Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: rRDVYBg3jAZoqqxLY1hyPXG6/JvI7NucmJ66YTy+5hk=
Subject key identifier: 2C:6B:F0:23:35:33:DD:42:D9:79:FF:66:B1:9E:30:11:A6:F7:03:E6
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019A4E866C43D13C622C63CECD54383D11B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 145A
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: avzGSCRcUgEZxx5hQuiIGEyJsqGdqWRq+fuMwPUd7cI=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6c:43:d1:3c:62:2c:63:ce:cd:54:38:3d:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=2c6bf0233533dd42d979ff66b19e3011a6f703e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:22:a1:a2:4f:62:49:db:da:50:98:54:37:
e3:de:a0:1e:7c:67:57:a4:06:cb:17:fd:c9:c0:fc:
71:29:fd:7b:b6:d7:c4:21:f6:51:ac:6e:45:59:48:
e7:0f:51:50:5e:d7:62:d8:25:0b:1e:a7:67:64:cf:
3f:98:c3:41:27:84:84:09:c1:48:ff:f7:c4:5b:64:
a1:cd:31:c3:70:4d:69:6c:28:49:51:d4:df:ff:9f:
da:86:f6:ed:f4:04:06:2c:9f:e5:e1:3b:ab:ab:92:
50:c5:de:03:dd:81:f0:e2:28:0a:e5:91:52:7c:f0:
5b:16:c7:ca:b4:0d:8e:ba:02:29:db:e6:6a:bb:6b:
c9:40:9d:d1:a4:60:cf:cb:67:eb:d0:fa:f8:65:63:
b7:a4:de:0a:96:ea:b1:28:a7:01:01:4f:6b:98:35:
a4:55:f8:19:7f:fa:65:40:d8:00:ff:44:9f:93:97:
61:25:58:20:ff:3f:0e:27:88:f9:38:1f:e5:0e:65:
60:08:1d:5f:ef:79:2b:97:db:76:79:55:11:cb:86:
bd:f8:20:b8:7e:33:2e:dc:12:c0:c7:c7:60:9d:6f:
e0:51:fb:dd:3b:a8:b1:08:8d:01:b9:da:ce:d1:ea:
a5:21:42:60:51:5d:c1:46:7e:09:09:db:e7:a6:d0:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:F0:23:35:33:DD:42:D9:79:FF:66:B1:9E:30:11:A6:F7:03:E6
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:b2:12:51:4d:ed:ea:36:7d:7c:9b:b2:e7:b4:57:3b:ec:
8d:bd:3d:0c:cb:65:ce:d6:b7:ac:d7:3d:b4:41:c9:1a:f4:51:
8d:2c:9c:68:78:e4:d7:12:37:31:75:1c:d2:b3:2f:da:37:4a:
08:df:6f:99:2c:7a:29:a6:e4:8e:a3:c0:6d:ee:09:37:d2:64:
86:d4:66:61:1f:78:18:34:e3:a0:6f:b7:e7:c7:ad:83:6d:f1:
02:c5:cf:55:77:a2:8d:6c:09:04:f2:04:59:9d:77:80:d7:26:
7b:08:c0:83:63:af:fb:a2:47:82:40:4d:2d:5a:73:6f:7d:12:
14:35:58:96:6a:46:9f:a2:a4:3b:03:b6:d3:06:41:c0:05:94:
01:d3:2f:fb:aa:53:20:e3:11:8e:e9:9b:50:5c:e5:0c:e7:10:
98:93:14:b9:f1:0c:27:47:bc:48:71:92:f3:d5:1d:31:3d:e5:
8f:a4:38:d5:cb:63:2a:c8:08:db:87:c3:2e:c4:a4:83:15:84:
77:21:27:5d:a0:34:25:64:7b:e7:80:ba:2d:5e:a2:50:e3:55:
7a:39:d9:e2:21:9d:f7:7a:29:73:09:78:83:e5:28:7c:03:f3:
ae:5f:d3:90:6c:f1:6a:0e:0d:2b:b7:fc:38:8e:1e:7a:6b:a2:
95:2e:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:29 2025 by rpki-client