Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: abumhlsk3B2TWaDlxmM+zhiKThTkxGAq9UIEXZYZK7o=
Subject key identifier: 48:8A:06:B3:8A:39:B8:63:79:01:35:4A:50:3C:E7:FE:90:ED:84:58
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 019A4E18CB0E7869CACF7DFA15D266D7B691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: qoKa57KvAKNRNTrJkEssGD7vR6PC0akx0SDvYDvjz84=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cb:0e:78:69:ca:cf:7d:fa:15:d2:66:d7:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=488a06b38a39b8637901354a503ce7fe90ed8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:4c:55:55:ed:53:04:62:ff:39:34:9d:26:
da:5f:b8:00:91:c5:f9:4b:d8:d0:02:74:58:e6:f6:
10:2c:b7:00:d6:1d:ed:ef:46:e7:2e:7b:4a:98:1b:
6a:cb:de:03:83:95:7f:21:51:8d:05:40:e6:f6:6d:
6f:4e:fd:0a:9f:f3:4f:bf:e9:2b:dc:5b:1a:53:c2:
fa:2b:ad:b7:2d:6a:33:64:8e:3c:d1:e8:47:97:6b:
26:43:ff:58:f2:c6:59:29:31:4b:dd:69:79:c9:d1:
1b:f5:b7:8c:07:56:26:c8:87:49:ca:84:8f:85:08:
d4:5f:cb:94:1d:36:49:08:70:de:ac:50:2e:65:86:
0f:6d:65:18:8b:26:9f:52:46:f4:14:65:78:77:52:
76:a6:97:ba:55:76:53:4c:09:72:04:f3:cf:f3:3d:
cc:8a:9a:4e:f6:13:de:87:ba:de:f6:3a:dd:e0:e1:
21:9a:02:8d:d9:92:1b:04:87:85:19:e9:e3:31:98:
17:3e:ce:3e:f3:40:71:2c:11:8a:b6:05:d2:9d:90:
96:a4:18:e0:04:be:12:8e:c8:b2:3e:4f:f9:5b:19:
c2:48:f6:a4:63:9a:99:33:3d:ee:64:07:53:65:4b:
78:7d:ee:db:db:5d:e3:d6:b3:ac:7e:4f:29:a8:19:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:06:B3:8A:39:B8:63:79:01:35:4A:50:3C:E7:FE:90:ED:84:58
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:68:3d:d6:3b:b1:2c:33:c3:07:13:cd:ad:40:95:21:07:7c:
26:fa:e7:a4:31:6b:8c:ff:27:91:44:6c:17:67:53:f8:99:dc:
52:92:e2:23:65:b6:39:0c:58:e7:1b:b2:c6:de:22:52:0d:bc:
3d:7d:66:98:4c:97:2f:48:9f:c6:84:2f:b4:ed:75:2c:f8:41:
59:dd:60:2d:fd:ad:c4:cb:2d:f0:2f:81:6f:b2:3f:75:80:a6:
1a:42:0a:b5:98:72:57:88:68:d8:4d:ba:9f:f9:59:b8:31:bb:
91:16:24:e1:7e:b9:0c:e6:e0:16:d5:91:c7:94:48:c4:60:19:
82:bd:c5:fd:4a:83:d1:62:ca:ca:c3:fd:a5:cf:22:ab:98:85:
ac:5c:79:0f:a2:ac:37:97:5f:1b:d6:10:98:55:2d:d8:49:63:
bd:9f:18:cf:9f:70:88:be:9f:80:6e:3f:dd:3d:ac:84:8e:5c:
51:b9:6b:f7:9b:71:7e:69:b5:bf:4b:1a:70:33:d7:27:e5:c8:
ab:43:65:2d:fc:e9:4f:4d:38:51:48:64:97:f5:ab:61:b8:4e:
e1:21:e5:e3:9e:8f:79:9a:eb:ca:14:6f:d8:35:c6:52:df:8a:
d7:be:d9:34:16:c9:08:33:37:eb:5d:7e:04:3d:78:0b:ee:57:
ee:95:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:19 2025 by rpki-client