Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: uN4jnJ+SV3/2xDwq4L2CgYEQKtdaACTcr5pawJCv5GE=
Subject key identifier: E9:C6:73:41:F9:6C:A4:3A:B2:CC:CE:F1:DB:BC:27:12:10:EB:A0:63
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019A4D7423562473D42CABD7B5A5D424E145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1609
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: 3Qw6jisMcJGiPKb3pd7sDtQ25sYcjTfuSqGK0rX96+0=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:23:56:24:73:d4:2c:ab:d7:b5:a5:d4:24:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=e9c67341f96ca43ab2cccef1dbbc271210eba063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:1f:ab:c5:7f:e1:50:23:41:b5:30:86:bd:
00:79:88:93:56:19:ed:99:4e:0d:3a:43:d9:55:4e:
9d:b8:c3:0d:20:5f:3f:56:44:e4:4e:78:33:83:ed:
25:74:32:0c:3d:78:3a:9a:a1:37:cf:70:85:f7:d3:
9e:1f:a8:7d:52:7e:02:e6:87:44:f5:bd:38:4b:74:
2c:19:ad:fc:a2:93:f5:30:56:ae:91:63:59:2a:94:
1d:e2:d8:6c:19:b3:26:83:74:4a:d7:e3:6b:18:d5:
51:57:3a:ea:2e:41:8d:3a:ab:43:36:d7:cb:ae:69:
1e:85:5c:c1:21:54:1c:0f:1f:fd:d3:4c:bc:7a:f8:
62:a5:ce:00:2c:09:23:84:e9:0e:83:92:fa:35:18:
ef:1a:be:50:f9:00:d5:10:0e:cc:56:79:4c:56:d8:
4e:10:b8:47:05:9c:64:6f:7a:86:ae:c5:35:ac:e2:
56:f5:6a:09:35:9a:f4:55:95:ee:c9:18:34:f2:cb:
85:d6:32:87:94:b4:42:7b:96:13:3e:60:f3:55:44:
a6:96:34:c3:74:73:c6:40:4a:e5:7e:84:e7:3f:eb:
29:cb:ce:b2:99:c1:61:f2:21:51:c2:4b:b8:64:21:
d1:b0:54:2a:4b:60:c8:ae:ef:24:31:d6:14:42:da:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:73:41:F9:6C:A4:3A:B2:CC:CE:F1:DB:BC:27:12:10:EB:A0:63
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:1c:a3:e8:4a:55:da:f1:17:0a:63:4f:d2:f8:3e:e7:50:
90:48:a6:71:1e:d7:b9:b3:94:99:da:4e:b7:d8:86:c3:11:25:
01:e5:34:a8:cc:6b:40:4c:fd:97:61:b4:44:74:d9:68:68:8d:
aa:9d:35:ef:f3:47:0f:9c:d0:6c:77:d2:b7:53:81:77:54:5b:
7e:8a:4e:33:59:ca:52:b2:94:f3:b6:5c:75:60:22:47:c2:c4:
3c:27:1c:1f:4e:b6:a2:51:8a:f4:c1:5e:94:42:98:f1:c2:f0:
70:2a:98:39:ce:2f:18:0d:ce:d6:a5:6b:fb:44:9f:51:3d:aa:
ea:50:31:dd:49:e5:b3:1e:c6:27:53:73:51:55:63:08:ae:0c:
4d:1b:6a:06:ac:45:a2:79:f2:ae:a9:a6:52:f3:05:ee:61:c4:
66:6e:22:c1:9f:77:6c:b8:ad:ef:9a:a3:d6:a7:a5:ec:57:e9:
f8:1b:fd:87:d7:6d:4c:be:4d:62:00:7b:e4:c4:3e:18:18:78:
de:62:47:56:33:4b:41:18:68:9a:ac:c3:b9:38:be:1a:26:f1:
a5:52:b6:59:bf:51:cc:b2:71:70:d9:42:a6:ca:fc:5a:44:9c:
cd:57:66:2a:6b:53:57:ae:39:6c:2c:9a:fb:23:10:8c:52:14:
25:9b:5d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:11 2025 by rpki-client