Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: yFwQ/2RxVraI9YGP7iRX4Z1LEedikV2igy6b3uViTTY=
Subject key identifier: CE:2E:F6:10:A7:1A:FF:14:3B:BE:7A:8F:09:39:0F:29:BA:B2:0B:C8
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 0198D73AFC6B344F03A8223A1265DA628D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0C79
Signing time: Sat 23 Aug 2025 14:00:23 +0000
Manifest this update: Sat 23 Aug 2025 14:00:23 +0000
Manifest next update: Sun 24 Aug 2025 14:00:23 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: 8sVLDwxOibRx+T8lF+BAUUCDVG9KaAxIxlIIWoDnhSA=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:fc:6b:34:4f:03:a8:22:3a:12:65:da:62:8d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Aug 23 14:00:23 2025 GMT
Not After : Aug 24 14:00:23 2025 GMT
Subject: CN=ce2ef610a71aff143bbe7a8f09390f29bab20bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:0d:5f:d2:15:20:0a:3d:4d:4f:f0:49:62:
1c:8b:c6:d6:9b:53:07:da:95:2a:64:41:43:60:dd:
2a:af:ab:d7:5a:d5:36:3a:1e:02:b7:26:a2:14:1f:
80:40:55:8e:6e:19:2d:f7:ee:20:19:4b:98:90:e9:
70:d9:23:26:66:68:30:82:27:9f:e8:16:85:60:9c:
4a:4b:e1:2a:c1:4b:03:93:56:01:12:08:b1:ce:73:
99:ef:23:4e:79:19:1f:0a:6e:e7:b1:64:4e:52:5e:
24:7d:77:c8:c1:7f:34:ef:de:62:94:bd:dc:60:96:
09:81:ee:4e:da:f9:f1:b3:d2:95:dd:3a:c5:6a:ce:
04:20:64:38:2b:c9:1b:8b:bc:aa:7c:98:ae:7c:f5:
bc:f9:47:8d:33:5e:2f:58:c2:ba:f2:83:9c:a0:07:
de:8b:d2:09:34:b1:35:d3:b6:15:b1:44:8e:1a:38:
a0:12:aa:d5:5b:78:57:ba:db:68:8c:75:d6:54:7d:
e1:bb:c9:10:ee:e0:15:2e:43:28:9b:0b:c4:27:72:
20:2e:dc:3f:3a:e5:5d:d3:3c:d4:23:d2:b8:7a:64:
07:d7:06:bc:25:51:f3:57:4c:f7:75:f7:3e:87:df:
08:b8:7a:9b:c8:30:1e:9c:ca:e9:8d:f9:30:da:cf:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2E:F6:10:A7:1A:FF:14:3B:BE:7A:8F:09:39:0F:29:BA:B2:0B:C8
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:79:e2:cb:26:a3:26:23:5e:1f:9e:56:db:f6:b8:76:25:e2:
4e:76:18:46:b5:d3:bc:df:b2:d1:00:d1:90:28:c3:51:06:ca:
ae:14:71:28:7b:54:75:63:7b:ad:2b:3a:ed:8d:e0:95:f1:bf:
5f:f3:c7:4f:9b:07:80:d4:9c:0f:43:ab:fe:ee:3b:73:84:df:
5b:fb:08:95:ff:b8:37:7f:41:e3:30:f4:e8:9c:2b:2e:8f:38:
67:2a:e7:28:e3:be:37:44:47:68:4e:9f:d1:f4:fc:24:9a:2e:
88:ff:29:27:54:36:cf:24:37:cd:7e:1e:4c:44:a9:d0:f4:72:
fd:81:10:5e:9b:fc:14:92:4c:ab:f3:36:5f:1a:79:57:96:59:
f1:88:98:c4:e6:f5:78:14:c4:cd:c4:35:02:96:d8:2c:f7:d3:
b7:13:6c:00:15:0e:49:ed:b3:8c:da:5e:7e:75:5c:d7:11:01:
b4:70:14:f9:04:db:70:9b:8e:34:bf:c4:6e:62:84:82:bb:05:
44:3b:c5:53:51:17:4e:8d:c2:d5:ee:5e:3a:83:d4:32:60:df:
4e:59:bb:d0:b5:60:74:b9:28:9b:52:0c:c6:55:ac:51:e7:35:
70:68:c4:7e:d2:97:e8:01:82:25:5a:18:58:dd:36:91:3a:5b:
94:fe:18:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOvxrNE8DqCI6EmXaYo1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1
M2M4MmUwHhcNMjUwODIzMTQwMDIzWhcNMjUwODI0MTQwMDIzWjAzMTEwLwYDVQQD
EyhjZTJlZjYxMGE3MWFmZjE0M2JiZTdhOGYwOTM5MGYyOWJhYjIwYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ANX9IVIAo9TU/wSWIci8bWm1MH
2pUqZEFDYN0qr6vXWtU2Oh4CtyaiFB+AQFWObhkt9+4gGUuYkOlw2SMmZmgwgief
6BaFYJxKS+EqwUsDk1YBEgixznOZ7yNOeRkfCm7nsWROUl4kfXfIwX80795ilL3c
YJYJge5O2vnxs9KV3TrFas4EIGQ4K8kbi7yqfJiufPW8+UeNM14vWMK68oOcoAfe
i9IJNLE107YVsUSOGjigEqrVW3hXuttojHXWVH3hu8kQ7uAVLkMomwvEJ3IgLtw/
OuVd0zzUI9K4emQH1wa8JVHzV0z3dfc+h98IuHqbyDAenMrpjfkw2s+WlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4u9hCnGv8UO756jwk5Dym6sgvIMB8GA1UdIwQY
MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt
OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj
LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXniyyaj
JiNeH55W2/a4diXiTnYYRrXTvN+y0QDRkCjDUQbKrhRxKHtUdWN7rSs67Y3glfG/
X/PHT5sHgNScD0Or/u47c4TfW/sIlf+4N39B4zD06JwrLo84ZyrnKOO+N0RHaE6f
0fT8JJouiP8pJ1Q2zyQ3zX4eTESp0PRy/YEQXpv8FJJMq/M2Xxp5V5ZZ8YiYxOb1
eBTEzcQ1ApbYLPfTtxNsABUOSe2zjNpefnVc1xEBtHAU+QTbcJuONL/EbmKEgrsF
RDvFU1EXTo3C1e5eOoPUMmDfTlm70LVgdLkom1IMxlWsUec1cGjEftKX6AGCJVoY
WN02kTpblP4YPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:56 2025 by rpki-client