Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: JRqIN2Zxo1O1CqykaAOFahxW8MvvkLet9LHsXtFIjMM=
Subject key identifier: D3:75:06:F1:48:13:8D:9A:B0:18:0A:28:45:7B:92:7D:9E:3C:C5:E5
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 0199FE46EB64DC60FA6232B24D8DE31DE82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 15E0
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: nJdaAVDvJFOa+5QYxluirgYvJsWF2EazAuV/T8cjmyM=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:eb:64:dc:60:fa:62:32:b2:4d:8d:e3:1d:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=d37506f148138d9ab0180a28457b927d9e3cc5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:2f:d4:87:8e:45:70:a0:c8:6c:27:a6:55:
26:9b:a0:34:70:fa:28:a9:0e:75:79:08:3d:40:9c:
04:f1:29:0e:73:21:76:b6:43:66:d4:b3:1e:75:61:
70:55:a8:a3:37:8d:93:6d:c8:23:8c:d2:83:64:e7:
00:62:80:c2:1b:2f:43:0b:33:bd:3c:26:9b:79:f9:
26:9c:e2:ac:bd:b1:57:60:fc:6d:69:1a:3a:88:24:
bc:3f:f3:d6:da:bb:bb:ef:78:83:60:4b:e2:ad:ae:
f0:85:a6:44:70:8e:da:d1:bc:c7:8c:e9:f0:f6:b3:
14:11:b9:66:cd:33:ce:7e:da:72:ce:8a:bd:8f:03:
cf:a9:e7:fa:8a:69:a7:5c:0d:2b:91:9d:5d:23:27:
26:89:5d:f5:42:bf:54:76:2f:51:54:63:22:b7:45:
6f:8c:bc:5b:23:9a:e9:7f:73:7d:2b:00:3b:d9:b7:
cd:05:3c:30:60:18:73:3b:9b:5b:b7:d1:75:ba:38:
f3:56:a2:cb:81:e2:5a:eb:35:5d:2e:63:8a:92:64:
8c:cc:a8:e3:47:98:02:ba:31:f3:d1:cb:c9:6f:7e:
17:b7:b6:39:35:17:64:8f:0b:d7:55:33:fa:1b:5e:
42:df:e0:5f:ae:55:fe:0f:47:ae:b2:82:04:69:96:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:06:F1:48:13:8D:9A:B0:18:0A:28:45:7B:92:7D:9E:3C:C5:E5
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:5d:a7:ca:40:dc:bc:7f:cb:a2:95:c9:c4:01:97:a4:3f:
c1:ce:f5:bc:31:32:88:c7:89:1f:0e:67:69:df:fa:ef:a6:59:
8a:09:a6:f6:9d:0c:d5:68:1c:f7:fe:b7:96:88:aa:3a:eb:0e:
96:4f:ad:5f:b8:c6:af:b8:f1:65:42:41:9e:4a:d3:fb:1e:2d:
f1:40:b3:c9:7e:32:b9:f5:a5:04:cc:9c:da:d5:ba:28:63:2f:
b4:f1:4f:6a:15:ca:b0:1a:24:ea:90:df:44:8c:60:2d:1a:29:
1c:24:06:01:ef:b0:ab:64:b6:20:94:6d:da:4b:6d:7c:25:65:
de:66:4c:9a:88:5c:6b:70:ab:b9:91:c2:82:b4:2b:2e:80:fb:
ef:44:a1:2e:79:94:c2:e4:3c:9a:ce:73:ee:6b:f7:aa:ec:8e:
5e:2b:22:a1:eb:f1:79:34:e5:64:91:c4:a4:80:e6:a2:20:b8:
85:78:31:9a:88:bb:c5:4a:60:21:31:ab:e8:e4:83:15:15:2c:
c2:0a:3f:2a:c0:25:3f:e9:5c:d4:c4:c9:66:b0:99:20:83:9a:
3d:e1:2a:db:ea:a0:80:0f:e5:fc:31:85:b5:af:c0:e1:2f:e6:
0d:1e:0a:a2:b0:e2:b9:f3:5f:d4:11:86:cc:5e:0f:58:1f:2a:
52:e9:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:00 2025 by rpki-client