Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: LN7e/qH0B4T2XgBpxX0dDUNjqsAIDZYAppFcoI0pAJ4=
Subject key identifier: 03:11:7A:50:A1:2F:AC:F0:13:ED:14:14:57:18:81:B7:FB:36:31:F7
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019A2A79F199A004C6C56858F4F394DBB945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 1066
Signing time: Tue 28 Oct 2025 11:00:26 +0000
Manifest this update: Tue 28 Oct 2025 11:00:26 +0000
Manifest next update: Wed 29 Oct 2025 11:00:26 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: nBdqdv1pAinP0UZyZxVtSVWRUOYGdPoS6JPsU7y+Ne0=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:f1:99:a0:04:c6:c5:68:58:f4:f3:94:db:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Oct 28 11:00:26 2025 GMT
Not After : Oct 29 11:00:26 2025 GMT
Subject: CN=03117a50a12facf013ed1414571881b7fb3631f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:d8:33:a8:37:b0:7b:33:6e:0f:f5:fe:5a:
48:81:28:85:c6:49:40:d1:72:0e:01:f8:60:a2:4d:
ed:59:c7:e0:a9:65:75:56:21:37:37:0d:29:5b:40:
0a:a3:81:67:1b:93:40:ce:84:36:62:af:67:63:fa:
72:a3:82:5e:00:0b:29:be:1f:45:a5:4e:53:78:1b:
ae:81:82:b0:87:fc:bd:c7:6a:60:61:09:43:ba:28:
e3:8d:14:72:d9:5b:55:3f:f7:6d:de:44:f4:94:d4:
f9:d8:b5:a0:b1:a2:11:19:f4:6b:d8:8e:4b:d3:5b:
41:41:55:f0:bd:fc:a3:95:76:7d:b2:81:de:f3:21:
36:0e:6e:52:c7:9b:01:2b:9e:4a:cc:0d:f0:ed:6b:
ed:0d:f7:b1:ae:8f:cb:4a:32:76:04:3b:68:6d:19:
85:9e:59:10:ec:a8:50:0d:10:1a:b7:e6:80:cf:0b:
fb:a4:5e:83:64:53:61:e6:75:be:5e:23:9d:2a:0e:
dd:66:be:6c:c3:be:79:25:a6:9b:83:68:a6:cd:ca:
27:05:8f:7e:0e:5e:3a:42:fc:b6:cc:cb:b9:36:f0:
e6:ca:41:b0:ec:90:8e:31:09:7e:0d:e6:1b:43:14:
3b:e1:52:35:aa:50:0c:3b:dc:b0:5e:60:2f:2a:a9:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:7A:50:A1:2F:AC:F0:13:ED:14:14:57:18:81:B7:FB:36:31:F7
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e8:7b:f8:b7:d8:b4:74:67:ba:cf:86:e9:72:79:21:21:a6:
d0:33:9b:e6:4f:85:e5:4f:67:ea:9f:88:cc:cd:2e:c5:eb:cd:
a0:dc:bc:c7:33:dc:09:5d:22:ff:91:15:91:ca:a5:99:40:4f:
98:dc:c6:a6:0f:95:e3:81:f5:39:e1:8b:3b:48:03:12:14:67:
e5:b7:4b:59:f7:65:1a:0a:8f:aa:03:43:ba:58:d5:66:1c:35:
c7:72:fa:84:43:ad:a8:f8:63:96:98:b5:11:71:c4:6c:56:84:
9b:34:7b:9e:0a:2a:bc:6b:4d:d2:9a:30:c4:a9:94:d7:98:c4:
16:f8:63:7e:31:aa:d7:8c:dc:8d:17:2c:c1:54:98:46:02:89:
2d:18:17:a3:e8:83:67:68:0b:1b:4d:de:98:3b:2d:cc:28:48:
d9:d4:a8:4d:d5:bc:6a:88:35:a3:b1:c3:64:1d:2c:1d:1a:c4:
b1:b4:d8:fa:ec:33:e9:c0:55:d0:3a:18:3e:61:b8:51:42:c8:
e1:3d:83:8e:31:f8:c2:9a:a8:5a:78:37:51:af:08:27:99:4e:
40:37:25:3c:95:83:f9:50:fe:81:85:d5:16:29:a7:36:38:e6:
4a:fa:2a:6f:52:43:55:75:09:06:05:89:da:34:d9:b2:80:26:
7e:ed:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:32:02 2025 by rpki-client