Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: kHSX4eF0Qsw/3XYgdTdXaI/dxSRfiEzfyq14/SzFmMc=
Subject key identifier: DD:90:A4:AC:D3:DA:9F:65:0F:79:E0:D0:E7:58:30:83:4D:28:10:EE
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 01995D209EDA00180E6EF42077FA07A077B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 13DD
Signing time: Thu 18 Sep 2025 14:00:42 +0000
Manifest this update: Thu 18 Sep 2025 14:00:42 +0000
Manifest next update: Fri 19 Sep 2025 14:00:42 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: 19zw+ZIB1mte9Uo92GdwZGSy2f+lm5lIm/MGKHx5hyo=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:20:9e:da:00:18:0e:6e:f4:20:77:fa:07:a0:77:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Sep 18 14:00:42 2025 GMT
Not After : Sep 19 14:00:42 2025 GMT
Subject: CN=dd90a4acd3da9f650f79e0d0e75830834d2810ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:69:23:49:e6:54:32:11:a7:c4:0b:de:92:
36:c4:9c:b2:7e:19:13:73:0a:4c:26:72:6c:d9:f0:
6f:d6:b4:4e:89:51:23:66:ff:74:7f:39:6b:4f:e2:
70:58:84:9c:00:d8:43:47:91:a3:61:07:d2:b7:3e:
2e:d5:6f:45:02:f7:80:c9:3a:66:48:c5:92:60:47:
11:03:d6:a5:80:e4:c7:70:17:fc:ab:16:78:2e:01:
81:fd:75:0e:8d:78:44:fe:67:37:73:ea:84:fd:7d:
2f:e4:dc:47:7b:ba:d0:33:6d:2c:9b:de:2e:c9:63:
71:3a:a1:ba:f7:41:ab:15:b4:5f:f8:11:6f:e3:f9:
ef:ae:59:60:37:67:c3:93:73:1f:f0:97:07:78:35:
2c:19:a8:13:b3:f3:ad:88:40:8d:fc:86:ee:80:a6:
96:c3:fb:be:c5:0c:24:3e:bc:d7:49:e4:9b:f7:e9:
bf:f2:59:1d:86:d6:46:94:37:50:a7:e1:73:6c:5e:
77:86:9f:a7:c4:ea:f6:d8:db:38:9e:e6:13:2c:e6:
d5:7f:3d:c3:e8:08:d4:71:3f:d1:81:f4:7a:ac:df:
4f:47:d3:33:ac:0e:06:0b:e9:32:89:f1:c3:08:47:
df:be:3f:4e:ec:81:dd:5c:fc:d8:ea:48:3e:41:87:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:90:A4:AC:D3:DA:9F:65:0F:79:E0:D0:E7:58:30:83:4D:28:10:EE
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0c:ec:f8:a8:6b:d8:2a:90:50:b3:dc:75:d3:b2:6e:fb:6e:
ce:c6:36:bb:b2:a9:35:c6:e2:5a:b2:97:9c:10:78:f1:c1:31:
e8:57:be:cb:77:e8:bd:8f:d5:02:cf:8b:b4:5b:02:03:87:96:
eb:c2:ce:8a:81:06:ce:98:90:78:3b:63:4a:a1:a7:44:a0:69:
2f:39:d6:49:93:30:1f:cc:71:6a:b4:a2:56:bd:71:03:c2:e7:
a4:a6:e6:a1:5f:de:f8:70:b5:4c:7f:8f:4a:97:64:e1:b5:ab:
30:0e:b0:4e:22:dc:d0:ae:13:83:c1:19:e2:14:9c:14:bb:ce:
03:43:69:12:12:ed:5f:cb:44:4a:69:10:e5:27:06:48:89:48:
ef:55:ee:89:3d:97:79:95:73:a4:cb:4a:eb:ea:2b:8b:dc:0c:
aa:4a:fd:2c:f8:f1:83:cb:19:e2:fd:70:ef:0f:2c:21:67:c1:
55:05:a1:85:1b:fb:8c:8a:f9:10:4d:c9:0d:87:6b:c4:5b:aa:
c2:a3:4a:1d:d3:ce:47:be:ba:8f:0e:50:c9:25:b5:da:7b:5c:
98:e2:65:cf:7e:3e:c9:20:10:22:27:a9:4b:1c:e8:1c:0d:2d:
f8:2c:53:aa:40:4a:80:42:d3:96:ee:01:c7:dc:76:02:dc:38:
16:cf:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:56:22 2025 by rpki-client