Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: vw6FuFeMLtbP6AYPJO+CYmd2CcieEDYJRolutgjMXCA=
Subject key identifier: 44:F1:0B:36:14:43:67:69:8F:D8:2D:69:76:6A:6A:19:DA:73:F8:83
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019A251CC96A6B45F295287A2B2ABE648580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0DDB
Signing time: Mon 27 Oct 2025 10:00:34 +0000
Manifest this update: Mon 27 Oct 2025 10:00:34 +0000
Manifest next update: Tue 28 Oct 2025 10:00:34 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: vHtMX3HLxqe7+poprKRqbOsUu/GBt50eBHrRfFWzBtA=)
2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c9:6a:6b:45:f2:95:28:7a:2b:2a:be:64:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Oct 27 10:00:34 2025 GMT
Not After : Oct 28 10:00:34 2025 GMT
Subject: CN=44f10b36144367698fd82d69766a6a19da73f883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:9a:e4:ad:29:e6:ec:e9:1c:f5:fa:82:2b:
25:52:23:78:00:ac:36:51:b7:06:90:71:21:43:eb:
0b:5c:04:5c:1f:e3:e9:a0:3d:13:5e:7a:4c:8d:7a:
cb:eb:b7:64:43:73:75:12:7b:0d:2d:b1:67:a0:16:
e6:5e:5d:d6:ee:e1:8b:b4:fc:b1:e1:50:a0:1d:40:
66:50:2f:47:f9:85:47:33:1d:b1:d2:d6:f6:0c:76:
e7:e6:52:77:e5:5e:ed:a7:a8:01:36:2e:94:fc:2d:
32:b2:c3:72:90:72:49:86:2c:77:a2:27:2a:cc:d8:
3b:60:f3:05:5a:83:7f:5c:25:9a:c7:e1:a5:ed:4a:
ef:8c:1d:e1:28:f1:23:a5:8b:75:ac:4c:cb:2e:2e:
7f:ba:de:eb:f7:e4:9d:d7:f5:ad:d7:5a:d9:bc:a8:
d7:4b:67:5f:d2:8e:a4:11:8b:8a:03:e9:cc:d4:94:
b1:34:53:66:df:dc:a7:a7:0c:1a:63:52:86:20:63:
7f:97:5c:cb:0b:b1:0d:2f:51:aa:97:fd:52:b7:1c:
3c:d8:f6:07:0a:a8:50:5d:b5:48:f3:b0:51:2b:3e:
38:6b:24:a8:5c:fd:f3:9d:c9:67:92:14:b1:1e:4d:
2e:ea:6d:51:b9:77:48:8c:dc:e1:91:5b:f1:4e:de:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:0B:36:14:43:67:69:8F:D8:2D:69:76:6A:6A:19:DA:73:F8:83
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:99:52:ec:f4:40:7c:eb:92:0d:9a:fb:5b:ca:b8:86:b7:4a:
8f:1a:f0:96:ce:a1:85:4a:74:b9:f9:a1:2b:63:f3:38:32:c5:
e2:5d:a4:57:7f:65:a5:29:46:d2:60:ce:08:01:cc:e3:d1:d5:
13:39:cb:c2:4c:c7:41:03:92:88:bb:62:02:5b:fc:b3:f2:5c:
70:c4:d2:32:32:77:08:78:bf:98:91:a1:13:8f:a3:ef:0c:3f:
6b:25:ce:ac:48:92:46:03:cb:95:9b:3c:83:fd:25:4d:36:cd:
ef:34:ed:a7:d9:f7:6c:24:a6:56:7d:03:e4:32:bc:a1:9b:32:
c1:a5:08:00:5e:93:25:cd:47:56:02:d7:14:3b:f3:a6:05:74:
12:32:d9:13:32:06:31:e3:04:0c:31:0a:e6:57:bf:9e:b5:ba:
ab:dc:41:a2:5e:9b:13:82:d0:0e:1c:7d:c2:a8:4b:01:59:6d:
c3:46:57:9b:95:95:3f:bc:1d:98:66:e7:fc:3c:0f:d1:38:54:
cd:e0:ce:36:ac:32:5d:39:d9:87:45:4a:ce:82:f9:69:4a:9e:
65:ce:16:31:61:cc:e3:bf:20:d4:03:99:2f:aa:be:b6:94:3d:
91:b0:94:89:07:b1:ed:84:0d:f4:20:cc:4f:a0:4f:b9:59:f6:
48:a8:14:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:27:50 2025 by rpki-client