Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: QleSMqahoST5fSjtewy4uoaVLjX9/VjJqlMNesvnp9g=
Subject key identifier: 78:F6:B0:9A:84:E1:A3:E0:C5:12:99:C6:7D:98:A7:F2:EB:1C:DB:74
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 01987A1B9B1B09DAFFEF3495DC6E1B393E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 15D0
Signing time: Tue 05 Aug 2025 12:01:26 +0000
Manifest this update: Tue 05 Aug 2025 12:01:26 +0000
Manifest next update: Wed 06 Aug 2025 12:01:26 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: vo4WBh6slB0Gh80nc5VPFwue1/bJT1rGedVUau986ao=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:9b:1b:09:da:ff:ef:34:95:dc:6e:1b:39:3e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Aug 5 12:01:26 2025 GMT
Not After : Aug 6 12:01:26 2025 GMT
Subject: CN=78f6b09a84e1a3e0c51299c67d98a7f2eb1cdb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:99:f0:9b:14:40:76:7c:bb:6f:02:0e:80:
f5:bb:97:6a:49:b7:dd:ef:64:ab:7b:16:75:1f:7d:
eb:35:d9:cb:ed:02:65:5c:4a:72:a7:d2:23:30:a4:
fc:76:55:37:e2:d1:1c:43:2f:10:0c:98:1b:9a:e1:
07:80:0d:35:03:60:a2:86:96:08:ea:29:64:cd:35:
26:0e:58:1a:cc:a9:10:a2:4b:df:66:75:46:d4:57:
d6:b1:83:f7:51:a8:5e:79:f8:2f:94:07:5b:3c:0c:
bd:84:7f:81:25:7d:0b:b8:9f:8d:ff:72:b3:d3:08:
c9:24:a6:f4:f4:c2:66:14:d9:3f:57:fd:70:02:51:
84:f6:c0:9e:40:fc:59:f6:5b:0f:3c:7d:65:dc:74:
8e:88:17:83:08:03:1f:f7:15:6f:cf:cf:b6:a1:e9:
8d:1b:a4:2f:ff:5d:a9:f2:82:84:9d:61:5c:a2:57:
86:78:cb:de:5b:51:2b:fc:56:1c:8d:6c:8e:12:f0:
d5:95:c8:59:48:cf:8b:bd:ef:03:36:0b:52:c5:60:
84:79:ec:c0:11:78:88:63:36:b6:f1:4b:d0:1f:b7:
51:23:46:de:90:9d:05:ea:9e:d8:69:25:b5:f9:4c:
3a:87:ae:7c:78:fa:4b:39:d9:16:34:56:7e:77:bc:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:B0:9A:84:E1:A3:E0:C5:12:99:C6:7D:98:A7:F2:EB:1C:DB:74
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:81:f4:c5:29:80:a0:4c:ff:4d:9d:f9:d0:0e:04:75:cd:21:
64:06:74:a1:17:f3:0d:ce:f5:53:60:79:4f:42:0f:1e:84:6e:
ed:7e:38:b5:43:70:50:58:f7:2f:b3:98:dc:5a:67:9f:09:4c:
7a:0b:e5:c0:1e:bb:1c:c1:2f:6b:d9:41:b6:c3:e3:55:24:03:
f7:f9:bb:27:e7:e3:85:cb:91:13:70:12:64:9e:08:55:1f:82:
1e:91:89:65:36:5c:75:45:15:03:a6:d9:33:55:da:ff:12:8c:
fd:0b:cc:a4:7e:4a:bd:e4:4c:c8:00:45:3d:79:e5:16:4f:cc:
00:93:86:84:f1:c0:eb:d3:c7:b3:fe:4a:55:8d:57:c8:4f:3f:
3a:f2:af:34:a8:b2:42:4e:f4:cc:23:ab:54:ea:a7:94:ee:03:
67:9e:08:70:1d:02:02:47:32:d7:db:02:8d:89:98:f1:e5:3c:
dc:83:78:27:d2:bc:e7:a0:5b:6b:7f:a7:c2:c7:d4:50:2c:f6:
8e:1d:76:54:91:32:b4:f3:ee:45:39:88:93:c6:6d:ee:ec:0a:
bc:9f:2f:8d:65:e2:88:3a:ce:3e:23:c9:62:dd:8a:7d:47:5e:
e4:37:1d:5a:7b:75:4b:56:c3:01:2a:81:b7:f2:e8:b9:0e:25:
8a:19:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:32 2025 by rpki-client