
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: JnOgfM4F8VFmfWDwXUw5YFetCc6cfcppDoQdEIvfZWQ=
Subject key identifier: 1F:11:51:B8:86:5F:B8:09:39:3D:1F:05:A1:0C:28:E5:91:F4:90:18
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 0198A23BF3495510D5BEF4B072FAE802903C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 162F
Signing time: Wed 13 Aug 2025 07:01:34 +0000
Manifest this update: Wed 13 Aug 2025 07:01:34 +0000
Manifest next update: Thu 14 Aug 2025 07:01:34 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: THHAfH4DBNho0B5DDJweZ/FraOOSgRNGiou4Wgsr3Co=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3b:f3:49:55:10:d5:be:f4:b0:72:fa:e8:02:90:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Aug 13 07:01:34 2025 GMT
Not After : Aug 14 07:01:34 2025 GMT
Subject: CN=1f1151b8865fb809393d1f05a10c28e591f49018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:b6:75:17:c1:ef:3e:52:4d:82:b7:61:f5:
42:91:1c:68:5f:33:6f:54:27:f2:d5:48:7e:77:d4:
61:b1:a8:d1:bf:64:9e:2d:80:54:92:4a:dc:03:b9:
a4:df:ed:45:3e:54:0c:af:af:e9:4e:5b:1f:87:48:
b3:a5:60:d7:af:9b:5a:ce:fd:56:5e:26:ab:a3:6c:
e5:5f:40:19:35:fd:88:7e:6d:23:5a:49:6f:5a:54:
4d:65:4b:ee:00:af:37:5d:9f:d0:4f:90:82:64:88:
2f:4e:e2:b9:fa:4e:95:43:86:43:f0:a1:27:43:54:
34:4b:01:ab:42:c6:87:85:f2:8c:fb:2c:51:cd:ce:
48:a6:17:d0:bb:cb:af:27:15:c0:79:64:7d:9a:6b:
68:23:6d:2b:45:e2:f8:cb:4d:be:3b:b0:07:71:d4:
08:45:7a:34:be:1f:bb:8c:27:96:4e:b7:3d:30:e7:
48:fa:4e:0e:87:93:8b:8c:7a:31:53:70:04:44:42:
0f:16:a4:de:e0:dd:5c:8b:20:c5:62:50:03:2b:ea:
95:a4:ea:11:60:c8:d0:77:2b:c8:60:f8:1b:cb:59:
75:b8:32:44:c2:4a:df:45:18:27:21:be:8d:15:3f:
c0:b0:42:7c:4d:2b:aa:35:bd:91:cd:d2:36:36:68:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:51:B8:86:5F:B8:09:39:3D:1F:05:A1:0C:28:E5:91:F4:90:18
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:45:d9:6e:ba:a9:ae:2a:4e:bd:25:90:1a:d7:60:4b:26:
f2:2c:84:1e:f2:2e:ae:cd:4a:9d:ef:83:7f:2d:40:b6:b9:14:
6e:9d:92:09:16:a6:a4:8e:36:db:20:c5:fb:b9:ac:73:c9:b7:
9b:bb:d0:8c:2d:c4:51:ff:f4:21:22:ce:90:f5:60:9e:26:8e:
fe:d6:f8:36:b1:ac:b4:cb:94:2a:9a:12:3a:b2:8a:7b:5b:fe:
0e:5e:e7:77:f3:8e:81:69:85:50:99:df:42:90:86:02:19:b0:
5d:69:ee:b1:6f:32:3f:0f:97:56:9d:b9:f3:b8:c8:a2:37:c7:
06:35:d1:e2:70:18:cd:86:7c:81:20:6d:64:dd:4d:e1:94:c5:
15:63:7f:7b:23:96:d9:5a:3e:c7:07:3f:47:c9:42:24:0d:e5:
d1:90:8e:f9:ba:3d:e1:91:84:a3:fd:bf:96:b6:ce:be:9b:d4:
a7:4b:6f:5b:69:7a:a0:d3:a2:00:20:42:12:eb:3f:cf:2c:da:
b3:f7:84:14:e1:79:7f:7e:47:ea:15:ca:45:da:e3:92:d1:38:
5f:ec:6a:0d:33:4f:99:75:2f:af:a4:04:20:1e:14:38:b4:ac:
84:69:7d:e6:af:8f:f6:58:37:38:80:a3:38:e8:07:cb:7e:ab:
eb:bd:3a:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiiO/NJVRDVvvSwcvroApA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjUwODEzMDcwMTM0WhcNMjUwODE0MDcwMTM0WjAzMTEwLwYDVQQD
EygxZjExNTFiODg2NWZiODA5MzkzZDFmMDVhMTBjMjhlNTkxZjQ5MDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10q2dRfB7z5STYK3YfVCkRxoXzNv
VCfy1Uh+d9RhsajRv2SeLYBUkkrcA7mk3+1FPlQMr6/pTlsfh0izpWDXr5tazv1W
Xiaro2zlX0AZNf2Ifm0jWklvWlRNZUvuAK83XZ/QT5CCZIgvTuK5+k6VQ4ZD8KEn
Q1Q0SwGrQsaHhfKM+yxRzc5IphfQu8uvJxXAeWR9mmtoI20rReL4y02+O7AHcdQI
RXo0vh+7jCeWTrc9MOdI+k4Oh5OLjHoxU3AEREIPFqTe4N1ciyDFYlADK+qVpOoR
YMjQdyvIYPgby1l1uDJEwkrfRRgnIb6NFT/AsEJ8TSuqNb2RzdI2NmjdewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8RUbiGX7gJOT0fBaEMKOWR9JAYMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLtF2W66
qa4qTr0lkBrXYEsm8iyEHvIurs1Kne+Dfy1AtrkUbp2SCRampI422yDF+7msc8m3
m7vQjC3EUf/0ISLOkPVgniaO/tb4NrGstMuUKpoSOrKKe1v+Dl7nd/OOgWmFUJnf
QpCGAhmwXWnusW8yPw+XVp2587jIojfHBjXR4nAYzYZ8gSBtZN1N4ZTFFWN/eyOW
2Vo+xwc/R8lCJA3l0ZCO+bo94ZGEo/2/lrbOvpvUp0tvW2l6oNOiACBCEus/zyza
s/eEFOF5f35H6hXKRdrjktE4X+xqDTNPmXUvr6QEIB4UOLSshGl95q+P9lg3OICj
OOgHy36r6706Ng==
-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:11 2025 by rpki-client