Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: kXbEOSRPDuwL2Qo5JLuvShyS78aYnIbfw17dOuKsizQ=
Subject key identifier: 07:61:45:43:C3:BE:B9:DD:9A:60:BE:BD:8E:CF:DB:05:83:9E:77:FF
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019A4F2B3C34F779F821C621BCC22E802F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 07F3
Signing time: Tue 04 Nov 2025 14:00:24 +0000
Manifest this update: Tue 04 Nov 2025 14:00:24 +0000
Manifest next update: Wed 05 Nov 2025 14:00:24 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: fijliHsFHnSYCksBzlCZWZ7+S0vYLjyOSspWYdV/L3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:3c:34:f7:79:f8:21:c6:21:bc:c2:2e:80:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Nov 4 14:00:24 2025 GMT
Not After : Nov 5 14:00:24 2025 GMT
Subject: CN=07614543c3beb9dd9a60bebd8ecfdb05839e77ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:f0:f8:bb:8b:8a:37:2d:12:c8:24:26:73:
bd:76:0e:4d:a0:fe:bc:fc:81:cc:64:3e:7d:83:da:
d7:50:a7:19:17:d8:9e:f9:95:b4:07:b3:91:74:67:
ff:c0:9c:58:fc:e3:0b:0d:4a:c9:7c:ab:63:66:86:
4f:01:8f:7e:ee:5f:f3:e7:36:a5:ea:05:3a:bb:6b:
c5:13:25:81:64:32:ea:62:af:84:0e:c2:a8:19:e3:
aa:3d:e8:6d:4b:e9:b4:99:66:5a:42:20:2a:8f:dd:
03:0a:87:f6:8b:5b:ce:b8:60:0b:2a:af:45:f7:d1:
31:92:b6:b9:9c:a4:8e:52:51:c6:ee:80:4b:81:56:
2a:66:85:3c:78:96:a5:91:80:b4:e3:a3:bb:b3:b9:
8e:d4:29:b4:94:96:4b:ed:b2:2e:73:52:25:8a:50:
59:96:a0:d4:9c:07:34:47:25:66:4f:f0:6f:04:84:
40:0e:f5:8a:c2:a4:ba:c1:21:b1:6b:e2:1b:b6:83:
55:d7:8f:c5:de:21:c8:44:9e:73:12:96:27:fb:b6:
f2:e7:df:22:8b:4b:e2:22:4c:16:79:34:51:12:6d:
74:6b:1b:82:16:e2:25:8a:64:a6:39:d6:95:57:f3:
d3:c3:ae:bf:25:49:12:43:d7:12:f3:81:15:8f:b1:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:45:43:C3:BE:B9:DD:9A:60:BE:BD:8E:CF:DB:05:83:9E:77:FF
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:ce:15:13:ce:dd:b9:ac:45:ed:10:00:e7:22:87:df:fa:
bd:14:53:49:55:ef:e9:24:3c:d9:19:c3:21:27:20:4b:15:dc:
91:07:99:d7:6a:7d:36:e3:9d:d6:69:d3:d0:1b:c9:bd:ab:97:
bc:cd:01:63:f2:bf:0a:90:20:3a:47:85:c1:1c:dd:c0:25:c1:
87:3c:54:23:da:f1:3d:f5:e9:3e:2d:be:18:94:d2:34:b4:38:
b0:81:d7:d3:42:d8:67:1a:63:5f:ba:ea:14:de:f3:f2:1e:ae:
5d:91:67:f6:81:71:89:1b:55:f9:88:99:63:20:fe:75:df:e4:
be:2b:ef:23:18:d5:45:90:b6:09:ca:59:51:cb:21:f8:c7:32:
df:84:a1:98:7a:cb:8c:da:22:60:4f:a9:79:df:6c:23:4f:0f:
bd:46:c6:53:4a:93:9c:2d:2c:bd:c7:7b:c7:29:d1:60:db:ca:
f5:ee:e3:31:f0:c8:df:63:1d:67:90:05:31:f0:f7:23:60:a0:
d4:58:d7:8d:f8:80:1f:92:a2:29:c1:e6:54:d8:1d:ce:bb:c5:
aa:b4:71:b3:36:23:4a:17:97:23:f9:4c:51:71:32:06:91:4e:
cc:5a:ea:11:5d:b0:5f:97:8e:45:3c:e6:1f:c3:e1:b6:c4:30:
08:32:d7:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzw093n4IcYhvMIugC8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjUxMTA0MTQwMDI0WhcNMjUxMTA1MTQwMDI0WjAzMTEwLwYDVQQD
EygwNzYxNDU0M2MzYmViOWRkOWE2MGJlYmQ4ZWNmZGIwNTgzOWU3N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PXw+LuLijctEsgkJnO9dg5NoP68
/IHMZD59g9rXUKcZF9ie+ZW0B7ORdGf/wJxY/OMLDUrJfKtjZoZPAY9+7l/z5zal
6gU6u2vFEyWBZDLqYq+EDsKoGeOqPehtS+m0mWZaQiAqj90DCof2i1vOuGALKq9F
99Exkra5nKSOUlHG7oBLgVYqZoU8eJalkYC046O7s7mO1Cm0lJZL7bIuc1IlilBZ
lqDUnAc0RyVmT/BvBIRADvWKwqS6wSGxa+IbtoNV14/F3iHIRJ5zEpYn+7by598i
i0viIkwWeTRREm10axuCFuIlimSmOdaVV/PTw66/JUkSQ9cS84EVj7HP3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdhRUPDvrndmmC+vY7P2wWDnnf/MB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYjOFRPO
3bmsRe0QAOcih9/6vRRTSVXv6SQ82RnDIScgSxXckQeZ12p9NuOd1mnT0BvJvauX
vM0BY/K/CpAgOkeFwRzdwCXBhzxUI9rxPfXpPi2+GJTSNLQ4sIHX00LYZxpjX7rq
FN7z8h6uXZFn9oFxiRtV+YiZYyD+dd/kvivvIxjVRZC2CcpZUcsh+Mcy34ShmHrL
jNoiYE+ped9sI08PvUbGU0qTnC0svcd7xynRYNvK9e7jMfDI32MdZ5AFMfD3I2Cg
1FjXjfiAH5KiKcHmVNgdzrvFqrRxszYjSheXI/lMUXEyBpFOzFrqEV2wX5eORTzm
H8PhtsQwCDLXJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:29 2025 by rpki-client