Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: ztUkJpwEIfRQTTkUdxxYxhmnirxCkzC4zdALnbS65is=
Subject key identifier: 93:27:0D:6D:5D:27:C0:78:66:DD:82:D8:08:44:4D:4C:84:6E:AB:EA
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019A28550F6AC1566ACCFE861F4294A2D5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 14A6
Signing time: Tue 28 Oct 2025 01:00:54 +0000
Manifest this update: Tue 28 Oct 2025 01:00:54 +0000
Manifest next update: Wed 29 Oct 2025 01:00:54 +0000
Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: urYErb5pvW/ldA2RoQ5Y94ooKGpuWdGLfnPEwTdsTGM=)
2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:0f:6a:c1:56:6a:cc:fe:86:1f:42:94:a2:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Oct 28 01:00:54 2025 GMT
Not After : Oct 29 01:00:54 2025 GMT
Subject: CN=93270d6d5d27c07866dd82d808444d4c846eabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:31:dd:62:60:f3:81:e2:8f:94:0a:e4:f6:
81:2d:00:5c:d9:a4:fe:66:6e:7e:b9:58:ee:e8:48:
1f:06:ed:a2:ee:27:13:fc:30:f8:df:25:08:11:84:
45:34:8b:d0:33:f4:d6:55:0e:ea:33:a3:33:98:dc:
ef:5e:3e:d2:44:fa:ad:6c:30:8b:55:6f:87:1f:ef:
13:f1:9d:97:47:91:f7:f4:a4:a5:cd:a5:53:db:d7:
e7:3b:1d:3a:07:cf:a3:d0:62:c4:f6:cf:76:5b:c5:
4f:10:76:b1:de:33:6f:69:c6:7b:d3:67:ae:63:08:
83:fb:ca:83:9b:45:0e:fc:87:fb:19:30:d5:79:11:
36:20:97:41:5d:e6:c6:d1:92:be:0a:45:4e:40:69:
00:52:fb:07:5c:6c:c8:1e:71:60:fb:4e:ed:39:1c:
84:21:7c:86:ec:08:10:67:4d:44:fc:79:16:1f:bd:
54:97:5c:f0:a4:75:b9:a8:9a:c4:d9:ad:ee:72:20:
49:cd:9b:c6:f2:eb:23:4e:e1:99:04:66:5d:b6:a1:
be:4d:44:92:22:16:3c:2f:55:de:47:b4:d0:b8:e6:
c5:f0:00:9e:a6:4b:cc:48:aa:2a:cf:2c:2b:cf:7d:
43:0e:03:89:a3:7c:85:5b:43:85:94:2d:71:b9:42:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:0D:6D:5D:27:C0:78:66:DD:82:D8:08:44:4D:4C:84:6E:AB:EA
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:31:48:a1:5a:88:35:c3:4f:81:45:39:83:9c:7b:67:40:
55:18:4d:a6:de:12:a6:1e:03:a6:c7:a8:26:b0:cc:b3:c0:1e:
a7:e7:ae:6e:09:e3:54:a4:cc:03:e0:37:20:34:ba:de:f0:4b:
fb:78:f8:5d:d4:44:96:c2:b5:fa:50:59:bb:e2:ce:7e:3e:d4:
a5:db:c1:57:f6:1b:15:b3:38:ad:43:7c:50:22:ba:11:7f:60:
38:bf:2c:db:76:23:1a:24:e6:b3:58:fa:5e:43:90:c6:f8:38:
29:a2:ff:a0:b3:fe:bb:a4:2d:a1:3a:d1:d6:e1:ce:ba:07:6c:
09:39:16:36:e2:84:aa:b7:11:53:d8:c6:df:19:13:9f:bd:01:
cc:f8:dd:cc:8e:30:6c:01:82:45:e1:71:86:9a:68:ca:b6:e3:
c2:59:69:b7:d3:2d:c4:b0:7e:5b:48:d1:06:64:c8:0a:f9:79:
eb:22:7c:45:ea:1a:7b:6c:8b:91:07:d4:85:45:5c:5d:ee:c0:
8b:85:a4:75:60:04:fb:72:84:c0:f5:d0:7f:7d:8a:92:58:d6:
68:b3:21:7f:03:ef:ea:f5:56:01:44:f8:ee:28:33:df:b7:5a:
c1:87:0e:c3:2f:01:36:9d:66:36:66:62:d3:1e:9f:17:a1:cc:
57:24:67:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVQ9qwVZqzP6GH0KUotXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1
YWQwNjAwHhcNMjUxMDI4MDEwMDU0WhcNMjUxMDI5MDEwMDU0WjAzMTEwLwYDVQQD
Eyg5MzI3MGQ2ZDVkMjdjMDc4NjZkZDgyZDgwODQ0NGQ0Yzg0NmVhYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh8x3WJg84Hij5QK5PaBLQBc2aT+
Zm5+uVju6EgfBu2i7icT/DD43yUIEYRFNIvQM/TWVQ7qM6MzmNzvXj7SRPqtbDCL
VW+HH+8T8Z2XR5H39KSlzaVT29fnOx06B8+j0GLE9s92W8VPEHax3jNvacZ702eu
YwiD+8qDm0UO/If7GTDVeRE2IJdBXebG0ZK+CkVOQGkAUvsHXGzIHnFg+07tORyE
IXyG7AgQZ01E/HkWH71Ul1zwpHW5qJrE2a3uciBJzZvG8usjTuGZBGZdtqG+TUSS
IhY8L1XeR7TQuObF8ACepkvMSKoqzywrz31DDgOJo3yFW0OFlC1xuUJdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMnDW1dJ8B4Zt2C2AhETUyEbqvqMB8GA1UdIwQY
MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct
OTUwNDU1ODY4MDJlLzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl
LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1IxSKFa
iDXDT4FFOYOce2dAVRhNpt4Sph4DpseoJrDMs8Aep+eubgnjVKTMA+A3IDS63vBL
+3j4XdRElsK1+lBZu+LOfj7UpdvBV/YbFbM4rUN8UCK6EX9gOL8s23YjGiTms1j6
XkOQxvg4KaL/oLP+u6QtoTrR1uHOugdsCTkWNuKEqrcRU9jG3xkTn70BzPjdzI4w
bAGCReFxhppoyrbjwllpt9MtxLB+W0jRBmTICvl56yJ8Reoae2yLkQfUhUVcXe7A
i4WkdWAE+3KEwPXQf32KkljWaLMhfwPv6vVWAUT47igz37dawYcOwy8BNp1mNmZi
0x6fF6HMVyRndQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:46 2025 by rpki-client