Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: zS2vg4qR+1Zw/MSSRgzfyGbmp3vST8NNRP7KBEfc4vA=
Subject key identifier: 30:91:0F:7B:46:40:B0:F9:2D:4C:DE:81:D1:08:78:FD:5F:4E:31:D0
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019A2109794AF1AF47BB5184DF9CEFC2EBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0B2A
Signing time: Sun 26 Oct 2025 15:01:00 +0000
Manifest this update: Sun 26 Oct 2025 15:01:00 +0000
Manifest next update: Mon 27 Oct 2025 15:01:00 +0000
Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: vnUQ5XXSWaRc71qIaPVtwWOWZUQc4Uh4WoipDROu5c8=)
2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:79:4a:f1:af:47:bb:51:84:df:9c:ef:c2:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Oct 26 15:01:00 2025 GMT
Not After : Oct 27 15:01:00 2025 GMT
Subject: CN=30910f7b4640b0f92d4cde81d10878fd5f4e31d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:cf:fb:76:d3:ac:51:0d:4f:58:e4:cc:32:
e6:1b:fe:ed:cd:d6:02:1c:07:a8:ad:df:c3:a5:e4:
b6:e5:1d:15:9e:55:03:ff:0e:d5:83:f5:b9:ac:b3:
b3:20:45:e3:9a:27:a0:4e:4c:5a:6e:9c:21:1b:a6:
2c:39:04:db:5c:c0:6d:53:2d:e3:6f:0b:c8:04:07:
66:a8:8e:c9:f9:b3:13:25:54:e1:4f:f8:f5:65:6e:
63:3f:9b:1a:0a:23:fb:e8:6b:c8:c4:45:44:fe:cf:
9f:b0:31:13:74:89:29:ee:f0:ca:fc:52:88:f9:30:
20:a1:64:bd:06:48:4b:95:85:64:6e:45:a8:d7:47:
77:c4:a3:6d:23:ea:d7:2d:fb:0a:6b:a5:c4:46:1e:
4f:ce:b9:6b:3e:be:41:2f:dc:7e:e2:5a:43:40:fd:
32:52:6f:5d:e4:36:9d:82:57:7e:ad:49:d4:0b:84:
80:fb:c1:a7:5c:a0:80:a4:c6:1c:c8:55:a4:a9:08:
27:05:13:ff:65:48:d0:1c:6f:e1:17:1d:06:4b:88:
73:c0:5b:4f:4d:2c:e4:d7:ce:b2:44:26:c9:12:8d:
5e:d5:32:16:b3:2d:f3:bb:d3:d6:28:12:6c:1a:4d:
97:89:d0:56:e5:21:17:ab:25:f8:20:80:ef:88:97:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:0F:7B:46:40:B0:F9:2D:4C:DE:81:D1:08:78:FD:5F:4E:31:D0
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0a:33:cd:7d:1f:62:8e:38:f8:d6:82:0f:d1:ed:a2:6a:7c:
44:e5:e6:4c:65:4d:e4:cb:27:9e:07:69:31:e0:b1:94:e3:fc:
f9:b7:21:7f:ed:5e:10:77:e0:2a:0d:be:89:f2:2a:3f:a9:20:
59:f1:68:b5:f1:67:23:9d:48:75:24:b5:1b:4d:e9:40:24:b3:
6c:8c:63:19:77:9f:30:ff:ef:7c:bc:55:fa:cf:59:71:ee:2d:
26:6f:12:27:c7:72:f3:e7:90:c3:24:0f:70:db:48:ee:6d:a3:
66:d4:57:6c:c6:32:bc:92:cc:90:8e:ba:4c:5b:59:a6:3c:ce:
84:2f:18:07:6d:a7:5b:c4:ed:10:9f:86:b4:fc:63:a4:34:aa:
71:19:ff:68:7d:6b:c1:de:63:05:2e:7b:f9:b5:e5:60:60:1c:
a2:53:d6:16:ad:bb:ee:56:d7:52:8d:1f:a8:89:16:8e:7c:18:
d5:c4:1a:3c:45:eb:02:f8:eb:a5:39:53:d0:6a:f0:29:ec:93:
d4:18:13:eb:de:c8:aa:23:de:b5:08:4c:13:0b:7d:8b:76:2c:
66:06:b1:1a:ab:b9:43:40:38:ec:25:78:30:9d:f0:52:09:55:
b0:87:64:9a:e0:45:e2:06:b9:01:82:04:e4:f9:8a:90:0c:66:
fa:b6:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:20 2025 by rpki-client