Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: C6Pi4JSfQvfL6Dig0WSCm27G5DvXxy7N/PbSscwHZ7I=
Subject key identifier: 97:A9:D1:01:60:38:95:AD:34:95:D9:DC:4A:E8:5E:5D:61:A6:8A:97
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 0199FEB4A2BFF1D4C4E71A20317AC0015DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0D12
Signing time: Sun 19 Oct 2025 23:01:14 +0000
Manifest this update: Sun 19 Oct 2025 23:01:14 +0000
Manifest next update: Mon 20 Oct 2025 23:01:14 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: RIaAKr4lA7s1LdSczfNmTczshISHbnPHorQ/XLfOXdg=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a2:bf:f1:d4:c4:e7:1a:20:31:7a:c0:01:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Oct 19 23:01:14 2025 GMT
Not After : Oct 20 23:01:14 2025 GMT
Subject: CN=97a9d101603895ad3495d9dc4ae85e5d61a68a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:23:aa:5f:d7:28:2b:36:f0:76:fe:37:e9:
a3:50:ad:b4:f9:a1:78:2d:18:cb:ff:30:d6:b5:b4:
f6:34:36:ac:76:66:62:b6:29:95:ab:25:6a:de:07:
b8:ec:65:f5:26:93:aa:c1:9e:06:79:b9:e0:b8:3e:
87:08:38:d8:5f:b3:06:82:b4:68:db:2d:72:25:d6:
98:7a:f0:0a:64:36:de:d4:98:65:fb:dc:d0:2b:f9:
66:63:a1:7b:43:dc:50:15:0d:61:39:94:8d:55:8f:
07:d4:d8:b8:d8:82:6b:1a:f9:c0:29:1a:48:47:4f:
ee:6a:91:21:2c:bf:5c:a2:77:6c:9d:d2:9f:69:df:
4e:78:25:61:e8:26:09:a4:c9:6c:54:70:68:0a:4a:
75:de:53:98:cf:ae:c8:2d:16:bc:7c:88:f4:ce:97:
a9:66:f7:e7:a1:d2:0a:dd:72:85:9f:0d:a1:db:65:
43:2e:6e:39:bd:ad:bf:0f:46:de:e3:e0:d7:79:3b:
8d:80:88:89:c0:45:bd:25:32:93:96:9d:09:8e:e4:
39:4b:83:55:ef:f6:ef:94:d1:99:a4:57:36:5a:05:
04:68:c4:5b:22:cc:86:b0:40:ff:0a:a1:e3:48:61:
e6:64:63:ae:03:fc:24:e9:17:f8:73:4c:6f:36:9c:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:D1:01:60:38:95:AD:34:95:D9:DC:4A:E8:5E:5D:61:A6:8A:97
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7a:12:0e:d9:a5:aa:b7:87:65:8f:8e:99:b9:d2:1b:a0:7e:
22:03:c3:0e:04:cd:27:c4:ea:70:6b:ad:59:74:f2:7b:00:c5:
67:00:f6:a7:eb:57:16:5d:51:f4:b2:3f:4b:fd:5f:33:0c:ee:
cd:9f:95:48:9a:42:ef:fe:64:f8:56:e2:98:e1:91:6d:f7:6b:
c0:2e:aa:93:5d:80:ed:ac:7d:6a:74:37:71:31:77:32:27:ff:
27:10:6c:a1:1b:a9:e1:8a:d1:a0:af:27:eb:db:57:b7:0b:bd:
24:dd:94:1d:bc:3a:f5:29:87:a7:db:e3:e4:ff:f6:6c:4d:c6:
83:ed:ef:89:ba:73:f1:0f:63:82:74:cb:7d:a8:cf:0c:1a:62:
5f:f6:75:ae:03:b5:c1:1a:9d:ab:e2:33:08:a2:6d:2c:9f:db:
6a:76:bd:da:19:57:19:68:44:5a:12:22:34:67:9a:0a:a9:d1:
19:86:44:55:1b:f3:a0:6b:97:d0:10:65:d6:6d:53:75:a9:68:
78:79:a2:54:87:24:52:58:50:f0:b1:9a:12:a0:c4:dc:25:31:
0e:76:c1:1f:61:62:85:99:22:f2:6f:6a:9e:1a:e1:dd:2b:cd:
26:79:c2:f2:05:1c:22:28:86:4c:38:ef:ee:99:b0:b6:d3:f6:
a4:b8:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:18 2025 by rpki-client