Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: 27ckyVQSafPR7uNJJ2Zt6xCqm6aJaxOTaX4yHLofvH8=
Subject key identifier: CD:D8:45:3B:5B:5E:DF:8F:46:22:E8:AA:29:18:FE:37:66:B5:91:18
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019A4F62832F55E4F91C460B336D41880570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 056C
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: KDUuUsLTOI4yrSS4gLV+B3kGUxtIJTS1UQz6s0N5Xpg=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:83:2f:55:e4:f9:1c:46:0b:33:6d:41:88:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=cdd8453b5b5edf8f4622e8aa2918fe3766b59118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:72:48:12:f7:c8:02:cf:06:11:ff:46:0b:
9d:f1:2c:8c:68:91:11:82:02:d4:e5:20:61:22:be:
ab:55:64:00:e6:74:b7:be:74:20:96:73:b3:50:40:
d6:ed:ad:3a:a7:2f:93:d5:92:b5:86:e2:ee:2f:0e:
eb:18:66:23:13:74:08:2d:c3:3d:80:a8:90:c2:d7:
ae:14:d1:c0:33:97:72:d7:13:73:2d:4e:68:cb:44:
73:c8:ec:1b:99:29:b3:d0:a5:56:0a:f1:d5:47:dc:
ef:29:31:10:7d:7a:e2:cc:13:40:70:25:05:44:ed:
9b:80:2c:7c:3a:68:9c:0d:ce:af:ce:c2:07:3a:d9:
88:55:69:81:a1:35:f2:b6:af:01:ec:79:68:4f:9d:
ee:95:7c:2b:bf:43:fb:e2:4b:c4:f0:72:f4:85:df:
81:0b:66:64:c4:40:be:f6:f9:b9:c3:4f:6d:bd:50:
e2:31:b1:40:9c:a3:1d:89:a0:87:bc:7a:46:96:10:
90:62:6c:84:9e:c7:63:d9:38:80:ad:53:7b:a8:12:
f0:e5:d8:9d:fd:16:a6:6e:90:dc:51:52:2d:41:3d:
4d:54:35:55:44:1c:36:cb:bc:9a:4c:91:68:bc:25:
2e:31:3a:8b:68:00:5f:d3:12:6f:c0:cb:d6:58:24:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D8:45:3B:5B:5E:DF:8F:46:22:E8:AA:29:18:FE:37:66:B5:91:18
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:20:33:50:ff:10:d3:b5:64:8b:9b:10:71:c1:05:78:b3:
27:77:fb:7d:4d:6e:94:3f:e6:42:a8:b6:06:ba:a0:83:78:99:
ee:43:13:95:23:5d:83:f2:37:79:4d:a9:c3:1d:c8:26:18:57:
05:21:f1:d6:48:37:25:e7:e9:b3:55:f9:5c:8f:27:a7:18:24:
c9:90:e8:63:ab:a5:ad:1c:5a:e8:af:3e:20:95:f5:ca:57:89:
c9:09:fe:b4:a4:9c:b9:2d:4e:6c:46:81:80:59:6f:db:8c:d4:
1c:26:28:e1:9e:fd:2d:97:3c:0a:31:be:ce:d3:4e:50:a1:f9:
8e:23:15:da:bc:5f:b5:53:7c:24:e4:11:56:3e:a3:35:59:c8:
c9:21:f3:b3:68:e8:55:35:10:04:69:eb:d0:60:0f:c2:df:15:
3c:a8:ec:ff:6a:6a:a9:34:7e:b5:06:fe:e8:b1:5a:f2:1a:2b:
4a:3d:1d:6b:5a:0f:2a:0b:20:38:cd:bf:2e:b8:30:9b:f2:34:
d0:e0:78:79:86:70:29:16:e9:35:a0:bf:32:d5:dd:47:6b:3d:
f9:75:20:25:80:4f:9e:88:1e:e6:12:de:7b:9d:d3:e8:78:c8:
71:c7:ad:ee:b7:c1:48:28:b0:0c:44:a4:27:58:b9:fd:89:9c:
2d:03:fc:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYoMvVeT5HEYLM21BiAVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk
ZDQ5YTAwHhcNMjUxMTA0MTUwMDQ3WhcNMjUxMTA1MTUwMDQ3WjAzMTEwLwYDVQQD
EyhjZGQ4NDUzYjViNWVkZjhmNDYyMmU4YWEyOTE4ZmUzNzY2YjU5MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbBySBL3yALPBhH/Rgud8SyMaJER
ggLU5SBhIr6rVWQA5nS3vnQglnOzUEDW7a06py+T1ZK1huLuLw7rGGYjE3QILcM9
gKiQwteuFNHAM5dy1xNzLU5oy0RzyOwbmSmz0KVWCvHVR9zvKTEQfXrizBNAcCUF
RO2bgCx8OmicDc6vzsIHOtmIVWmBoTXytq8B7HloT53ulXwrv0P74kvE8HL0hd+B
C2ZkxEC+9vm5w09tvVDiMbFAnKMdiaCHvHpGlhCQYmyEnsdj2TiArVN7qBLw5did
/RambpDcUVItQT1NVDVVRBw2y7yaTJFovCUuMTqLaABf0xJvwMvWWCRJhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3YRTtbXt+PRiLoqikY/jdmtZEYMB8GA1UdIwQY
MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt
YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3
LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgIgM1D/
ENO1ZIubEHHBBXizJ3f7fU1ulD/mQqi2Brqgg3iZ7kMTlSNdg/I3eU2pwx3IJhhX
BSHx1kg3Jefps1X5XI8npxgkyZDoY6ulrRxa6K8+IJX1yleJyQn+tKScuS1ObEaB
gFlv24zUHCYo4Z79LZc8CjG+ztNOUKH5jiMV2rxftVN8JOQRVj6jNVnIySHzs2jo
VTUQBGnr0GAPwt8VPKjs/2pqqTR+tQb+6LFa8horSj0da1oPKgsgOM2/Lrgwm/I0
0OB4eYZwKRbpNaC/MtXdR2s9+XUgJYBPnoge5hLee53T6HjIccet7rfBSCiwDESk
J1i5/YmcLQP86g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:58 2025 by rpki-client