Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: Sp2rLc1uTIaMX9Sge0Wh3ORpVkOfzbSfPTTKyHodeYM=
Subject key identifier: B6:2E:F3:2F:C0:E3:4B:66:1E:DE:BB:52:E5:4E:36:2D:5A:5B:4A:79
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 019A4EF50B81670C48B6F9B8CA3E0D1D0B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 05D8
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: Age9H0hEyNVT8mzb8udSqLK8rYR3F38IuspmmARZFXo=)
2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0b:81:67:0c:48:b6:f9:b8:ca:3e:0d:1d:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=b62ef32fc0e34b661edebb52e54e362d5a5b4a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:32:9b:39:75:3f:08:63:cd:52:bd:e9:19:
af:1f:52:7c:c3:af:c3:65:04:0a:43:e8:a1:58:1b:
aa:30:49:bd:3d:c9:7b:6d:fd:7c:4b:12:a1:30:07:
0f:ff:93:8d:ed:03:85:7d:9f:a9:f9:ab:e3:57:16:
9d:2a:69:65:7f:14:9c:42:5e:17:f2:50:af:35:72:
26:3e:04:c4:7e:48:34:e1:94:68:65:a3:d5:bc:60:
0f:2b:f7:25:9b:8a:2d:d4:88:49:76:95:c7:f3:38:
8c:f8:bf:a8:5c:74:00:19:0d:8d:38:0a:da:96:b1:
79:e5:a9:cd:0a:72:a5:91:b8:f0:27:75:92:9f:2c:
3f:50:24:ce:0d:25:b9:fe:b0:91:87:18:f5:78:1b:
ba:17:51:ee:a4:b7:7c:30:63:ec:36:7b:86:12:03:
0a:03:fb:7a:c5:0e:bf:bd:f0:9d:5d:dd:8b:3f:a8:
fd:e2:99:03:24:72:e7:a0:8b:04:85:e2:6d:ff:a3:
27:97:c7:67:46:30:b0:e1:e9:94:da:73:50:5a:d9:
28:24:f7:73:d8:3d:b0:58:ff:00:71:7e:07:74:39:
3c:59:f9:a7:3a:f2:fb:9a:f8:1a:b9:54:1d:6b:82:
02:38:61:d6:9e:73:15:09:9e:4d:22:44:92:99:48:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2E:F3:2F:C0:E3:4B:66:1E:DE:BB:52:E5:4E:36:2D:5A:5B:4A:79
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:3f:ab:d8:68:3b:bd:20:c9:2d:34:a5:c0:69:26:e7:7e:
5c:bf:84:2a:36:19:8d:3c:77:c2:44:de:e0:95:50:c8:57:72:
01:71:ca:10:ae:4a:dc:d5:26:f2:11:ee:84:14:3d:46:7a:43:
ba:f8:22:23:cd:3f:93:bf:0a:38:d3:e4:9b:9d:1c:96:47:45:
b6:9d:75:2f:06:ef:55:6b:f5:79:3a:43:1a:f2:ac:04:28:f2:
b1:85:3b:fd:b3:69:b2:7a:f6:26:e3:a8:09:83:c4:0f:0e:8c:
f2:fd:9a:2a:33:8a:e7:ae:aa:74:42:a6:a7:ac:36:e9:f0:67:
80:ee:1a:fb:08:5a:d1:31:b1:ae:44:27:83:4b:09:37:01:b0:
98:14:b1:b9:2c:62:a1:34:1e:b1:75:76:42:b5:6d:36:a9:79:
68:29:a3:24:e8:92:29:5f:99:9e:3f:9e:a5:36:33:85:63:1f:
1d:c8:b2:72:3f:a3:05:91:f8:39:0d:89:99:d0:3e:ff:71:d7:
d8:b7:08:5c:23:d4:01:10:5f:48:f7:85:30:17:86:ce:83:b5:
1c:ff:05:1b:dd:6a:1f:30:e4:9d:57:dd:2c:2b:88:90:5e:fc:
17:25:1c:9f:32:05:ee:80:2f:bf:8d:91:83:72:98:c0:7c:09:
80:8b:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:40 2025 by rpki-client