50:6c:e3:
1e:bb:f1:e5:34:03:b8:49:fa:fa:ef:fd:27:69:07:00:c4:04:
b1:3c:fa:43:7e:75:fc:7c:5a:e2:44:5c:d3:4c:22:36:86:27:
69:7d:a3:44:ec:c3:a7:5a:94:df:d4:71:f3:85:df:d8:d8:52:
e8:3a:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:22 2025 by rpki-client