Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: 3J14z0AY+oqVxh2qtcQTo2b0f6SABvuMJotcNbgSL2k=
Subject key identifier: 77:42:6F:18:E6:97:1B:6D:B3:69:C6:CF:AF:3C:34:6E:E1:1D:14:5A
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019A21ADC892D1DB6A821E682A1D35541B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 18:00:28 +0000
Manifest this update: Sun 26 Oct 2025 18:00:28 +0000
Manifest next update: Mon 27 Oct 2025 18:00:28 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: at9m3bnzYsy0MSzOC4gHswCfMUitap3j0sweh2bZjV4=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:c8:92:d1:db:6a:82:1e:68:2a:1d:35:54:1b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Oct 26 18:00:28 2025 GMT
Not After : Oct 27 18:00:28 2025 GMT
Subject: CN=77426f18e6971b6db369c6cfaf3c346ee11d145a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:4b:7b:81:a1:f4:a2:be:16:46:e7:71:34:
b5:f7:42:47:a7:97:36:79:a9:65:9a:8a:5a:b0:b8:
94:6e:6b:03:7c:48:b7:38:6b:2a:93:c8:d4:5b:c3:
ee:d2:fa:c7:c9:77:04:aa:47:ee:02:3a:ec:be:c6:
1d:ff:99:86:b0:5d:13:f3:f6:8f:88:0f:44:b7:dd:
bc:b6:40:d0:60:7a:74:37:05:3b:1d:a2:bb:a4:25:
49:9c:e4:e4:91:b5:25:6a:24:24:41:64:a5:1a:f9:
c9:2b:88:74:25:27:78:a3:0c:a5:bf:78:bd:57:cf:
47:1d:ff:f1:90:7d:fa:88:1d:a2:3e:07:0d:7a:3a:
0d:a0:73:9d:77:58:30:79:c5:4d:f6:ad:f4:91:3a:
f8:67:7d:e2:fd:70:ae:25:b4:64:d5:55:79:38:af:
c8:5e:fd:b2:2d:b0:7a:78:51:8c:a8:3f:db:da:f4:
a6:89:2f:38:63:59:b4:2d:64:2c:79:d6:09:69:5c:
48:09:9c:0a:c7:f2:01:93:1b:b8:37:ba:d8:0d:3c:
e2:6b:52:c0:bf:70:7e:33:79:b3:7f:b3:b8:53:32:
57:5b:45:ff:b2:ea:0b:9a:a4:c6:61:3f:e7:71:f3:
2b:74:52:db:57:25:a0:7e:ac:80:f8:8e:8f:07:96:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:6F:18:E6:97:1B:6D:B3:69:C6:CF:AF:3C:34:6E:E1:1D:14:5A
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:09:91:4f:22:7f:d8:a0:93:34:6e:73:72:0b:f2:cb:4e:
58:5a:07:40:f5:eb:06:f9:65:83:cd:9a:00:c2:d5:f7:09:88:
39:f4:96:f9:27:9b:09:9c:7d:c9:b7:21:a7:8d:4e:1f:7e:2d:
75:33:4c:4e:0e:56:f5:4f:2c:9c:63:21:f4:89:73:5c:02:14:
02:5c:b9:d8:c7:50:26:3c:db:68:68:ed:80:dc:a9:b8:01:1b:
20:96:47:b5:28:3b:90:17:32:b9:db:1e:05:4f:cb:5b:e1:08:
9b:d7:d7:f4:f3:73:64:81:11:d4:ca:4e:f1:39:0b:fe:c7:64:
4b:c4:cc:c1:8f:b2:01:a0:ab:27:ea:4d:16:c7:85:38:ce:4e:
a1:b9:e4:97:a8:ad:f2:72:3a:3d:cd:14:80:b9:69:5a:9c:62:
ad:d5:3f:10:9c:23:ab:66:e7:dc:39:a5:7d:67:a2:88:51:1b:
cc:2c:4d:88:60:71:26:a0:c7:85:97:31:da:08:d3:53:a3:d1:
8a:6b:62:d1:60:60:d8:1d:c1:88:c2:70:19:0f:e9:a6:8d:6a:
77:ba:c6:11:6d:2c:90:63:8c:04:5a:fb:83:22:95:dc:d4:bf:
cc:0c:e4:4a:ad:01:d9:51:4d:44:60:32:4b:ae:01:62:45:63:
14:31:4b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:40 2025 by rpki-client