
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
File: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft (raw, json)
Hash identifier: Kz5pa6CPZPcZAJ/CZlmY5bfh60sdiOPcpdFekIGrTWQ=
Subject key identifier: 98:92:FB:9E:70:58:2C:9F:DD:38:40:92:74:A6:99:9C:E6:12:EB:78
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 019A559B71C649505CC7916534909765D801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 20:00:41 +0000
Manifest this update: Wed 05 Nov 2025 20:00:41 +0000
Manifest next update: Thu 06 Nov 2025 20:00:41 +0000
Files and hashes: 1: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl (hash: NcqLVm2ZnWZIcdmQ9TO5tdOPhG1KQV0uUpVErrc/7jc=)
2: HKyKcuG2QNZXVCZbzlsSYd8S3kw.roa (hash: WsComY/xpr7CRKjl1OS19nvkdUYgY57xLKmt+FoyLxs=)
3: NMYTYXjVSSW_zjS5UcL1_MJYMhw.roa (hash: sb8TB9OQXYjgHET+s0jEt1SW4MRtm0F3nj4wUyz73j8=)
4: OL6AoyvltIWrfared4b30q9zkxI.roa (hash: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=)
5: cdvkytGTuhzfI_n3jlQrgir1LVg.roa (hash: bDSSCJ1WplO8Ib0UIaI2qA5CZAt1v6VMlLCWW3FIaSk=)
6: jLAxUa8xvZ_xtGFLN3MZzH02ngY.roa (hash: 2KcY9b/rNpgICtwXDDn50o8m8wTGL/9zVFvIOuzYcZI=)
7: jwz6PrQFhFvB8Ouuwat3y2nONuA.roa (hash: TxTry85XsPky+PSHHeTZJCkAX90hbYBwkf2e2x38QSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:71:c6:49:50:5c:c7:91:65:34:90:97:65:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Nov 5 20:00:41 2025 GMT
Not After : Nov 6 20:00:41 2025 GMT
Subject: CN=9892fb9e70582c9fdd38409274a6999ce612eb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:5f:33:b3:21:9c:1c:f6:c1:69:8d:fb:f6:
cf:54:1e:01:7d:9f:55:06:a2:1e:83:4f:a1:0b:8b:
d9:3c:50:6c:ad:88:dd:83:a7:1b:8d:94:32:cc:7c:
59:16:97:08:d0:9c:b7:ee:4d:21:57:48:df:d4:d9:
8a:8c:91:6e:c7:e3:b4:ca:93:d1:8a:51:5b:20:2d:
90:10:c6:28:c2:35:67:ef:a6:04:60:d3:76:38:88:
81:32:b1:14:fb:11:5a:73:0e:e5:09:4d:08:49:9f:
d6:16:99:c0:5f:50:86:8c:51:32:7f:1c:19:20:a9:
c0:a5:77:ec:e5:7b:79:b2:72:32:5a:8b:a3:8a:61:
11:d9:ff:3b:26:d1:2d:ed:bb:14:03:55:7b:1c:98:
85:4a:29:eb:fc:4a:ad:90:b0:6e:41:dd:5a:98:d3:
52:94:07:61:cd:2d:67:cf:a4:9a:85:26:dc:56:f2:
fb:7a:99:24:6d:1e:3f:7a:4e:05:5f:8d:cb:e8:c1:
90:1d:ed:4f:e7:3b:e8:de:22:3b:75:b9:a4:07:16:
d6:b5:5e:43:0f:fe:95:1c:67:34:c4:6c:78:e1:72:
39:ff:ac:8d:d4:0d:60:4f:8a:f2:b4:7f:10:21:d4:
08:dd:75:86:52:59:89:df:b3:8e:4c:af:6e:3e:2b:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:92:FB:9E:70:58:2C:9F:DD:38:40:92:74:A6:99:9C:E6:12:EB:78
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8f:c4:42:23:d7:f7:e9:a8:49:3c:df:1d:e3:8a:60:21:24:
66:ff:46:12:64:e6:2a:58:94:1b:13:40:ce:c7:be:2a:b2:bf:
24:3a:c4:bf:f0:c5:55:c9:5e:41:df:75:30:07:2e:43:48:04:
b1:9c:5a:e1:73:98:cb:7d:84:cf:76:c5:6b:ca:7d:3d:ec:7a:
ef:6e:c9:00:3b:9e:d9:34:cc:5e:32:dc:e7:8a:f8:8b:bb:b1:
b4:06:11:cd:1b:16:cf:b3:80:25:31:c8:7a:50:fd:9d:4c:ff:
19:c8:4e:35:35:2f:98:48:0f:3d:7c:91:c9:59:88:6c:fe:b1:
0c:22:ab:1e:ae:5b:20:c0:9e:6b:a5:57:a4:c5:93:01:52:83:
b5:94:ad:a6:11:c6:8a:2e:cb:17:ff:14:d2:08:2b:37:3a:18:
46:5a:43:07:7b:90:51:6b:5c:de:53:e6:d5:fa:6b:33:3f:a9:
00:11:14:a2:60:00:1e:40:f8:e4:05:ce:cb:d2:4f:3e:82:0f:
46:1c:39:7b:3f:96:23:77:56:8e:72:40:63:b0:b7:37:db:89:
f4:96:28:75:e3:dc:c8:a0:1f:dd:ad:76:4e:0d:1f:39:13:c4:
5b:05:f7:2a:00:94:20:53:e5:81:fa:ae:a7:42:3f:18:c8:c9:
29:8d:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:16:01 2025 by rpki-client