Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: H+zINIxtDwtvamPxzeNRbx/hpHSVXBbFuTJON02HS/o=
Subject key identifier: 80:E3:34:7E:E7:A5:F5:5A:DA:75:35:03:EA:80:3F:A1:BD:51:BC:47
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 01987418CA470E6A620386AC3206EE7467AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:00:38 +0000
Manifest this update: Mon 04 Aug 2025 08:00:38 +0000
Manifest next update: Tue 05 Aug 2025 08:00:38 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: a3Ffrr3oq9QDINjWgyPYZxMmeytnekVoFRsxTiFsn7I=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ca:47:0e:6a:62:03:86:ac:32:06:ee:74:67:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Aug 4 08:00:38 2025 GMT
Not After : Aug 5 08:00:38 2025 GMT
Subject: CN=80e3347ee7a5f55ada753503ea803fa1bd51bc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:e1:e9:31:62:af:da:6d:74:00:71:62:1d:
23:05:c5:b0:59:ae:58:4d:08:b9:33:9a:a1:fa:e8:
f5:a8:03:0b:28:02:2f:fe:18:3e:a5:bd:06:6b:58:
d9:05:54:c4:4d:43:df:27:af:4c:06:c5:76:0d:48:
ba:1e:40:cd:57:18:a8:61:c8:90:0b:3f:18:37:be:
03:18:31:4b:6a:61:6b:e1:85:b9:0a:c8:72:9e:8b:
86:9b:12:36:4d:8a:ae:92:be:aa:96:b5:dc:c0:81:
11:31:ab:6e:73:52:71:70:aa:3a:28:b5:73:f7:d1:
bb:68:27:a6:e8:90:d1:cd:c3:e8:10:ab:a8:fb:2f:
15:d4:55:e6:14:85:41:37:ca:6b:6d:ed:f8:fa:8b:
d7:4a:7a:de:77:9e:3b:48:c0:68:7a:b1:33:f8:42:
fc:48:56:77:b9:33:6e:15:9e:a2:67:a4:a6:bc:71:
a8:49:22:0b:c0:88:39:cb:fd:78:86:22:33:5d:d0:
d8:9a:97:a1:4c:5c:82:3b:80:02:7b:10:57:30:d3:
88:da:22:fe:7e:9a:3f:7a:d7:e9:85:d4:78:af:79:
bf:39:9e:0b:49:16:5a:32:c1:27:64:21:34:11:36:
bd:ec:ae:a2:df:02:81:2f:45:2f:6e:16:4d:05:94:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:34:7E:E7:A5:F5:5A:DA:75:35:03:EA:80:3F:A1:BD:51:BC:47
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:a1:11:48:78:11:01:97:66:2b:51:75:7c:b5:b7:fe:48:c0:
fc:c6:3d:8b:87:79:3d:23:5b:ec:eb:39:6e:ec:86:4e:f9:98:
2e:8f:bc:31:10:97:32:2b:3a:aa:85:0b:4d:00:3b:2b:20:c3:
9b:de:a7:fa:32:d0:60:f4:3c:0c:ca:e8:b2:53:9e:ab:74:2c:
2d:2c:6d:5a:4a:aa:0e:24:1f:67:58:29:0f:2d:8a:ae:a6:90:
9e:09:e9:fa:22:f6:3b:17:11:16:de:75:f7:83:76:36:14:65:
16:08:12:11:cf:9b:23:ef:78:c3:31:2c:32:ed:72:74:23:ae:
0d:56:55:4d:db:1d:da:57:38:4d:36:41:8f:a2:e6:9c:a9:5b:
96:44:36:84:65:91:87:0b:f2:98:29:33:5f:e3:b4:3a:ab:62:
98:6e:1f:9e:66:70:ec:cc:6c:10:52:62:17:d2:f4:6c:b1:d9:
93:69:4e:de:fb:ef:e5:a9:14:aa:de:e0:24:f6:7f:ba:46:60:
fc:1d:36:8e:4f:02:cf:f8:2e:ff:9d:ae:09:16:b6:47:ed:c8:
7b:a3:08:b7:8a:36:39:c2:0e:fe:78:55:e8:6c:77:4b:90:1a:
8d:c9:3f:f2:29:85:6a:80:3a:9f:37:58:9e:4a:c2:22:62:bd:
a1:69:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:05 2025 by rpki-client