Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: XN2hxxyHKUj1CwXP7R9uOqOYi5QarkSDERVbh8RVUeg=
Subject key identifier: C0:DB:7E:79:EB:A4:5B:E6:D9:0B:68:CF:CC:8C:AA:F0:91:21:5D:3F
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 019A725C4C2371CD8CD9A99674CD3E6008CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: 1UVM0FsswkzzLRQ2xL9Jd0GH0RLTKmLxnMljCdZxUAg=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4c:23:71:cd:8c:d9:a9:96:74:cd:3e:60:08:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=c0db7e79eba45be6d90b68cfcc8caaf091215d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:a3:85:ed:76:77:2c:a3:78:b2:dc:b1:4f:
62:00:e4:01:cc:f1:29:5b:8c:e6:52:81:c4:4a:3a:
ee:7a:26:45:ae:b0:66:90:3f:f3:b7:49:a1:8b:37:
2e:77:a2:40:46:93:79:b5:ba:30:9e:ac:82:3f:68:
a0:f2:9a:e4:ca:be:ca:0e:b6:9a:4d:a4:f8:ed:65:
9b:85:68:31:83:35:6d:bc:9a:ce:37:2f:c0:5b:64:
a0:03:7e:63:08:16:f7:b7:84:66:6b:24:0f:bc:45:
2f:5c:49:af:69:9a:d2:1a:72:89:23:db:a9:9f:a0:
76:ca:f5:5d:f9:3b:39:db:6b:2a:b6:d6:0b:96:90:
77:ea:64:bf:e3:01:73:5a:30:4b:b7:b8:a3:04:ca:
0b:e3:59:35:87:1c:f1:ca:8d:6b:26:60:70:06:d2:
2d:df:70:5a:ab:3b:35:45:95:f1:9f:b8:8b:1e:18:
38:96:4e:79:bc:08:3b:f5:8a:e4:69:05:66:78:6c:
95:a1:a3:71:4c:44:26:0c:66:9b:c9:70:65:fb:7a:
cd:fc:98:73:88:f9:44:ab:01:36:35:15:99:ee:78:
b6:de:8d:25:9e:a3:02:c2:30:e9:cf:1c:f3:8e:7a:
4a:c2:bb:87:89:f9:fa:e5:8a:b1:e4:39:24:27:92:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:7E:79:EB:A4:5B:E6:D9:0B:68:CF:CC:8C:AA:F0:91:21:5D:3F
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:50:63:60:ef:fd:ed:ce:e3:33:b6:79:be:6e:7d:0f:4e:
29:fa:aa:94:07:9a:32:c6:64:5d:ee:f8:2c:ef:e8:5f:50:24:
27:c0:3f:85:4a:50:12:56:60:bc:da:80:2a:c5:db:c1:47:81:
19:72:7d:ba:37:2b:40:38:17:8c:79:56:75:8b:96:bf:38:66:
39:7e:b7:d9:1f:a6:8c:6b:b5:f7:5f:07:cf:f0:54:e0:db:62:
cb:a1:61:15:87:a1:23:cf:7b:f5:9a:7f:6d:3f:37:8b:db:6d:
21:bb:17:22:d4:3b:c8:3c:7d:7e:e6:18:f3:b8:2a:cb:35:65:
3a:f2:1a:79:9f:42:8a:f1:90:b9:9e:da:ec:1c:a9:f8:78:31:
d2:40:e5:5b:a4:61:be:02:03:fd:01:fb:95:15:25:a6:bd:0d:
cc:c9:7e:40:e7:f6:61:d2:b0:aa:0a:e7:d4:67:ce:38:da:93:
8f:7d:a9:0a:d3:19:a5:46:2c:5a:56:65:9b:1c:02:3a:88:30:
84:2c:93:6a:38:45:61:f8:57:16:e3:cd:b9:8a:20:09:f5:4d:
b1:cf:5a:6f:1f:ec:0d:e2:6f:aa:64:c1:21:ec:ff:f4:1e:b7:
91:93:80:19:2b:b9:c6:5d:bc:48:38:e6:d6:01:26:65:d0:2d:
5e:22:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client