Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: WVG/QqS/DRyJsqqGpKW+Sw5P9WLV0UzkzrAKJgcY1YI=
Subject key identifier: 8C:C0:EF:7A:0D:71:23:1D:D0:5D:96:AF:57:F6:25:35:4A:95:6D:D1
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 0199221E7CB4E1458A4784341E9FBE00C6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 1627
Signing time: Sun 07 Sep 2025 03:00:47 +0000
Manifest this update: Sun 07 Sep 2025 03:00:47 +0000
Manifest next update: Mon 08 Sep 2025 03:00:47 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: EJYSi+TskxCEQGxrqL8USa4gF38rNrOnbPe0bhMGY8U=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7c:b4:e1:45:8a:47:84:34:1e:9f:be:00:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Sep 7 03:00:47 2025 GMT
Not After : Sep 8 03:00:47 2025 GMT
Subject: CN=8cc0ef7a0d71231dd05d96af57f625354a956dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:28:f9:20:f6:66:57:20:84:52:e9:0f:a7:
34:c3:96:a8:db:40:a4:fe:22:2a:cd:86:04:65:c2:
59:73:95:6d:b6:a7:55:0a:da:77:79:23:1b:ef:82:
96:8c:68:b2:43:50:0a:c6:78:50:8f:bb:d0:d1:12:
94:d9:36:86:77:1e:56:c2:8f:ba:08:83:a5:d8:2d:
81:66:c9:51:10:f9:4b:a4:49:8a:ce:3c:c4:d5:89:
30:8f:24:bb:37:97:56:7d:fa:d3:81:3b:33:85:76:
34:ba:73:ef:c0:07:cc:96:fa:ca:e7:8e:f4:32:71:
01:0b:fa:f1:72:13:fb:58:d2:99:b8:bb:68:93:4c:
e9:54:83:1a:68:e0:05:6e:97:7c:6c:57:38:a5:8e:
a5:c8:70:4b:80:da:95:f1:77:82:0e:c7:c4:29:99:
67:0f:11:dd:b2:36:6d:11:24:9e:ad:bc:b4:01:21:
e1:39:14:9d:6e:99:1c:65:cb:01:95:a2:d6:04:aa:
91:ec:0f:36:6d:c8:7a:f7:04:b6:f5:e8:af:af:d7:
88:18:6f:92:81:8b:d9:a8:b2:27:a1:39:a6:bb:e5:
ff:be:51:b9:35:99:c8:c0:c2:bd:c7:db:b9:27:99:
b2:5b:9e:f2:03:8e:8f:31:59:fb:30:72:46:9f:f8:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:EF:7A:0D:71:23:1D:D0:5D:96:AF:57:F6:25:35:4A:95:6D:D1
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:95:43:12:ea:84:1c:c6:74:54:dc:84:c2:b8:77:14:43:11:
eb:d2:4d:8d:84:f4:1c:b5:20:1f:9b:f4:e5:c9:2a:48:cb:80:
f4:13:9a:af:39:45:8c:57:58:6d:39:33:0f:71:78:7c:60:85:
51:fa:92:96:5a:dd:e6:f2:54:2b:68:ae:29:c6:50:ce:ea:c7:
23:23:67:cd:27:99:38:20:7b:74:a0:25:24:2c:1d:d4:a4:10:
2b:a4:4e:fb:72:d2:af:6f:fa:44:29:51:95:42:32:ac:0d:79:
2d:47:24:46:74:8c:bb:75:c6:2c:66:8d:ab:83:6c:bb:cd:15:
63:8f:93:34:fc:13:9d:4b:b7:8e:e8:7f:84:cb:b6:1f:81:7c:
1f:d5:54:fa:f4:9b:97:d3:e3:f1:a7:05:43:9b:15:ec:62:00:
17:80:eb:db:ef:81:dd:50:58:f9:1c:8b:2e:86:45:a0:b4:7d:
3a:8b:80:5c:e6:83:38:cb:b1:46:f3:78:4c:f0:d9:54:75:8c:
8e:a9:b9:7a:c3:fa:63:90:c3:c8:17:fe:3b:24:f4:38:3a:54:
ef:ee:0b:aa:38:6a:98:35:bd:0c:5d:dc:06:71:69:38:4b:6f:
88:a1:8d:9b:53:82:c7:1a:79:7d:5f:60:91:2e:b1:43:f9:ae:
7a:1f:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:52 2025 by rpki-client