Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: 7CBhG5v1clskj9iNaBsyYE0HmQovmLQodJu6XS+cvzI=
Subject key identifier: F5:08:E0:7D:2F:AA:60:39:AF:D6:59:21:8B:54:96:7A:BC:A0:DC:D7
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 019A4F98DE361A53CC458A17E9189B3DADCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 076B
Signing time: Tue 04 Nov 2025 16:00:09 +0000
Manifest this update: Tue 04 Nov 2025 16:00:09 +0000
Manifest next update: Wed 05 Nov 2025 16:00:09 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: xM601C1GaCxTxToG3OjhgjX6BKc+WLmNQBIDIcUKf+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:de:36:1a:53:cc:45:8a:17:e9:18:9b:3d:ad:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Nov 4 16:00:09 2025 GMT
Not After : Nov 5 16:00:09 2025 GMT
Subject: CN=f508e07d2faa6039afd659218b54967abca0dcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:25:5a:c7:9a:5a:21:78:b9:89:90:58:84:
b4:7a:b0:30:3f:ca:cb:90:52:a9:1b:5b:42:34:db:
b8:d0:d0:29:e0:73:2d:0d:e5:d0:1c:79:93:8b:54:
dc:31:a2:35:84:ef:e5:55:8b:b6:2e:ba:49:c4:1e:
b9:e3:e7:91:68:5a:2f:6e:95:86:45:4e:c1:44:db:
40:83:bc:4e:0b:0a:dd:f7:23:f9:7f:0d:cd:78:2c:
19:f6:7a:36:c8:5a:9d:fb:92:96:66:c0:5c:89:24:
5b:d2:37:e4:15:92:4d:38:46:0e:ce:aa:cf:e3:71:
82:27:bd:c2:d9:0c:4c:f1:16:d5:f1:10:dd:15:67:
4a:4f:87:de:73:ca:8f:76:75:f1:24:22:7a:35:34:
00:84:72:94:c0:37:30:d5:54:f4:5d:b4:4d:fc:a5:
b8:27:28:16:9a:6b:77:d2:30:0f:95:21:b4:4b:61:
23:c5:e5:24:1d:dc:d1:11:86:3a:23:04:01:43:79:
26:f6:c5:9f:29:14:b7:ad:c4:f4:17:7d:11:5f:e4:
72:30:a6:e8:ee:47:0f:7c:19:85:c4:98:c0:c7:2c:
d4:cf:39:b8:40:ac:96:f5:06:51:2a:dd:11:a2:fb:
ee:95:00:2a:49:44:60:1b:32:34:3c:1f:db:e2:a7:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:E0:7D:2F:AA:60:39:AF:D6:59:21:8B:54:96:7A:BC:A0:DC:D7
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:01:2c:8e:12:74:08:7e:17:e1:5e:45:84:13:07:a2:fe:61:
92:b5:51:a1:e3:f1:20:f0:53:97:2e:ea:81:14:12:75:3d:09:
c4:5d:b3:48:ea:fe:84:76:bf:fc:45:3c:0c:11:06:0f:4c:a0:
5f:c2:8a:01:6e:36:56:de:9d:42:e6:d4:99:9d:5a:9c:7a:50:
68:16:43:0e:c2:24:b9:4a:dd:97:4d:96:8a:26:38:e4:34:3f:
fe:6f:2f:e6:79:e2:b3:c0:b6:4f:46:ce:8a:94:ca:92:1a:30:
8f:62:43:b3:0e:a5:5f:30:b2:08:1d:f0:2f:ca:a7:7b:f1:b8:
03:42:75:af:3a:06:79:75:db:b2:99:f8:01:dc:ba:6f:f3:49:
73:5c:7e:8c:4b:71:d1:35:1f:42:c9:ff:6e:53:79:b5:68:95:
be:b1:94:31:93:0f:e1:d9:5b:0a:c3:26:a8:58:8a:bc:10:57:
f8:12:b1:df:b4:e8:bb:8d:fa:27:8f:ef:2c:e4:0e:e1:f9:6d:
16:13:09:cf:b5:d4:f4:1d:7c:0e:24:d0:23:9f:a0:14:1b:0d:
5d:e2:8b:26:06:8e:c7:8a:84:3d:be:d9:cc:0b:fd:81:aa:55:
71:7b:4a:eb:62:c2:15:bf:66:45:77:5b:d7:01:34:06:28:9a:
88:a2:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:23 2025 by rpki-client