Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: 4Rip4Mo0sSwLCWIX131PSqqK+KPp/wzHRtIsDWmHWwk=
Subject key identifier: 43:21:94:D1:63:27:9C:A1:45:82:FF:8C:86:99:6B:A8:D0:A1:54:80
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 0199375CEEAF82A2E3CC3E1268781E73EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 06:01:01 +0000
Manifest this update: Thu 11 Sep 2025 06:01:01 +0000
Manifest next update: Fri 12 Sep 2025 06:01:01 +0000
Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: NUeV1EXVVVgDTvVds6mrfaE5D59xc7n5szY3gqIuYGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:ee:af:82:a2:e3:cc:3e:12:68:78:1e:73:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Sep 11 06:01:01 2025 GMT
Not After : Sep 12 06:01:01 2025 GMT
Subject: CN=432194d163279ca14582ff8c86996ba8d0a15480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:35:d6:ae:1e:71:f7:05:15:c0:9d:96:cb:
ec:57:38:90:0b:00:39:ff:9a:11:90:9a:54:50:49:
2a:41:86:7f:5d:ba:77:75:7c:f8:bd:6f:72:da:f8:
b7:dd:69:c8:32:06:80:12:b5:dd:8a:13:5d:72:47:
3b:bf:2c:71:83:7a:78:4c:88:05:51:4f:51:66:ae:
25:eb:f8:9a:b4:95:ba:94:44:67:9c:f8:91:1a:41:
45:ef:c9:32:9b:7c:45:31:38:3e:00:dd:8c:e7:3e:
ce:70:fa:a6:f1:05:6c:03:10:dc:9e:db:05:5d:57:
65:a5:de:a3:a0:de:64:fc:a5:05:56:9f:b5:e2:5f:
aa:0c:20:7a:87:c1:c5:6c:1d:4c:86:7a:92:6c:21:
27:7b:d1:cc:d5:02:ab:32:dc:fa:04:f1:93:26:02:
08:0a:b7:f0:d7:8a:e8:84:5e:91:95:35:9d:0f:97:
07:ed:16:c6:77:75:8c:ca:39:f9:f0:48:59:95:c4:
57:7f:45:08:53:d6:6d:4a:9d:0b:cb:6c:77:74:28:
3b:8f:91:26:21:fd:36:a5:c7:df:74:34:ed:e8:c3:
22:15:3e:59:33:72:64:a8:10:c2:58:59:d2:aa:3a:
1b:9e:e0:56:7e:42:08:bf:7a:bb:e0:41:f6:f8:f3:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:94:D1:63:27:9C:A1:45:82:FF:8C:86:99:6B:A8:D0:A1:54:80
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c9:6b:a9:a0:2c:a7:6c:0f:85:a1:d1:ef:80:52:5b:b5:47:
aa:ed:04:08:32:18:cf:af:84:a1:0a:ec:8e:38:98:e9:80:37:
14:c2:c7:f4:7a:4a:f7:bc:b8:91:43:03:57:9f:5c:c5:dc:34:
ea:6e:5c:e0:e9:da:15:dd:16:5d:12:9c:bd:9a:2e:17:94:b8:
04:d1:a3:e5:1b:2c:b6:23:5d:c0:78:b0:23:8b:c4:13:1b:03:
85:fe:d4:35:66:7b:a2:75:27:b7:ab:63:a7:cf:cd:f6:0f:89:
cd:c2:f4:8b:a8:cb:52:e1:d7:2c:eb:00:03:1e:af:2a:75:ea:
b3:d9:29:6b:a0:20:12:22:11:28:db:8e:ef:1c:30:03:9d:27:
4c:bd:7c:d0:df:02:64:78:4a:82:1a:16:37:3b:47:2a:ee:88:
45:f6:b8:0e:4c:76:ac:9e:a6:8d:7c:a9:57:f8:4e:2f:ec:94:
9e:8e:d0:c3:49:67:ac:61:33:a1:b2:ba:e6:30:08:00:93:cc:
11:9b:e1:6b:a8:7e:ae:44:be:b0:5a:5e:2c:2d:df:3b:aa:f4:
1a:08:26:ed:d0:a6:65:79:b2:6c:a5:eb:eb:ea:cf:e1:8d:96:
65:57:15:98:e9:85:16:f9:81:02:bc:99:34:96:02:f5:c9:3f:
36:86:ea:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XO6vgqLjzD4SaHgec+/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw
ZmRlNTIwHhcNMjUwOTExMDYwMTAxWhcNMjUwOTEyMDYwMTAxWjAzMTEwLwYDVQQD
Eyg0MzIxOTRkMTYzMjc5Y2ExNDU4MmZmOGM4Njk5NmJhOGQwYTE1NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbc11q4ecfcFFcCdlsvsVziQCwA5
/5oRkJpUUEkqQYZ/Xbp3dXz4vW9y2vi33WnIMgaAErXdihNdckc7vyxxg3p4TIgF
UU9RZq4l6/iatJW6lERnnPiRGkFF78kym3xFMTg+AN2M5z7OcPqm8QVsAxDcntsF
XVdlpd6joN5k/KUFVp+14l+qDCB6h8HFbB1MhnqSbCEne9HM1QKrMtz6BPGTJgII
Crfw14rohF6RlTWdD5cH7RbGd3WMyjn58EhZlcRXf0UIU9ZtSp0Ly2x3dCg7j5Em
If02pcffdDTt6MMiFT5ZM3JkqBDCWFnSqjobnuBWfkIIv3q74EH2+PNOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMhlNFjJ5yhRYL/jIaZa6jQoVSAMB8GA1UdIwQY
MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt
OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy
LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMlrqaAs
p2wPhaHR74BSW7VHqu0ECDIYz6+EoQrsjjiY6YA3FMLH9HpK97y4kUMDV59cxdw0
6m5c4OnaFd0WXRKcvZouF5S4BNGj5RsstiNdwHiwI4vEExsDhf7UNWZ7onUnt6tj
p8/N9g+JzcL0i6jLUuHXLOsAAx6vKnXqs9kpa6AgEiIRKNuO7xwwA50nTL180N8C
ZHhKghoWNztHKu6IRfa4Dkx2rJ6mjXypV/hOL+yUno7Qw0lnrGEzobK65jAIAJPM
EZvha6h+rkS+sFpeLC3fO6r0Gggm7dCmZXmybKXr6+rP4Y2WZVcVmOmFFvmBAryZ
NJYC9ck/NobqqQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:28:11 2025 by rpki-client