Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: eHRVK9ah9t2aI/cTSdwwNx1oZ+ioD1ZP/xLK8K7T2hk=
Subject key identifier: FE:C0:66:45:DA:22:5A:6D:B0:6C:AB:6E:94:C9:F9:3E:E2:EE:76:2E
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 0199FBEA979B92A603FE3DF17953FB9F62E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: fTbUvPJmVaLDq9WKvhfB9s1Mf1QjogYzhI+E8N6cus0=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:97:9b:92:a6:03:fe:3d:f1:79:53:fb:9f:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=fec06645da225a6db06cab6e94c9f93ee2ee762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:16:34:92:1a:21:af:76:cc:77:36:a7:93:
ef:44:10:37:03:73:79:b1:24:c8:75:85:47:6c:a1:
d2:56:18:21:f8:35:40:14:b8:eb:61:ec:ff:33:1c:
4f:8c:b6:2f:93:1c:93:25:c3:7f:9a:d0:8a:ff:37:
73:1f:c1:bd:b3:28:7b:f2:1b:aa:b8:44:38:bb:f8:
a4:ae:a7:e4:32:e1:33:70:a9:41:77:d1:6e:50:7a:
50:2d:09:d6:66:f6:d3:27:b2:6c:7f:32:e9:91:ec:
78:40:c3:06:43:30:da:ef:21:b3:2d:a0:4a:d2:f0:
b1:ac:07:80:6c:eb:fc:4f:a6:37:88:9b:19:51:2b:
f0:c6:e3:dc:d6:00:c5:8c:1e:5d:ed:9a:dc:88:1d:
fe:71:8c:c9:e6:8c:d1:e8:e2:65:6b:cf:72:2f:97:
10:5d:7b:2a:ce:69:e9:81:41:61:52:7b:b7:ee:44:
f9:b9:b7:c6:a1:28:a1:70:0d:64:07:e2:4f:98:e8:
bb:c5:f0:c5:67:c9:f5:da:85:95:06:50:14:d5:72:
9b:bb:28:8c:8f:33:ed:31:0c:14:9a:68:1d:e6:f6:
65:57:0e:a8:d9:27:f3:d6:87:16:03:41:04:7c:90:
7c:db:09:3e:31:e2:92:0a:75:58:b5:c0:fe:de:58:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:66:45:DA:22:5A:6D:B0:6C:AB:6E:94:C9:F9:3E:E2:EE:76:2E
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:23:06:4b:dd:be:76:34:35:2b:b4:d7:3a:21:c2:3b:c5:22:
01:54:fc:ba:b6:8d:ff:a0:91:54:b2:b6:84:16:d1:9d:3a:8e:
d4:70:4b:52:7c:f2:61:4f:4c:4b:61:4e:8d:af:6a:70:78:01:
79:5b:b9:fa:12:a9:6e:f4:f0:20:c5:b0:d3:67:1d:a7:64:25:
83:59:2a:8a:e7:30:f8:14:0e:b5:30:6c:09:00:b6:43:ac:7e:
9c:a9:9b:c7:dd:7d:33:33:52:be:59:72:5b:8a:2f:7a:b4:99:
ce:f3:01:ea:39:c7:3e:af:1e:31:8f:a4:9d:b6:9d:37:a7:b0:
3d:35:da:55:d2:e6:90:04:0e:f4:41:67:de:f6:c3:f9:1c:bb:
44:36:df:32:f6:04:08:36:ac:63:6f:89:d1:3f:6b:37:dd:c5:
40:78:34:d3:0f:34:3d:8d:6d:15:4f:91:a2:c1:3b:94:08:9e:
00:36:fd:6f:60:65:9c:0c:64:0c:4c:2d:7f:1c:d9:1e:cb:d4:
5c:b5:63:27:56:1a:4c:c3:41:73:90:b0:ce:b6:32:d5:4a:04:
e8:f1:b8:3b:7d:bb:4a:28:2b:96:b1:33:75:d9:1c:10:c3:e0:
ca:ff:10:c0:a4:03:d7:62:89:24:97:de:20:97:f5:09:9a:49:
da:2c:81:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pebkqYD/j3xeVP7n2LhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjUxMDE5MTAwMTE5WhcNMjUxMDIwMTAwMTE5WjAzMTEwLwYDVQQD
EyhmZWMwNjY0NWRhMjI1YTZkYjA2Y2FiNmU5NGM5ZjkzZWUyZWU3NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSkWNJIaIa92zHc2p5PvRBA3A3N5
sSTIdYVHbKHSVhgh+DVAFLjrYez/MxxPjLYvkxyTJcN/mtCK/zdzH8G9syh78huq
uEQ4u/ikrqfkMuEzcKlBd9FuUHpQLQnWZvbTJ7JsfzLpkex4QMMGQzDa7yGzLaBK
0vCxrAeAbOv8T6Y3iJsZUSvwxuPc1gDFjB5d7ZrciB3+cYzJ5ozR6OJla89yL5cQ
XXsqzmnpgUFhUnu37kT5ubfGoSihcA1kB+JPmOi7xfDFZ8n12oWVBlAU1XKbuyiM
jzPtMQwUmmgd5vZlVw6o2Sfz1ocWA0EEfJB82wk+MeKSCnVYtcD+3liioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7AZkXaIlptsGyrbpTJ+T7i7nYuMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSMGS92+
djQ1K7TXOiHCO8UiAVT8uraN/6CRVLK2hBbRnTqO1HBLUnzyYU9MS2FOja9qcHgB
eVu5+hKpbvTwIMWw02cdp2Qlg1kqiucw+BQOtTBsCQC2Q6x+nKmbx919MzNSvlly
W4overSZzvMB6jnHPq8eMY+knbadN6ewPTXaVdLmkAQO9EFn3vbD+Ry7RDbfMvYE
CDasY2+J0T9rN93FQHg00w80PY1tFU+RosE7lAieADb9b2BlnAxkDEwtfxzZHsvU
XLVjJ1YaTMNBc5CwzrYy1UoE6PG4O327SigrlrEzddkcEMPgyv8QwKQD12KJJJfe
IJf1CZpJ2iyB+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:19 2025 by rpki-client