Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: f9j9NxW8Sp8z3tXYsis+LYm/PUpnnAV2vOk5vkRUHTY=
Subject key identifier: DB:E3:75:35:DA:6D:DA:95:1F:17:0C:2F:E5:6E:30:15:33:1A:B4:29
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 019A7225A721B4F21450560F8CAFD9BD596C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: o1EUQHuJ5WVn4eDetUZ+kMo8+qtZukUlBu3WqiRR504=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:21:b4:f2:14:50:56:0f:8c:af:d9:bd:59:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=dbe37535da6dda951f170c2fe56e3015331ab429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:02:6b:3c:57:f4:61:12:6f:c7:be:53:f3:
16:30:1e:d1:3d:cc:cf:c8:11:55:a2:93:df:2d:60:
f1:b9:67:93:db:b1:ac:2e:ee:6c:2a:e1:8e:60:b5:
29:71:9f:a9:7b:0c:b4:7b:b8:7f:8a:b6:d4:00:16:
42:fe:85:3f:d5:a7:a8:5f:fc:56:ba:6c:34:63:8f:
eb:a8:9d:47:6a:d0:f3:3f:31:4c:00:65:ee:b9:a5:
36:27:ca:86:0b:db:2f:11:21:03:d0:c2:e7:44:d4:
a7:99:df:4a:48:e2:7b:d0:59:b6:b6:d3:8c:54:c4:
72:9f:14:8f:99:14:47:18:bd:9e:c6:1d:50:43:1c:
3f:db:f4:b2:5a:8a:a4:3b:66:d1:62:cb:13:21:8f:
ed:36:92:f7:a1:a6:75:5d:34:82:37:9b:54:50:94:
24:58:ec:c9:fd:ef:df:92:0a:42:47:91:ce:41:07:
8e:5b:c5:cf:34:05:d3:46:11:27:47:12:c1:37:62:
6d:e7:0d:09:58:0b:c9:ca:88:9e:bc:17:69:1e:84:
4e:0f:de:49:44:9d:6f:64:09:42:ca:ac:ac:d2:43:
31:f5:9a:f5:60:33:01:6e:c4:bc:c2:71:21:b1:3e:
59:51:d8:ea:91:63:4c:cd:3a:7c:36:59:eb:2a:82:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:75:35:DA:6D:DA:95:1F:17:0C:2F:E5:6E:30:15:33:1A:B4:29
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:51:38:cb:fc:2b:e0:a7:92:72:23:86:03:8e:a9:0e:78:
ac:8d:24:cc:d8:d6:1c:cf:0e:d5:7d:b3:22:45:76:7a:0c:9e:
c5:45:f1:8c:89:c6:7d:b8:49:8b:7d:c7:e6:fc:5f:35:7b:41:
c4:98:84:cb:12:6a:2a:67:cc:17:5e:68:34:8a:e0:8f:c3:7b:
80:e2:d9:54:8e:d7:48:48:a8:96:f3:12:4d:3c:23:1f:67:16:
1d:5f:ef:e2:18:4a:a2:e0:a1:e4:5c:66:5d:d8:3a:24:c0:8e:
c4:86:97:54:bc:30:b8:8d:26:f6:68:30:d9:a1:13:3b:a8:56:
03:2a:e1:2b:17:28:ad:68:27:f4:b9:31:5e:3a:2f:74:26:31:
7a:81:50:cf:8c:23:10:8c:3e:14:8e:0e:61:e0:98:f4:ef:64:
c6:fa:7b:c7:5f:fc:24:b5:ac:9d:40:d9:7c:73:65:2d:6f:af:
ee:a1:5b:2c:0e:2b:9d:07:45:9d:86:c1:76:f4:14:5a:7f:67:
2c:b7:6a:84:f8:ca:97:fa:93:9f:bb:3c:12:13:db:eb:64:ec:
39:8f:26:0c:67:29:62:8a:ed:a6:3e:1e:2f:2c:49:5a:7c:74:
58:fc:e1:64:79:39:db:94:b1:4f:9b:ea:2e:ca:78:09:63:3d:
df:d9:ea:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJachtPIUUFYPjK/ZvVlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGQxNWVmMmY1OWFiYjk1ZjJkOWJlNWNlZTMzMDM4ODg2
MjNiOTcwHhcNMjUxMTExMDkwMTAxWhcNMjUxMTEyMDkwMTAxWjAzMTEwLwYDVQQD
EyhkYmUzNzUzNWRhNmRkYTk1MWYxNzBjMmZlNTZlMzAxNTMzMWFiNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ngCazxX9GESb8e+U/MWMB7RPczP
yBFVopPfLWDxuWeT27GsLu5sKuGOYLUpcZ+pewy0e7h/irbUABZC/oU/1aeoX/xW
umw0Y4/rqJ1HatDzPzFMAGXuuaU2J8qGC9svESED0MLnRNSnmd9KSOJ70Fm2ttOM
VMRynxSPmRRHGL2exh1QQxw/2/SyWoqkO2bRYssTIY/tNpL3oaZ1XTSCN5tUUJQk
WOzJ/e/fkgpCR5HOQQeOW8XPNAXTRhEnRxLBN2Jt5w0JWAvJyoievBdpHoROD95J
RJ1vZAlCyqys0kMx9Zr1YDMBbsS8wnEhsT5ZUdjqkWNMzTp8NlnrKoKoswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvjdTXabdqVHxcML+VuMBUzGrQpMB8GA1UdIwQY
MBaAFB3dFe8vWau5Xy2b5c7jMDiIYjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1Mjgt
OGI2MGU0Yjk0YmNmLzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1MjgtOGI2MGU0Yjk0YmNm
LzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5VROMv8
K+CnknIjhgOOqQ54rI0kzNjWHM8O1X2zIkV2egyexUXxjInGfbhJi33H5vxfNXtB
xJiEyxJqKmfMF15oNIrgj8N7gOLZVI7XSEiolvMSTTwjH2cWHV/v4hhKouCh5Fxm
Xdg6JMCOxIaXVLwwuI0m9mgw2aETO6hWAyrhKxcorWgn9LkxXjovdCYxeoFQz4wj
EIw+FI4OYeCY9O9kxvp7x1/8JLWsnUDZfHNlLW+v7qFbLA4rnQdFnYbBdvQUWn9n
LLdqhPjKl/qTn7s8EhPb62TsOY8mDGcpYortpj4eLyxJWnx0WPzhZHk525SxT5vq
Lsp4CWM939nqzg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:15 2025 by rpki-client