Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: JUDVDQIySWOL/0VP/79/KsZze3q6bh6GYPzIVUUvDcQ=
Subject key identifier: D9:89:6D:57:A2:E8:79:9E:B2:A5:72:92:E3:90:6E:23:49:2A:D3:3E
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 019A51508C07B8A0D50C56FF2AACC3844280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:24 +0000
Manifest this update: Wed 05 Nov 2025 00:00:24 +0000
Manifest next update: Thu 06 Nov 2025 00:00:24 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: 7X7+MlWUKtsKSJnpaY32+zF539X/n4afnhzrZitqZus=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:8c:07:b8:a0:d5:0c:56:ff:2a:ac:c3:84:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Nov 5 00:00:24 2025 GMT
Not After : Nov 6 00:00:24 2025 GMT
Subject: CN=d9896d57a2e8799eb2a57292e3906e23492ad33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:b4:d8:e9:44:ab:62:83:93:a8:f6:59:05:
8c:f6:ec:8e:95:f7:ee:af:0e:f7:b7:54:e1:e2:fd:
3c:6a:fc:ba:19:ff:5e:29:22:65:f0:73:7c:77:86:
b1:36:33:24:41:28:85:4f:f0:b6:79:c2:a9:50:0a:
e2:d0:5c:c2:ae:c6:88:45:1a:26:f1:2c:79:30:e7:
08:89:55:5e:e9:42:9b:14:64:92:0d:d7:0b:21:89:
ae:a4:0d:ea:1a:e3:d3:c9:5e:4f:08:04:4d:1d:8e:
ec:3d:52:df:e3:e6:95:e3:b7:19:f3:59:51:b7:b3:
59:b9:b0:ff:b8:b9:9c:bc:3b:d6:e2:d6:d7:9f:2b:
37:4e:f8:7d:4a:c5:d3:98:2f:4f:f0:b1:11:c1:74:
42:29:84:28:c2:75:ec:53:c0:f8:79:b3:dc:47:fe:
76:2f:78:77:ec:c8:f9:47:13:78:40:c3:a8:f0:56:
1f:7d:0e:01:ed:eb:0d:4d:f2:d1:cb:f8:d0:d5:aa:
7f:aa:c9:2d:07:65:26:52:07:00:46:2d:69:ed:8b:
94:e7:1a:86:42:cb:eb:cf:c8:66:85:f1:bc:96:75:
4d:3d:ec:8a:a1:68:a2:67:b5:6a:ee:68:44:d1:cf:
01:77:91:45:99:32:f6:bd:c4:96:f0:1e:0a:02:01:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:6D:57:A2:E8:79:9E:B2:A5:72:92:E3:90:6E:23:49:2A:D3:3E
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:79:54:a7:e4:ae:51:d1:63:38:dd:0a:16:1f:5f:9d:f7:eb:
1d:f5:a8:28:70:f3:cc:d0:cc:74:21:5f:13:0a:89:b5:38:0a:
f7:88:7c:c4:97:b5:44:92:87:b4:9d:4a:7e:ec:5f:e9:4d:8b:
b3:46:ea:18:f0:fd:ce:c5:46:88:e5:19:d4:d3:7a:87:67:ef:
dc:ac:db:94:b6:bc:3f:db:1d:39:62:20:ac:70:ff:44:d2:3e:
01:6d:ef:16:22:3b:05:95:d1:c6:14:bf:86:e0:a1:6d:0a:12:
df:0e:b4:e2:18:1b:1d:12:2d:03:5e:e5:56:eb:ae:23:e3:0f:
c2:90:56:f8:a2:71:66:bf:6c:c9:d8:60:6d:96:cd:4c:92:2d:
52:95:84:5c:6a:af:03:05:b7:ac:9b:c8:17:bf:66:0a:ae:3f:
d6:6f:bc:b1:66:35:15:85:39:f8:e3:c5:a1:3b:21:a9:8b:2c:
ca:0b:24:83:e8:e6:a4:6a:8e:ad:03:a3:b0:da:a5:a4:61:64:
1d:b7:81:dc:d8:a1:97:a3:17:52:74:8b:45:62:4c:72:77:88:
34:7c:41:7a:de:4b:a6:fe:29:de:cd:8f:34:10:4b:5b:df:0c:
ca:44:3d:5c:d9:8d:de:ed:4f:58:01:52:f4:45:af:97:78:14:
d9:53:79:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUIwHuKDVDFb/KqzDhEKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGQxNWVmMmY1OWFiYjk1ZjJkOWJlNWNlZTMzMDM4ODg2
MjNiOTcwHhcNMjUxMTA1MDAwMDI0WhcNMjUxMTA2MDAwMDI0WjAzMTEwLwYDVQQD
EyhkOTg5NmQ1N2EyZTg3OTllYjJhNTcyOTJlMzkwNmUyMzQ5MmFkMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArse02OlEq2KDk6j2WQWM9uyOlffu
rw73t1Th4v08avy6Gf9eKSJl8HN8d4axNjMkQSiFT/C2ecKpUAri0FzCrsaIRRom
8Sx5MOcIiVVe6UKbFGSSDdcLIYmupA3qGuPTyV5PCARNHY7sPVLf4+aV47cZ81lR
t7NZubD/uLmcvDvW4tbXnys3Tvh9SsXTmC9P8LERwXRCKYQownXsU8D4ebPcR/52
L3h37Mj5RxN4QMOo8FYffQ4B7esNTfLRy/jQ1ap/qsktB2UmUgcARi1p7YuU5xqG
Qsvrz8hmhfG8lnVNPeyKoWiiZ7Vq7mhE0c8Bd5FFmTL2vcSW8B4KAgFYqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmJbVei6HmesqVykuOQbiNJKtM+MB8GA1UdIwQY
MBaAFB3dFe8vWau5Xy2b5c7jMDiIYjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1Mjgt
OGI2MGU0Yjk0YmNmLzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1MjgtOGI2MGU0Yjk0YmNm
LzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnlUp+Su
UdFjON0KFh9fnffrHfWoKHDzzNDMdCFfEwqJtTgK94h8xJe1RJKHtJ1Kfuxf6U2L
s0bqGPD9zsVGiOUZ1NN6h2fv3KzblLa8P9sdOWIgrHD/RNI+AW3vFiI7BZXRxhS/
huChbQoS3w604hgbHRItA17lVuuuI+MPwpBW+KJxZr9sydhgbZbNTJItUpWEXGqv
AwW3rJvIF79mCq4/1m+8sWY1FYU5+OPFoTshqYssygskg+jmpGqOrQOjsNqlpGFk
HbeB3Nihl6MXUnSLRWJMcneINHxBet5Lpv4p3s2PNBBLW98MykQ9XNmN3u1PWAFS
9EWvl3gU2VN58A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:28 2025 by rpki-client