Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: W7U1wDtDTj/22oxyuX6XsNRmn2/bGCA9I5VDaAs0LjA=
Subject key identifier: 92:7C:C1:66:3C:31:4E:62:9A:8E:D1:D5:98:54:CA:49:4D:A4:13:B7
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019A53E3D27ED083AAD42F8E083093EE7EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 12:00:30 +0000
Manifest this update: Wed 05 Nov 2025 12:00:30 +0000
Manifest next update: Thu 06 Nov 2025 12:00:30 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: mH+iRPDMUkQjzhbF+ZY+ZmKOsL9XctDbqaauIVSG7xY=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:d2:7e:d0:83:aa:d4:2f:8e:08:30:93:ee:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Nov 5 12:00:30 2025 GMT
Not After : Nov 6 12:00:30 2025 GMT
Subject: CN=927cc1663c314e629a8ed1d59854ca494da413b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:91:04:38:21:96:d7:dc:25:fc:f8:24:5f:
e6:a8:d5:b4:03:6e:65:80:f2:04:74:60:cb:db:90:
ee:03:d2:73:68:67:a5:a4:18:76:59:bf:9e:ee:cf:
9e:38:6c:3c:bb:ee:c8:32:a6:bd:e9:ec:71:56:9b:
d8:90:6d:51:5c:b6:bb:1a:ff:6d:3d:c9:e6:e6:6d:
14:e0:54:34:0d:6b:55:64:e5:12:13:68:13:00:32:
53:f4:26:5f:f2:54:08:e8:42:95:29:db:be:20:93:
be:a0:41:92:2e:2b:75:81:66:25:85:4f:e4:d4:e4:
7c:af:29:92:e6:47:18:05:de:77:dd:42:f7:96:2f:
a6:f1:2c:5a:2d:53:39:f1:ea:49:de:69:49:a4:9f:
00:03:62:98:87:5a:27:64:bc:e8:38:1c:fb:94:49:
42:f9:ac:2d:65:9e:0d:c8:3f:2d:eb:ed:aa:39:d0:
02:48:1c:9d:da:ef:20:e8:52:8b:53:9a:37:66:da:
36:21:36:f9:0b:bf:29:be:7b:cd:98:57:1f:f2:ee:
59:80:f2:e2:99:a1:df:07:0c:43:ea:bb:61:95:6b:
97:de:95:4b:4d:e3:7c:ba:77:44:cf:0e:e8:ad:23:
17:54:49:79:e1:73:88:c5:7a:22:23:04:56:c2:ad:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:C1:66:3C:31:4E:62:9A:8E:D1:D5:98:54:CA:49:4D:A4:13:B7
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:b0:f2:17:dd:b4:af:11:33:c6:26:91:45:64:df:3f:b7:
d5:3b:68:f0:a5:6b:77:f2:2d:6a:d7:f1:ba:70:4f:5d:c8:20:
af:f3:28:f9:6f:4b:73:f5:1e:71:6d:74:b2:c4:65:c0:b4:fd:
5a:6f:c6:c3:a3:65:51:cd:10:3e:26:b8:fe:78:68:31:bf:b4:
5f:1e:fc:6f:eb:ab:5f:9b:76:12:cc:d1:21:a5:71:9e:2a:ba:
0b:a0:c8:58:17:e5:b9:46:e2:81:4b:79:cc:e7:86:c1:8a:c1:
3b:e9:35:67:68:28:f9:30:32:a5:f1:59:7f:b7:54:6a:51:19:
db:9b:df:b3:57:c0:bf:18:27:af:0f:d0:2d:6e:88:00:9f:6d:
d0:b5:03:f9:a0:7c:de:c9:3b:6d:15:81:70:1f:91:9f:5f:ff:
2e:8d:f4:4f:42:8b:2c:6b:fa:b0:96:89:28:31:29:75:18:13:
5e:19:d0:82:75:e6:1b:21:d1:b4:ff:a3:6c:7c:02:90:f0:e6:
45:a9:0a:76:45:67:cd:bb:91:cc:7a:10:ea:a4:07:c8:ff:37:
25:22:e8:59:dd:1f:25:2c:32:38:04:21:13:cd:e6:36:64:0b:
18:6c:27:38:9b:75:68:eb:19:13:da:87:74:2a:1f:1c:8c:5c:
ec:fd:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:58:59 2025 by rpki-client