Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: zrORG45SHvz9Yr4BNUWyfRr+F/PcbhN3j+CM0iKjzcE=
Subject key identifier: 50:29:43:AF:F6:E1:6E:FD:28:6C:C0:24:13:FF:B9:5B:BA:A6:5B:94
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 019A21E4638F1C5F70C98DC52EA3E935FFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 14C9
Signing time: Sun 26 Oct 2025 19:00:06 +0000
Manifest this update: Sun 26 Oct 2025 19:00:06 +0000
Manifest next update: Mon 27 Oct 2025 19:00:06 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: 7YBHWebDRpYyQtANgONiYq8esclomzYb74CN6wqON8M=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:63:8f:1c:5f:70:c9:8d:c5:2e:a3:e9:35:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Oct 26 19:00:06 2025 GMT
Not After : Oct 27 19:00:06 2025 GMT
Subject: CN=502943aff6e16efd286cc02413ffb95bbaa65b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:2f:d1:26:46:5c:e2:13:60:6b:55:18:21:
23:ce:a4:d2:df:d4:df:19:92:90:a5:90:78:09:90:
94:9c:b5:49:95:96:6c:46:f8:5a:23:66:1a:41:87:
69:55:5e:3b:5a:b7:8c:65:31:01:27:45:e6:e9:d7:
90:9a:ee:42:61:22:fd:87:46:0c:87:b9:1f:a6:21:
55:74:26:50:ee:56:6e:f7:33:cf:87:4a:0d:40:69:
50:d5:fd:c1:d6:0e:8d:f8:da:9e:4a:1d:56:6a:ea:
2a:cf:fa:0f:5d:48:0f:6c:c4:49:2d:cf:3b:15:d7:
61:db:e2:49:7a:72:1b:b1:de:91:33:f8:5a:00:e5:
d5:db:f9:35:61:87:8b:f7:9c:4d:0b:b2:76:81:b0:
86:1f:41:19:0b:a1:cb:a1:98:21:fe:2f:19:79:fe:
78:70:98:0c:69:56:96:27:1c:63:b8:2e:32:13:ac:
fd:d7:c5:3f:c3:46:5c:95:ac:eb:56:bd:13:23:86:
a4:69:de:0d:2e:0f:6c:46:85:da:cb:85:3a:63:9d:
16:a4:1f:c6:e0:04:a6:07:e3:90:6f:1e:77:e5:16:
1e:d9:78:70:99:3d:2d:e9:01:0f:b3:ae:a9:2e:69:
d0:ce:02:a3:f4:e3:fb:09:17:96:13:41:87:33:b3:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:43:AF:F6:E1:6E:FD:28:6C:C0:24:13:FF:B9:5B:BA:A6:5B:94
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:99:25:9c:4e:7a:f2:4e:f3:bd:79:08:f9:92:45:7b:02:
fe:41:6c:13:e1:29:a7:fc:c4:1d:b1:56:99:59:b9:e2:a4:58:
f1:50:07:37:f5:18:60:fb:cb:30:09:fe:11:da:e6:69:a9:bb:
75:c8:2d:83:53:06:11:27:be:ae:47:e7:cb:7b:21:33:df:64:
e9:cd:85:1f:cd:ac:be:ab:66:4f:73:6e:5f:84:39:f3:ea:ba:
dc:92:89:c2:ef:df:b1:3f:dc:56:6d:4b:14:c5:44:40:ca:91:
d3:f4:b1:8f:f6:74:6a:69:8f:cc:f9:fc:ed:46:99:a1:54:7c:
9a:d9:05:0b:06:a4:73:09:4d:9b:41:6c:7e:bd:69:b6:32:d0:
40:36:b8:96:ec:c0:0e:ec:db:46:e3:01:2c:5b:06:d2:46:62:
5f:b9:23:e2:b5:8f:fb:e3:c1:be:50:45:2c:93:1e:71:7b:bc:
d1:5a:41:69:70:5c:52:0b:1d:a4:7f:a0:fa:a7:3f:24:94:d8:
c7:47:9a:37:1a:9d:ff:d2:fe:b2:8a:57:a2:e5:78:ad:bf:b9:
6d:9e:19:ad:11:e7:22:3a:48:1e:84:9e:85:bf:41:d1:e5:da:
4b:f9:51:31:bd:5a:88:79:03:d0:fd:76:84:07:1b:80:f8:cf:
a5:26:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:31:02 2025 by rpki-client