Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: VBIJb16KLbqLz5Rl/TXhl3BkvfEjm0+5puftTRqt7lY=
Subject key identifier: 24:09:B2:EB:23:D7:74:B3:B7:5E:C8:62:B7:6B:22:56:07:75:60:81
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01992BFD021CB2D0B929539717BA75E56D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 0561
Signing time: Tue 09 Sep 2025 01:00:25 +0000
Manifest this update: Tue 09 Sep 2025 01:00:25 +0000
Manifest next update: Wed 10 Sep 2025 01:00:25 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: coDIKCcprEfoyyHZLLz8c+rACPe9gcggRQ5em8abdg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:02:1c:b2:d0:b9:29:53:97:17:ba:75:e5:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Sep 9 01:00:25 2025 GMT
Not After : Sep 10 01:00:25 2025 GMT
Subject: CN=2409b2eb23d774b3b75ec862b76b225607756081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:d0:e8:68:8b:02:9e:4b:02:df:0f:5a:45:
6a:47:d3:50:b0:16:2b:ba:8b:c9:50:0e:9d:ea:e5:
62:3f:60:ad:43:ac:0b:bb:97:22:2a:29:9b:9f:99:
6c:ad:d1:8c:58:e0:d3:42:04:4f:32:10:91:e1:16:
39:b8:a0:4c:07:8c:56:ae:87:70:a8:8e:34:bc:6d:
a1:70:f2:eb:53:d9:d9:14:26:e2:b7:c7:ef:b1:52:
6a:13:91:09:40:cd:62:cf:4d:d9:f5:d5:96:e2:98:
d3:d7:b4:35:ea:63:0a:ae:72:a3:31:93:18:08:96:
e8:f7:7c:dd:cb:9f:17:0a:81:29:ab:30:56:38:04:
27:e7:cd:19:51:98:f8:20:78:64:73:23:4b:2b:83:
ed:bc:68:b6:fd:98:b5:11:5f:a7:ef:8d:78:72:83:
a2:2b:96:ab:e5:bb:26:b7:b2:19:e6:b3:41:df:22:
10:cb:80:b1:49:b8:dd:e1:be:4e:ee:58:96:51:f3:
a4:14:70:8b:3c:f6:23:bc:16:32:7c:eb:97:14:f5:
00:21:bd:76:a1:16:a9:5b:88:af:f9:37:e0:e7:be:
13:f6:a5:8d:35:76:de:0f:ad:33:4d:39:27:74:0d:
e6:0f:75:db:5c:5d:7d:15:3b:e5:16:92:38:9b:f1:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:B2:EB:23:D7:74:B3:B7:5E:C8:62:B7:6B:22:56:07:75:60:81
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:c9:42:cb:ce:d7:ac:be:8b:ef:a6:9c:68:0e:44:ab:d4:
09:60:42:b0:dd:a0:40:b3:ed:72:4f:96:de:db:fb:ab:0e:55:
00:e0:f7:55:20:f5:a5:ec:31:25:c7:c3:d7:ed:62:f1:b4:6b:
81:34:48:19:82:da:86:89:e8:f6:d5:c1:4e:f9:c1:09:1e:cf:
62:6b:7e:e2:e0:1b:2e:ff:e8:28:5e:75:30:25:15:07:1e:2e:
73:c5:ac:e1:71:97:93:a9:a3:f4:b4:d7:4b:66:a9:1c:4b:76:
96:be:94:f7:a3:8d:60:b0:07:eb:08:fb:99:0f:be:5a:06:a8:
90:d8:30:4b:09:b3:5a:0b:c0:e2:1c:ce:92:f1:af:8d:f8:13:
6c:6d:66:5b:43:21:10:7b:c7:a9:2c:91:c4:3f:21:d9:c3:42:
fa:e6:59:d8:60:44:7f:3a:dc:23:e0:7b:17:36:b3:3f:4b:bf:
c2:60:85:d0:d4:01:c3:e2:9a:84:8c:fc:20:be:01:c7:a4:b5:
4a:52:2e:2e:66:0e:6c:b3:dd:9d:71:56:1c:d3:a7:39:ba:12:
21:92:d1:82:9b:6b:c3:22:42:b2:b2:29:35:9d:b8:e2:fb:e0:
00:27:1a:b6:56:d8:fb:d8:e0:d1:93:4f:90:8f:9c:44:b0:f5:
a2:43:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:40:13 2025 by rpki-client