Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: ChD+HiW9YnsWC0YP3b74bBaJBoxOd8wV51ZQgoEuifo=
Subject key identifier: B2:48:A7:A8:99:2B:01:9C:90:82:4F:DF:BC:43:F5:4A:16:3E:2F:76
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019891ECEA48FE47FD76C6E29D4755648A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 03:01:19 +0000
Manifest this update: Sun 10 Aug 2025 03:01:19 +0000
Manifest next update: Mon 11 Aug 2025 03:01:19 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: tp3+8YlDEjTk9YIMUpmteoxhiQohX/JVpfbuDlXqlOI=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:ea:48:fe:47:fd:76:c6:e2:9d:47:55:64:8a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Aug 10 03:01:19 2025 GMT
Not After : Aug 11 03:01:19 2025 GMT
Subject: CN=b248a7a8992b019c90824fdfbc43f54a163e2f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:e6:2c:35:67:f7:f2:30:c2:d1:95:0b:ee:
98:b1:6f:a1:00:df:a4:7b:bf:a5:e4:80:8e:cf:60:
fe:d0:3f:5f:95:81:06:03:79:e3:6e:a0:24:8d:44:
60:11:2c:10:ce:c7:0d:e8:43:72:00:b6:19:54:7c:
ba:27:3c:07:f3:76:4d:db:04:4c:13:0f:b6:fc:07:
29:49:db:c5:5d:50:cc:23:cc:49:b3:da:67:cc:ff:
5e:90:49:f3:32:50:20:84:34:e4:10:5b:fc:6a:47:
77:8f:ea:f2:8f:a7:dd:a7:5a:b0:b6:d1:68:e2:09:
c3:ca:4c:ff:97:b8:1c:9b:63:7b:0b:98:9f:56:2a:
dd:54:55:cf:4c:52:2d:10:01:7b:96:0d:2b:7d:3d:
90:06:49:64:99:06:9a:c8:50:f9:b0:32:f1:d1:0f:
a6:6d:82:33:a9:91:14:09:14:db:39:c1:f9:9e:44:
17:32:02:b6:d9:39:15:8c:34:7f:ff:87:82:92:90:
65:5d:7a:c6:68:cd:28:8c:4c:01:54:3b:08:2b:de:
a6:b3:52:08:3b:73:54:c6:d7:ac:c8:95:e9:84:d1:
c1:13:1f:80:f5:13:f7:36:8c:59:31:73:dc:32:e0:
e8:03:f3:8b:a2:b4:92:04:47:a7:ff:40:cd:aa:5f:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:A7:A8:99:2B:01:9C:90:82:4F:DF:BC:43:F5:4A:16:3E:2F:76
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:26:20:9a:7c:57:a5:41:b6:5d:67:66:b2:45:68:c8:27:
02:a7:2b:92:e0:15:75:70:00:85:33:86:47:27:ac:2c:2c:b7:
c0:e1:48:19:52:25:a8:f7:2f:0a:1c:89:88:52:b8:3c:63:40:
22:fa:6c:83:97:c6:ea:b1:bf:73:42:7c:26:67:b5:6b:c0:a9:
e2:86:61:05:93:fb:94:dd:de:f9:d3:fd:20:70:f8:53:ea:36:
92:f7:f5:e0:c1:88:12:5f:ad:2d:6a:0d:b4:66:96:f3:36:b3:
f1:7b:94:bb:22:1a:51:0d:cb:fd:3a:a3:a5:00:21:01:6f:e5:
1e:e3:ee:c1:54:3b:c7:d5:09:d4:86:93:7f:d2:a1:13:61:2a:
6d:b9:dd:25:e9:6c:25:c9:6a:4b:fe:ac:eb:ea:6f:0d:2a:32:
a2:e7:62:ab:bc:74:27:2a:f6:fb:26:e2:25:fe:95:61:1c:c2:
29:e9:2d:44:f8:a5:8c:53:f8:d1:16:88:b2:0c:33:e4:c8:a4:
07:a7:b2:0d:31:b3:59:08:f1:0c:a4:d8:88:d5:5d:d1:c3:da:
ab:ad:a4:7e:57:02:4e:c3:11:3c:b5:d1:46:8c:c8:76:6c:e4:
dc:cf:f6:7e:ee:c2:ff:ad:11:dd:5b:3d:50:4b:a8:9e:17:af:
df:97:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:53 2025 by rpki-client