Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: i3dqnOZgBNyZhV8EH7lfLG2EQgHWlBjZRZqdxq3tK7U=
Subject key identifier: 1F:A1:6E:47:AD:FC:3C:17:4F:04:36:3D:A0:B3:C9:43:77:14:B8:88
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 0199FC8F179E70667E3CCDD6DD8762C30E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 13CE
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: WRq/qxDCvbBQfEDpv3llv5zcUxUIjXG/6lVa+vTxPaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:17:9e:70:66:7e:3c:cd:d6:dd:87:62:c3:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=1fa16e47adfc3c174f04363da0b3c9437714b888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:13:3f:62:5e:fd:0f:b7:93:70:c7:1e:25:
e3:a9:7f:70:db:e9:68:5f:0f:f9:ec:63:11:07:34:
35:f1:09:11:7a:70:61:ad:60:c4:5c:dc:d7:5b:bd:
ae:33:9a:8e:fc:ba:71:9d:aa:ce:9f:9e:cb:87:3f:
ed:1a:ee:74:21:44:ae:73:24:33:d9:01:9e:aa:84:
50:4c:1d:19:34:95:5f:4e:e6:4b:74:16:57:80:e8:
90:f0:95:af:9f:7d:1e:c9:27:b6:e8:9d:f9:b8:63:
7e:67:d3:c1:69:28:fa:fe:bf:d4:9a:ac:95:dc:5f:
e1:af:c7:c9:26:05:8f:33:41:a4:23:38:68:1a:ef:
1a:90:c5:97:8d:19:87:38:8e:bd:31:56:70:05:9b:
7c:ab:f5:78:c2:22:2a:c5:30:21:10:f4:4b:ae:30:
fc:50:1d:b2:84:76:b4:a2:8c:6a:f5:d0:10:5d:b5:
f0:af:d8:02:05:7c:70:43:65:99:22:75:70:5b:5f:
f9:bb:af:b2:85:fd:71:5f:bd:69:29:90:66:18:1c:
0b:74:68:24:10:02:f9:76:a1:a2:59:44:f4:ac:29:
10:64:cf:aa:18:6b:16:85:a5:6a:e1:c5:f1:88:17:
02:b5:01:4b:f9:2a:91:44:38:e2:a8:ac:c1:03:61:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:6E:47:AD:FC:3C:17:4F:04:36:3D:A0:B3:C9:43:77:14:B8:88
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:a8:04:9f:ed:fc:98:84:48:97:be:31:62:f4:5f:2d:39:
ad:30:c9:d8:8d:ab:02:ee:54:ca:f8:97:97:14:78:81:07:da:
5c:93:fb:30:66:8a:41:5d:c7:d3:41:6c:65:ae:80:b4:42:6b:
93:ab:b6:d6:43:02:a8:60:7e:e8:49:7d:4c:89:c9:54:a0:2c:
b1:b6:1e:87:cc:ef:a6:db:09:49:85:d4:4b:28:d5:d8:81:b6:
88:ee:63:82:37:d6:0a:a1:e2:f3:02:b4:67:40:2c:27:58:02:
3b:6e:12:db:27:c7:0d:be:8b:19:2f:33:ac:96:b6:36:b4:96:
93:06:06:ec:26:8c:47:51:2b:c0:9c:c4:5c:9f:45:84:33:bf:
f1:45:bb:ca:7d:ce:f9:20:f0:35:65:1c:d4:67:ef:10:26:e5:
aa:9c:74:d2:8f:75:5e:5b:9f:e5:da:f6:17:d8:69:b0:36:a0:
24:47:d1:6f:2d:90:35:96:0f:f2:fd:4b:1a:b7:4f:77:78:e9:
5d:8c:ee:91:cb:f2:94:90:b3:18:0f:cc:52:8c:40:ed:50:8b:
c4:21:f1:69:b3:ec:a2:dc:ce:5c:7d:13:2e:29:4a:88:b2:1d:
dd:c2:a3:bb:c6:19:00:74:67:fc:dd:7b:b8:84:77:f6:19:66:
84:d9:4c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxeecGZ+PM3W3Ydiww6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky
YzI3OWUwHhcNMjUxMDE5MTMwMDU5WhcNMjUxMDIwMTMwMDU5WjAzMTEwLwYDVQQD
EygxZmExNmU0N2FkZmMzYzE3NGYwNDM2M2RhMGIzYzk0Mzc3MTRiODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt34TP2Je/Q+3k3DHHiXjqX9w2+lo
Xw/57GMRBzQ18QkRenBhrWDEXNzXW72uM5qO/LpxnarOn57Lhz/tGu50IUSucyQz
2QGeqoRQTB0ZNJVfTuZLdBZXgOiQ8JWvn30eySe26J35uGN+Z9PBaSj6/r/UmqyV
3F/hr8fJJgWPM0GkIzhoGu8akMWXjRmHOI69MVZwBZt8q/V4wiIqxTAhEPRLrjD8
UB2yhHa0ooxq9dAQXbXwr9gCBXxwQ2WZInVwW1/5u6+yhf1xX71pKZBmGBwLdGgk
EAL5dqGiWUT0rCkQZM+qGGsWhaVq4cXxiBcCtQFL+SqRRDjiqKzBA2H13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+hbket/DwXTwQ2PaCzyUN3FLiIMB8GA1UdIwQY
MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt
N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2
LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRWoBJ/t
/JiESJe+MWL0Xy05rTDJ2I2rAu5UyviXlxR4gQfaXJP7MGaKQV3H00FsZa6AtEJr
k6u21kMCqGB+6El9TInJVKAssbYeh8zvptsJSYXUSyjV2IG2iO5jgjfWCqHi8wK0
Z0AsJ1gCO24S2yfHDb6LGS8zrJa2NrSWkwYG7CaMR1ErwJzEXJ9FhDO/8UW7yn3O
+SDwNWUc1GfvECblqpx00o91Xluf5dr2F9hpsDagJEfRby2QNZYP8v1LGrdPd3jp
XYzukcvylJCzGA/MUoxA7VCLxCHxabPsotzOXH0TLilKiLId3cKju8YZAHRn/N17
uIR39hlmhNlMVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:33 2025 by rpki-client