Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: //KbCnpG85jza2Jg6ioc7LbrCpPv6rngnO9koOPKH1s=
Subject key identifier: 03:8D:AE:5B:65:4D:04:07:60:C5:78:DA:05:7D:DE:03:C0:D3:84:30
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 0199FD342027EDEA9338941987C52B9620B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 0297
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: RhJCrmHF+Iu/2nVr1rZJbn84aJmzytckzaRgKODkEJs=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:27:ed:ea:93:38:94:19:87:c5:2b:96:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=038dae5b654d040760c578da057dde03c0d38430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:dc:3c:bc:11:6f:e1:ea:9f:e8:68:e9:cf:
d3:fe:da:a1:61:b1:c1:f0:ee:ab:c0:82:90:09:8d:
ae:ab:e0:eb:cf:c9:27:cb:32:ed:e9:ca:dc:6a:9c:
1f:7b:27:ce:c6:b1:43:47:0f:26:cb:bb:94:81:a1:
d6:45:61:93:ad:a7:2d:66:48:94:9b:99:e3:cb:91:
1f:45:23:d8:48:bc:23:0d:59:7f:13:48:b5:86:fd:
01:5e:06:dc:51:71:63:a3:d4:ff:13:12:12:52:78:
b9:59:0f:1c:6b:cb:6b:fa:d0:52:0e:c4:6e:26:ad:
0f:f6:fa:04:96:0c:ed:76:bc:73:df:64:a5:30:cb:
8d:76:da:80:a7:77:3c:b5:10:9a:0b:91:9b:a6:76:
b4:7e:c5:bc:e3:ee:5b:af:81:bd:41:b5:8a:b0:c0:
68:58:3a:2a:b7:3d:ab:32:5a:9b:b1:30:7b:69:a6:
02:c9:f7:33:d1:75:64:6c:ef:fb:f6:1c:01:93:9e:
17:eb:e9:59:2d:df:7f:e6:0b:f9:16:11:53:30:56:
ea:9a:45:58:2c:bb:69:f2:08:bb:02:e9:69:14:45:
10:d4:2d:b6:68:9a:7c:0b:b6:ac:d1:94:83:81:ed:
17:96:84:4b:fe:f0:4b:53:31:31:47:b3:b1:ba:f2:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:AE:5B:65:4D:04:07:60:C5:78:DA:05:7D:DE:03:C0:D3:84:30
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ff:ba:c1:f6:07:91:34:5e:06:87:33:32:f6:e2:69:7b:bf:
ec:2a:19:51:39:f5:77:bf:9c:db:4a:91:3d:da:09:41:0b:39:
a9:1a:03:5d:5b:c4:fe:1d:26:48:0e:dd:51:4c:cc:c8:fa:b0:
75:7d:48:1f:9a:34:14:3f:c3:df:78:b4:ed:0f:03:3b:26:93:
48:22:c9:e3:83:7b:22:5a:74:e8:9d:c2:f3:c3:14:51:e6:85:
a3:ac:f6:29:d0:68:97:99:48:4f:1d:2a:f9:ba:e3:fd:7e:27:
e2:64:c6:ce:bc:cd:ed:62:e8:60:72:4c:9e:fc:ea:a0:bd:d3:
d2:cb:16:d7:a8:32:2c:51:73:85:55:9a:ab:02:93:47:ef:0c:
95:70:5e:ca:b1:44:9b:e7:12:24:0c:d9:fd:39:db:ec:52:df:
1b:8d:68:81:b8:83:f4:d8:8a:3b:ee:ec:a8:e1:46:14:cc:45:
c4:b9:88:6f:f3:14:3f:5f:41:09:14:3f:56:70:62:e6:53:32:
02:ce:8c:59:3f:55:e0:bb:aa:5e:b4:8b:f5:43:79:df:c9:b7:
c1:bf:9f:3d:63:bf:b0:0d:2e:ec:89:a7:e8:cf:85:2b:1e:a2:
57:13:36:a2:d0:2e:24:35:33:bc:9b:cb:84:92:49:f1:e2:1c:
98:29:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:29 2025 by rpki-client