Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: cyhagyZHUistGreqAEYqccK75LvTWXXilyCOpVK5IUY=
Subject key identifier: 6C:91:89:91:BC:33:2A:F0:2D:38:DF:63:9A:CB:10:BB:46:A6:96:CA
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 019A4F2B8DFC0890B9F7206F2E68E6BAD5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:45 +0000
Manifest this update: Tue 04 Nov 2025 14:00:45 +0000
Manifest next update: Wed 05 Nov 2025 14:00:45 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: FqBTQdcs6wRHN4Qlzf3L5EOLcOi5slwHOznv23VqsAU=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8d:fc:08:90:b9:f7:20:6f:2e:68:e6:ba:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Nov 4 14:00:45 2025 GMT
Not After : Nov 5 14:00:45 2025 GMT
Subject: CN=6c918991bc332af02d38df639acb10bb46a696ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:7c:cb:a9:70:3b:6a:0b:7d:90:41:93:c6:
be:da:1e:43:74:38:a2:95:a6:da:a6:ef:d6:a6:53:
18:51:27:85:57:29:f9:4a:e7:2e:de:39:6b:98:95:
87:7e:c5:fb:9b:00:46:a8:86:6b:76:94:47:37:4d:
44:0a:e6:0b:00:80:bf:2e:69:f3:36:fe:bd:cf:00:
a3:b5:88:7e:2c:b6:a3:67:5d:bb:0b:49:d9:54:34:
4b:a1:b2:93:02:44:7b:bf:55:a6:d3:f0:d1:9a:da:
c9:bc:74:94:5f:46:64:dc:04:e5:49:ca:3f:82:40:
31:bf:50:3a:d1:50:eb:51:c0:6f:f1:6d:63:b8:2a:
71:43:f2:18:01:b9:1a:f1:69:b9:d8:b0:d9:95:7d:
91:95:48:8c:c1:26:58:33:67:04:2d:72:69:14:3a:
77:e8:de:55:31:a3:24:7d:06:fd:fb:6c:f2:01:c1:
41:08:0c:dc:3f:fb:60:30:5c:51:7b:90:b0:f1:d7:
79:5f:0e:8d:1d:d3:c4:57:a6:0a:4e:6a:a0:3e:01:
20:33:11:aa:ed:75:c8:cb:a5:63:6a:a2:e0:48:f0:
ac:e5:4f:b6:fe:57:ad:6b:b5:58:4f:5e:b6:08:6a:
4c:79:a2:f9:16:7f:05:06:fb:e8:a3:74:27:10:b7:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:89:91:BC:33:2A:F0:2D:38:DF:63:9A:CB:10:BB:46:A6:96:CA
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:1b:f6:cd:9d:5f:63:f4:4c:30:d7:85:83:e9:18:65:f0:
1a:1a:84:fd:14:1d:47:74:08:30:f7:b5:67:a4:4b:c2:dd:8d:
3b:ff:50:7b:5a:3c:6b:9d:e0:a4:56:08:e7:5b:0f:f4:b9:44:
f9:02:e5:77:62:7e:c3:cf:86:38:ed:9c:d5:39:86:17:aa:ae:
83:0e:21:5f:d3:80:7b:55:ba:91:c1:bc:a3:ef:00:3b:b9:07:
3d:a0:2d:b9:be:50:e0:a1:9a:f4:85:a9:16:33:25:34:4a:bc:
d6:ff:72:7a:7f:1c:98:5c:dc:da:74:07:d2:ea:bd:21:1e:10:
8e:b8:24:7e:2c:fd:06:35:24:58:6c:22:1e:c9:d0:63:d0:6a:
77:51:0f:36:6d:07:45:82:b7:d0:84:4a:5e:86:e6:6d:94:e0:
44:1c:bd:dd:03:06:21:10:b0:c6:3a:01:c4:bc:72:98:f7:ff:
0b:66:60:c1:ce:fe:f5:5f:09:fd:f9:78:51:11:27:9e:48:36:
8b:65:58:62:d1:34:b6:2e:03:45:4a:0d:a5:bd:74:20:68:70:
89:66:2f:f9:23:4a:51:22:7d:95:39:99:88:c4:17:ee:0b:27:
b3:61:04:75:dc:79:29:2b:1b:d2:85:2e:6a:b0:ed:ef:0d:6d:
28:1e:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:05 2025 by rpki-client