Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: rVdPj8+LxYzJl40rHKvnNzabAQR500ObU0GA+GPBoyU=
Subject key identifier: FF:4F:21:1C:28:EF:52:63:37:97:3B:2D:2C:CF:97:A2:56:37:BA:1B
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019A7149AB936B1B7F63E09D4422FBAD06C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: YNHc8lmhgZAHQNpbHFwz2K/AnbiQwTzmw9bWvx3zY0o=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ab:93:6b:1b:7f:63:e0:9d:44:22:fb:ad:06:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=ff4f211c28ef526337973b2d2ccf97a25637ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:b1:00:9b:8f:c5:30:73:ba:4e:27:a3:b7:
f2:57:97:2c:68:89:df:a2:3b:3a:d3:25:68:6a:f7:
14:37:ce:48:b7:ea:f0:c8:e4:a8:48:64:7e:17:e6:
31:67:b0:a2:25:26:1d:64:09:2f:c1:e7:91:22:e0:
7c:1e:5d:c2:b3:ae:5b:a2:bd:bb:a1:1b:57:9d:6e:
32:09:ee:d8:24:e9:84:e8:48:1c:7a:55:65:a0:91:
e8:be:95:49:07:4d:a0:8d:61:72:d7:26:34:cf:e9:
a1:61:e5:cf:17:64:ea:1e:7f:1c:28:24:19:e9:45:
df:5d:a7:ec:32:dd:41:f4:81:af:80:c3:f4:ee:46:
d2:ee:db:c6:c4:99:bf:d6:1f:67:79:50:fe:a0:3d:
c5:01:54:9d:7c:cb:db:b2:c6:ca:10:7c:23:88:48:
c3:6d:8b:a7:1f:d9:b9:8d:8a:8e:c1:92:f2:70:e8:
f5:59:c7:06:48:93:40:a8:ab:8b:8f:bd:20:fd:27:
36:16:3d:0d:dc:aa:bd:37:95:9d:90:33:fd:e4:a9:
06:39:30:43:a6:8a:40:f2:97:84:58:87:e3:23:19:
59:4b:3d:70:2c:73:54:8b:27:bd:99:95:12:5d:c1:
70:a8:1f:6a:10:94:6b:6d:21:c4:11:42:dc:b5:91:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:21:1C:28:EF:52:63:37:97:3B:2D:2C:CF:97:A2:56:37:BA:1B
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:14:0b:aa:88:2a:1f:fb:21:0f:86:4d:45:58:ba:90:53:ba:
0c:c3:d4:41:44:b6:4a:04:c6:12:88:0c:fa:63:45:d3:ed:45:
c7:a5:bf:9d:fb:74:6f:0b:34:15:2f:e6:f6:41:ef:8c:a3:e9:
65:f8:60:c8:41:ee:5d:c6:55:92:64:00:3c:3f:6f:29:95:2c:
b0:93:3e:9f:30:04:9f:fc:4a:dc:5b:ad:fd:5d:2b:c7:08:54:
0a:28:8a:f9:02:93:f3:11:36:0f:66:23:90:d3:c1:6d:34:be:
9a:9d:84:2d:b6:fe:a2:ae:32:17:34:cc:2a:16:66:9a:0b:a8:
6b:d9:b7:85:b3:dd:46:21:37:64:70:f7:81:cb:16:cc:4e:e0:
14:b6:a5:16:30:c3:4e:f9:98:84:08:23:2c:68:d3:e3:07:41:
ad:75:4d:b9:0b:61:f7:4c:23:c3:0f:dc:2e:f8:4f:2d:69:3b:
f9:d8:22:85:ad:cc:94:31:0d:fc:dc:43:79:7b:ca:50:ff:7f:
0e:23:00:4b:21:41:43:b6:d8:f3:db:d6:e5:5d:ed:90:37:46:
0b:47:ea:cb:70:e0:c7:71:8d:3f:f5:47:92:9a:f4:06:2e:94:
ce:74:29:09:eb:78:22:51:89:a2:16:92:1c:a0:1b:33:c7:f8:
14:de:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:36 2025 by rpki-client