Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: Oa4MUL+o74PpUh63XDIHFDT6v2a3p7P1R9/EuQliBIM=
Subject key identifier: 97:7F:29:D1:59:DE:A8:AC:EA:07:C9:0E:E4:C7:44:77:35:D4:94:1D
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 0198496673B51E2C23CB1AF00AD0ED9F01F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 13AE
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: P9hYWRdWP7W1aHRzpx6vOqknEZ+qK/2gfE/dmjPCwzY=)
2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:73:b5:1e:2c:23:cb:1a:f0:0a:d0:ed:9f:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=977f29d159dea8acea07c90ee4c7447735d4941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:ce:c9:91:05:96:2c:f7:bb:82:40:e5:eb:
55:79:d7:6b:b8:c9:a9:59:39:63:61:df:7a:61:6d:
36:c7:cd:9f:4c:d0:b0:67:a6:c8:b4:f4:cd:91:e2:
2e:98:49:57:82:23:82:f7:b7:6d:3c:c6:a2:2c:70:
7b:be:96:ac:d3:ad:0f:5d:59:88:45:c5:d1:67:39:
9e:7d:16:f4:12:e9:a1:dc:48:c9:42:ae:f4:35:de:
14:a2:e0:44:6d:6e:cc:76:87:74:fe:fd:ca:db:2f:
28:fa:61:e7:b4:a0:f6:bd:a3:9c:fc:c4:c3:dc:f1:
5d:8f:0e:c0:15:73:df:bb:da:93:26:77:13:56:97:
02:10:d2:eb:b3:05:75:6e:91:1d:10:1c:37:78:53:
e0:5c:e7:ba:f9:42:6b:5d:b8:61:ee:e0:fc:89:95:
66:4a:ca:65:6b:ea:af:0f:d9:e0:05:51:5f:7a:48:
c3:fb:92:d5:04:de:9f:ea:bd:ba:c0:69:18:95:3d:
0b:ba:49:ac:8d:89:22:51:70:24:e7:de:b8:f2:68:
f0:d8:0d:c3:11:bc:9b:9e:37:2d:46:d1:3e:97:5f:
c7:42:6f:19:a4:ef:4b:6e:1b:ac:07:a3:44:45:da:
8a:d8:20:00:76:cb:62:55:c7:cf:f0:92:0a:73:de:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:29:D1:59:DE:A8:AC:EA:07:C9:0E:E4:C7:44:77:35:D4:94:1D
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:69:90:76:dc:4f:8e:3e:04:80:7d:b5:86:4f:3f:51:e9:
4e:9c:2a:3e:3d:fc:68:0e:5b:01:38:c7:f8:41:09:68:57:a3:
aa:e8:4e:e5:71:cf:a6:d0:28:28:26:1a:dc:70:8b:2b:56:b7:
db:b6:38:78:ce:6a:da:25:f8:bb:57:40:37:55:d2:0f:35:5b:
43:f6:cc:55:a4:67:21:21:e2:99:0f:a9:e1:a9:0b:21:ed:3e:
3c:a5:8f:17:e0:d8:b8:e7:03:1e:8c:24:21:2b:12:79:34:8d:
b2:ee:f0:da:fc:cb:2c:84:78:d8:25:70:9e:28:2b:0b:3b:fb:
02:cc:99:97:52:57:e5:11:ff:16:25:83:f8:8a:b6:6d:af:52:
be:c0:fa:66:a4:10:26:a9:39:06:a2:43:63:bc:68:dc:b3:c1:
4c:cc:8b:82:56:99:5b:2d:5e:a0:38:a4:6f:1b:48:c1:3c:b4:
b0:15:a9:70:dc:60:56:70:cc:51:b9:64:5a:cf:c7:9b:fc:ff:
4c:a8:40:f3:c2:16:5e:9f:f2:be:39:62:0e:a1:27:16:0d:8d:
9a:2e:1d:b4:50:fc:88:6e:ff:92:b1:ad:45:c5:33:02:00:bd:
c3:f9:64:22:a6:d7:08:48:76:b6:51:45:68:23:4f:96:7a:45:
be:65:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:35 2025 by rpki-client