Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: TQEkg4lbNrzLTaVZbEPwEeHjMRBooQyWharQPST2UrM=
Subject key identifier: D0:6D:1E:60:2A:0D:30:39:DE:FB:F3:67:A4:5B:26:39:FB:20:32:2B
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 0199FE0FF41627BC45D77C342E632480D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 074C
Signing time: Sun 19 Oct 2025 20:01:22 +0000
Manifest this update: Sun 19 Oct 2025 20:01:22 +0000
Manifest next update: Mon 20 Oct 2025 20:01:22 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: rccE3/2rPVbAQWySvsLCmVN3Og72sxpZDVJRqdJmxgk=)
2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f4:16:27:bc:45:d7:7c:34:2e:63:24:80:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Oct 19 20:01:22 2025 GMT
Not After : Oct 20 20:01:22 2025 GMT
Subject: CN=d06d1e602a0d3039defbf367a45b2639fb20322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:fe:21:e0:a5:ec:4d:2c:9f:0a:f2:5c:2d:
af:7b:ba:0c:f6:48:36:8b:49:f8:ec:5b:5a:55:b1:
c3:26:0f:cb:37:a5:e5:b4:da:70:bf:87:f8:83:03:
eb:14:98:0e:bb:e9:6b:da:2e:b5:a2:e3:b4:f0:f6:
f2:83:e3:48:ee:0e:75:15:58:30:7d:ed:b5:9c:45:
8f:5d:74:6e:b1:69:7f:7e:2f:3a:10:c6:01:ca:01:
da:fd:6f:32:03:36:d4:dd:90:92:ad:73:b2:5e:e2:
d8:d1:e2:ff:2b:7c:52:4e:0f:29:e7:73:f5:9a:46:
90:52:42:90:c6:d0:4d:1f:8b:44:04:34:d1:62:59:
89:a4:2a:d7:f7:36:f0:de:bb:1c:e8:90:dd:d5:fb:
44:15:ed:35:f5:74:ef:3e:da:e0:78:f4:2f:d4:b5:
a3:02:6c:aa:72:79:79:22:21:07:e3:f1:ff:5d:57:
5d:6e:5a:0a:09:bf:23:7e:17:40:46:ea:c4:39:c9:
1b:0c:64:b4:1d:e0:7f:11:ca:f6:6b:48:50:0f:0e:
01:24:d2:65:79:13:bb:93:df:74:4e:4f:50:5a:6c:
eb:cd:fd:80:6b:af:61:73:12:51:5a:54:01:e4:3b:
42:32:9f:44:54:c3:40:64:c4:4a:58:de:41:68:52:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:1E:60:2A:0D:30:39:DE:FB:F3:67:A4:5B:26:39:FB:20:32:2B
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c4:f0:12:75:f4:1c:9d:c3:7c:f6:4d:88:f2:2d:27:d8:67:
0d:42:d7:46:f2:8e:d8:ec:a2:0a:d4:67:c2:a5:29:3a:f9:6b:
4f:8a:05:ff:c1:62:74:5a:8e:28:3b:f3:54:c4:7d:bd:92:b2:
0c:36:8b:da:60:0e:e6:66:3a:c4:d3:17:c8:24:eb:0d:f0:a5:
23:6a:24:10:c4:c6:f2:ff:ee:25:e0:ec:74:c1:80:43:6a:0c:
97:45:b2:b4:7e:1f:79:2c:69:b0:dd:64:aa:6c:a5:f1:c4:51:
91:9f:8a:2d:c5:91:18:d4:53:d8:f8:4d:27:2e:2b:01:49:1f:
36:f9:91:18:00:a0:2a:0d:c4:4a:a1:ed:cd:17:e8:f6:6d:7d:
9a:e7:7a:9c:0d:fa:c3:cb:e8:d4:89:e3:a0:9b:f4:ef:83:13:
8e:65:e8:1c:ec:24:62:aa:3d:a2:5b:ed:8b:b5:ba:7b:3e:dd:
9f:a8:73:47:e5:0b:f8:96:a5:ea:d2:09:20:cb:d7:f8:44:c1:
95:d2:0c:ed:f7:4e:e9:48:67:37:24:27:5e:c9:cd:34:1c:cd:
60:3a:8a:92:0f:65:76:d7:d4:9d:d9:ff:44:80:fd:75:e4:47:
11:61:89:6b:2d:49:bf:73:cf:db:2e:8c:53:78:03:57:8e:3e:
c8:b8:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:26 2025 by rpki-client