Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: xNIJK8T0pgNg+ktGpiK5+rE/DQV12FXPtA66pnxzHJc=
Subject key identifier: 36:E1:84:D4:D4:10:87:8F:4E:8D:E4:EA:4C:C4:C2:0C:9E:2A:B4:98
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019A54516580DEB59A280ED8B3E6CBF7A203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 0215
Signing time: Wed 05 Nov 2025 14:00:11 +0000
Manifest this update: Wed 05 Nov 2025 14:00:11 +0000
Manifest next update: Thu 06 Nov 2025 14:00:11 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: die3cqavohyoWGQ/bEKYX1p6wuyo/4Z59gYR6Bdtl0c=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:65:80:de:b5:9a:28:0e:d8:b3:e6:cb:f7:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Nov 5 14:00:11 2025 GMT
Not After : Nov 6 14:00:11 2025 GMT
Subject: CN=36e184d4d410878f4e8de4ea4cc4c20c9e2ab498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:db:0e:dc:09:75:85:70:94:b7:d8:3e:3e:
3f:1a:71:75:1c:39:2d:d7:2b:64:48:8e:a5:e4:ae:
92:c8:06:d1:f5:c0:c1:e1:0a:eb:5e:33:9f:b3:ff:
cc:36:3e:54:00:4c:7b:1a:7e:35:ec:ba:a7:b8:18:
19:c4:e4:c2:e8:eb:dd:b9:f5:4c:7b:c0:12:03:81:
d6:d6:43:c6:0b:52:a6:35:fb:be:54:f9:f0:67:3d:
2f:9d:1f:51:1b:f1:7d:0f:14:55:da:fe:32:b4:ae:
42:24:b4:51:62:fe:36:22:81:26:73:78:87:5a:e9:
ab:51:2f:69:12:1e:ad:e0:3f:92:e5:38:3a:07:6d:
de:b1:72:cf:90:2c:3c:34:8b:fb:ad:47:8d:5f:28:
7e:4f:0d:ef:1d:81:c1:1a:69:65:e9:73:99:dd:e0:
86:e3:85:7d:12:69:db:14:b7:ce:81:0b:f1:f7:dc:
0c:18:17:5f:db:2a:4a:db:42:77:c1:fc:70:f5:b1:
37:03:05:d3:9b:cf:1f:87:2f:e5:45:9a:66:78:18:
0a:90:25:68:a5:db:b2:72:c2:1b:ef:1b:c2:d5:e5:
d6:c6:cc:77:d4:c1:ed:e3:44:f6:25:ac:b0:f4:33:
f3:ac:30:57:9e:a0:cb:f7:4e:34:b6:16:49:a6:0f:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:84:D4:D4:10:87:8F:4E:8D:E4:EA:4C:C4:C2:0C:9E:2A:B4:98
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:83:c6:a4:fa:12:b3:c1:a6:cc:05:c4:30:a8:21:60:be:77:
95:e3:2b:5e:1e:6d:38:36:36:70:e7:60:4c:eb:d6:3f:5b:ff:
99:70:c9:f6:a1:f3:5d:74:82:b7:92:51:2c:e0:9e:f5:50:85:
96:4a:43:36:85:6b:82:f2:9b:ed:0e:69:ca:aa:0a:2f:1a:32:
9a:9b:48:be:fe:95:60:0e:63:58:98:6a:db:c0:8c:61:b5:30:
5b:4a:b5:54:61:5e:30:74:26:de:21:58:97:d4:fb:e5:f4:0c:
d0:f7:d5:cf:5c:33:da:cd:24:05:00:85:3d:58:da:49:fd:f1:
82:8d:bf:00:5f:96:07:65:df:0a:8c:09:ff:6d:8a:da:e4:2c:
77:fa:5f:6d:f4:d1:52:63:f0:a0:14:70:8a:7b:a4:4d:36:40:
43:35:26:30:f6:89:7e:e6:8b:c9:bb:b3:d2:fb:d5:63:b0:5f:
ce:5d:a1:0a:58:84:e3:ad:e6:81:3b:47:2e:6a:8b:18:78:f4:
b9:58:7a:3f:ab:d3:27:3f:5c:1e:67:dd:a5:84:a8:99:87:83:
1b:01:64:31:1d:1c:f2:02:6d:86:d8:32:a2:88:b6:49:d6:e6:
1d:fe:59:44:3d:c8:24:36:7b:bc:c4:5e:57:98:8c:98:2e:a1:
46:62:fb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:19 2025 by rpki-client