Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: c52zz+ywBFRbPo8Yxsq1oBcf6TFIso+msD9fcAhSOU0=
Subject key identifier: 77:28:47:1A:80:77:D0:05:EC:C7:4B:29:5B:87:3F:A4:0C:9F:34:33
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019A53ACB3F0FFC610685AF4D589B52918BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0D3E
Signing time: Wed 05 Nov 2025 11:00:18 +0000
Manifest this update: Wed 05 Nov 2025 11:00:18 +0000
Manifest next update: Thu 06 Nov 2025 11:00:18 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: JTbp+GTyml/uT/mCmlv40f56Mqf8rboEhcnQ1FsKgJU=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:b3:f0:ff:c6:10:68:5a:f4:d5:89:b5:29:18:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Nov 5 11:00:18 2025 GMT
Not After : Nov 6 11:00:18 2025 GMT
Subject: CN=7728471a8077d005ecc74b295b873fa40c9f3433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:cd:64:aa:af:74:0a:a5:3d:2d:68:bd:7d:
c3:45:a5:4e:c9:13:9c:b0:64:9d:da:9b:f2:e5:d4:
94:7e:d2:6c:cd:8e:94:d9:fb:5e:83:b7:b9:c7:0a:
f5:db:9d:5a:5d:b0:81:e3:ef:b2:f1:6d:d8:10:f2:
b0:17:8a:99:de:e0:5f:0d:f6:8d:41:6d:ba:69:09:
89:7a:84:5d:11:5c:b3:43:98:d3:15:dd:8e:ff:83:
d4:90:63:41:a7:b6:a3:d2:80:d5:31:54:02:96:a3:
fd:b7:e8:a0:2f:a1:7f:ff:4b:09:2b:c3:d6:2e:b9:
6c:9d:87:f5:fd:25:cf:52:5b:75:2f:35:bd:ce:fc:
67:8a:08:02:18:3f:51:72:a4:0b:26:b0:1c:e9:33:
f6:fd:8e:4e:8d:ff:f0:de:32:74:c7:71:61:24:d3:
3c:6b:3d:83:40:c1:e4:7c:48:b2:80:2f:1c:b2:48:
01:99:dd:b3:76:8a:4d:71:a3:94:63:ce:d0:44:74:
24:85:1b:1c:90:d9:f4:b4:5d:67:65:b6:7c:e5:3f:
6d:36:24:a8:c6:c1:e7:61:14:ba:55:25:93:be:1f:
9e:e2:11:45:ca:69:4a:6d:e7:1d:a6:9b:22:3c:9b:
3a:b4:80:ae:12:3d:e3:9d:87:24:af:aa:4f:ba:4a:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:28:47:1A:80:77:D0:05:EC:C7:4B:29:5B:87:3F:A4:0C:9F:34:33
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d0:cc:81:05:a7:40:ce:ee:a7:67:c4:4e:eb:14:f5:4f:ed:
01:34:51:6f:e1:db:ac:21:64:f4:61:12:2a:fa:25:ac:f0:8e:
84:33:a5:e5:42:62:e1:a4:df:fa:88:45:f0:a5:ed:c6:ee:f4:
1d:d6:de:b5:79:9d:ea:74:1f:4a:db:1f:7e:8c:d7:f9:af:48:
14:65:1c:99:d7:e9:94:ca:78:1c:bb:8f:34:8e:78:28:cb:78:
c4:ee:59:a2:7b:61:4e:8f:be:86:96:ff:28:2b:8b:e7:75:0c:
bc:a0:59:14:36:cd:c6:c4:5e:31:13:46:03:7f:de:46:4a:dd:
c4:ca:41:67:4e:29:7d:86:20:07:b7:6d:e0:8e:93:f5:d9:96:
0b:0f:83:3c:d5:35:9f:7b:2e:f7:bc:32:0f:78:44:3d:81:74:
65:cb:69:64:b9:ab:69:a1:f3:c2:4e:a6:11:4c:98:dd:74:02:
6b:cc:8c:68:94:5f:08:5c:38:d0:b7:0a:18:5c:ed:a9:b5:fb:
28:c3:95:70:cc:1b:67:53:55:cf:3c:ee:cd:2e:f6:86:f4:54:
aa:f5:51:60:6f:19:0f:23:eb:f9:a1:9f:cd:2c:f0:17:d4:d2:
bd:49:4e:51:a8:ec:7b:aa:e1:9a:65:3a:73:da:90:5f:c8:e6:
87:33:e4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:46:29 2025 by rpki-client