Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: 0eX4jjzOdrwqHZGmNOrtlfqbM7LuiPT67oPiUTrCjSY=
Subject key identifier: 99:67:2E:EE:4B:02:64:57:82:B3:D8:60:5C:F3:99:C8:32:02:D3:FB
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019884D5FF368BA224D1FB734D678842EEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 0125
Signing time: Thu 07 Aug 2025 14:01:13 +0000
Manifest this update: Thu 07 Aug 2025 14:01:13 +0000
Manifest next update: Fri 08 Aug 2025 14:01:13 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: w5vDyFdNH+AUdwfTvcgoYjOrDPxshvsvxowFSdYwALo=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:ff:36:8b:a2:24:d1:fb:73:4d:67:88:42:ee:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Aug 7 14:01:13 2025 GMT
Not After : Aug 8 14:01:13 2025 GMT
Subject: CN=99672eee4b02645782b3d8605cf399c83202d3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:2a:cc:47:50:7c:34:c5:27:89:fa:88:ea:
9b:f5:96:20:a0:a4:84:90:25:48:46:78:2f:e3:9f:
b8:db:1b:b7:72:bc:e6:d5:fb:44:de:16:58:55:5a:
b0:3e:88:a1:27:04:9b:e5:0c:e8:95:69:cb:49:32:
26:b5:a8:eb:f5:43:f8:15:4a:17:00:3f:0f:3d:8f:
18:fa:47:e9:3b:a5:22:b6:ef:db:0a:17:36:03:c3:
3d:dd:fe:fc:2b:36:6d:73:78:6f:47:a7:e6:b6:8c:
fb:42:4a:03:2c:a6:f8:0d:62:82:80:88:24:3a:4b:
ce:19:d5:80:46:94:c3:85:04:e3:da:83:d9:cf:a8:
f8:f0:e4:38:42:3e:dd:32:29:f6:b1:51:21:08:f3:
15:0b:dc:b3:98:97:1c:74:db:b0:fa:2e:18:85:51:
56:a4:a7:0b:f9:3c:2a:1d:34:f3:49:d8:e4:23:7f:
4b:c9:0f:ae:f3:ce:19:af:ce:45:36:08:9f:5a:71:
7e:a4:aa:c3:60:04:7c:d9:da:86:af:05:dd:e0:e6:
51:81:e1:a0:40:c9:22:71:80:af:ab:f5:df:66:28:
44:08:23:6d:36:0a:ef:f9:03:82:11:65:12:0a:ff:
8f:5f:91:9b:98:d3:2d:98:7a:55:36:ef:bd:69:81:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:2E:EE:4B:02:64:57:82:B3:D8:60:5C:F3:99:C8:32:02:D3:FB
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:3e:68:92:83:23:94:6a:20:b4:9b:21:b1:3b:f3:37:67:
ea:97:1a:a9:d5:2a:f3:b2:ca:ae:e8:85:ce:4f:9b:ff:ad:aa:
bd:15:29:32:07:5d:0f:12:ae:25:7b:a4:1f:78:cf:f8:0e:aa:
3a:78:56:13:4c:1a:a8:b5:f7:eb:68:25:9f:59:63:9e:c1:b8:
44:6e:00:b8:23:01:22:2a:e4:d1:f4:6f:12:66:11:6f:a6:86:
dd:15:44:e1:46:7e:da:1b:7b:54:bb:11:7f:09:40:fe:0e:39:
84:49:9a:31:c4:66:10:58:12:36:23:5a:2f:bd:cb:5a:02:fa:
d2:ce:b9:d4:b6:cd:5e:80:57:31:5c:78:44:d1:a3:88:d2:b5:
7b:c5:62:c3:e1:f6:b9:80:ac:48:59:61:8d:58:36:17:39:4c:
2b:dd:ec:d3:dd:93:b4:59:33:3a:10:35:8e:91:5c:45:12:ca:
cb:4b:51:f0:8d:1b:0f:6d:89:42:21:5f:70:f2:ac:94:93:12:
bc:6c:4a:a1:67:de:33:18:a1:16:89:19:ba:9a:d9:86:74:c8:
34:d0:eb:57:96:bc:f0:a5:ec:73:a1:8f:83:f1:ce:71:a7:8c:
63:d2:45:df:d9:92:c5:45:f3:d3:22:41:15:9e:a7:25:f3:c4:
db:5f:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:34:28 2025 by rpki-client