Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: EZg7Rbz0SnPZDjyjLVYlpL7qdMpRVLXaqqcMqPvaaBU=
Subject key identifier: 8C:00:91:70:9D:B9:AB:93:E4:AF:CF:09:C3:D7:3B:CA:AA:1F:A2:4E
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019A4D74487923C7EB73767EF51FD66638D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0ECF
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: bF35Kvug1GsMeddL3DA1icapZADt3ONpG1OY2pJQhxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:48:79:23:c7:eb:73:76:7e:f5:1f:d6:66:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=8c0091709db9ab93e4afcf09c3d73bcaaa1fa24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:01:0d:8c:59:c0:b6:90:4c:31:19:ed:e2:
a9:ed:4e:aa:05:52:f3:a3:f9:6b:f1:32:54:20:be:
f6:d9:ab:b5:e9:c2:4f:b5:28:0c:da:ad:52:20:05:
fb:3a:4c:6f:15:ad:3f:92:af:81:fc:94:67:62:05:
c4:6e:19:66:57:55:fb:b0:08:aa:b2:5c:22:85:14:
67:ec:4c:55:fd:7b:97:d8:59:d4:10:00:cf:43:dc:
93:9f:cf:13:a8:a6:e3:fb:16:c2:b9:39:11:af:7e:
1d:c6:2d:e0:02:e3:ae:9c:8a:29:62:5c:d6:6b:51:
ed:ff:bf:17:8a:9f:75:04:db:ab:8f:ff:5a:e0:5b:
5e:5b:e4:33:f4:ef:0f:90:de:1c:07:41:72:48:5c:
f4:34:01:4f:81:06:17:9f:45:7f:65:f5:8c:ba:28:
cd:e2:ff:02:f0:2d:bc:3c:e4:8a:0e:9f:32:33:77:
2d:81:93:23:a9:09:4e:91:6a:bf:9e:92:47:45:c1:
8c:60:71:4b:9f:84:10:24:22:c5:4c:8f:ab:72:48:
95:d9:33:68:be:ad:ff:24:db:36:f8:78:af:31:ef:
31:3d:a2:dc:d0:59:ed:d5:d1:f5:b9:31:53:69:a7:
fc:f5:7b:fb:4d:5a:f1:de:f4:30:8d:b6:f0:36:b9:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:91:70:9D:B9:AB:93:E4:AF:CF:09:C3:D7:3B:CA:AA:1F:A2:4E
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:36:4b:c1:3e:15:67:c3:3b:55:50:e8:1b:f2:36:12:18:
93:99:81:9d:18:67:ae:1f:72:30:b5:3c:1e:81:41:0d:1f:26:
15:30:15:63:33:36:52:6f:07:c1:64:5f:6a:00:a5:98:19:ff:
d1:8e:c3:5c:a6:90:9c:ed:b4:17:1b:0d:ac:48:28:aa:73:ca:
cf:60:a8:7f:a2:8d:31:21:cf:00:3d:9f:e2:0d:3f:44:9b:67:
54:6f:5d:b3:7b:c8:17:09:e2:f7:7f:c1:c7:7b:1c:cb:15:d2:
a4:06:dd:cb:35:a7:ae:71:9a:36:73:c8:a7:d7:8e:ca:22:ab:
c3:3b:c8:d9:72:c9:30:de:e8:85:a5:8c:4a:aa:c1:2f:20:ae:
7a:a9:3c:28:fb:37:44:50:bc:be:79:a2:4d:9c:f0:56:7f:a4:
2f:8f:2b:2d:49:21:18:47:d4:94:3e:7d:fc:50:3a:39:0c:f3:
ec:39:27:8b:a1:5b:e0:f6:40:84:9f:0a:fc:12:03:2e:e8:f0:
f9:54:41:dd:9f:00:07:8f:6d:44:4f:ef:c4:24:f0:b7:83:26:
a9:69:4e:6e:f8:0b:c6:ff:36:b3:ef:50:40:b6:a9:f8:3b:dd:
7b:1a:b3:8b:7c:ee:8b:e5:5a:92:82:ae:b4:38:49:1a:36:76:
66:5b:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:20 2025 by rpki-client