Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: 3C/Xfx0uvc/Ud5V2B9B1Ib+kgk1YmSG1GNnLSKsqWgI=
Subject key identifier: A0:92:1F:E4:B8:B1:E6:86:BD:66:E9:DB:F9:24:36:3B:59:FB:E8:77
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 0198D4DFFFD9A53F0934EC17AD0324B1513A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1546
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: uc0yqhlDiJGeJJBFug+NKOV8EcBXQNFbowxkKQ/j/p4=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ff:d9:a5:3f:09:34:ec:17:ad:03:24:b1:51:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=a0921fe4b8b1e686bd66e9dbf924363b59fbe877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:d9:6b:b4:9c:d5:85:8e:23:b6:37:bc:e7:
be:00:cb:36:ed:2c:d8:0a:d4:69:c3:3e:eb:12:be:
76:97:ba:f5:b6:21:24:64:a5:ee:be:45:3e:77:11:
37:34:49:3f:54:f4:09:e4:e4:2d:75:fd:d2:19:56:
e3:b3:b2:37:88:86:09:ba:db:28:72:fb:7c:dd:71:
be:73:54:49:74:11:57:70:3f:d5:bf:54:d1:eb:7e:
a1:28:bb:7b:9f:bb:11:47:c1:3d:89:f2:03:ae:46:
47:cc:ee:5d:b6:bf:63:fe:74:d0:4f:e4:50:09:13:
41:94:6b:8a:be:a7:cd:c6:46:ce:3a:26:1c:f9:35:
d3:18:08:c9:30:b3:2a:c5:39:d5:2d:9d:27:9d:08:
15:b1:9a:8c:2a:7d:00:20:ab:82:2c:18:42:e9:07:
85:59:ef:64:60:3e:93:a8:81:0b:20:20:80:ac:5b:
ac:f7:33:f5:44:e9:3a:6b:49:56:26:63:7f:6f:d3:
28:64:56:7e:93:51:60:d6:f0:a6:72:56:ff:22:d1:
ad:4c:75:a5:3e:26:89:51:8f:d7:28:53:33:42:1d:
9c:4a:36:b0:fd:01:7f:8d:72:3f:7e:cd:b9:da:79:
b9:99:09:9b:d0:80:d5:78:21:e6:89:c2:a9:15:4a:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:1F:E4:B8:B1:E6:86:BD:66:E9:DB:F9:24:36:3B:59:FB:E8:77
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:dc:93:f4:7d:bd:ec:ed:57:d3:73:64:be:87:b9:04:9c:
52:c5:bc:b1:05:00:53:04:dd:03:50:88:df:31:b1:43:2d:21:
a0:59:88:3c:93:b5:f4:82:5b:77:53:2b:a3:fe:d5:24:46:78:
5f:c6:6c:38:06:25:21:a1:c0:19:54:b0:c6:51:3f:17:73:8a:
bb:ad:86:6c:12:38:5b:ac:e3:e1:62:62:62:c7:99:b9:85:48:
96:a3:25:3f:2a:3c:71:06:8e:63:0c:f9:b8:46:3f:97:90:9a:
1e:89:13:b8:79:88:ff:d8:5c:ca:f6:dc:0f:7a:a3:da:13:02:
b9:dd:0e:8b:94:76:b6:a9:e5:80:77:2e:e9:03:38:de:ff:b1:
0a:1d:37:51:12:06:20:fb:d8:6d:43:bc:f3:c3:2c:6e:c1:bb:
96:f9:1e:a7:68:bd:7c:ea:ac:cc:48:b6:be:07:1a:fa:f9:0a:
ba:5a:91:1c:fb:3e:91:c9:0f:50:ae:ac:90:62:8b:cc:52:22:
c4:c6:a1:71:37:b7:6d:92:32:f2:30:fb:a0:96:92:b7:c9:0b:
22:b2:0c:3e:3b:33:26:83:23:b7:42:d7:ba:66:49:ba:08:3e:
3f:a1:54:9b:52:c0:77:2d:99:d6:6c:2d:2f:61:3c:43:b5:9c:
2d:19:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:17 2025 by rpki-client