Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: YXmEK0bN0gLahFwOUP6qOLXISq+zaVPiJ9+eZ33gVR4=
Subject key identifier: 07:63:E5:C6:EA:11:6B:64:2E:7D:93:B3:BE:68:84:2D:2C:16:D9:9F
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0199FC5858776C8DD4068482FF10A2C1C65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0EA5
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: APHolWgM8NK4FOakD4+4fzXrGumVx8/5B/BA3M7fSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:77:6c:8d:d4:06:84:82:ff:10:a2:c1:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=0763e5c6ea116b642e7d93b3be68842d2c16d99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:3b:40:2b:7a:b3:64:3b:d7:48:29:00:92:
05:0b:d0:dc:80:3b:3d:98:7b:c6:92:19:c6:53:20:
ab:0f:8d:78:5c:45:04:ec:3d:ff:24:34:76:a9:49:
ac:ab:a8:1c:88:54:d5:b9:0c:66:d8:dc:21:34:64:
d5:e3:1d:1d:63:f2:85:0d:7f:42:46:5b:71:42:e4:
fe:c9:af:15:84:74:fd:23:51:1a:ec:d9:6e:f1:a9:
78:de:ab:6a:b2:32:0c:38:49:ad:41:74:0d:0b:58:
cd:8a:d4:5d:e8:8d:3b:ec:3d:46:cc:d8:15:d5:a4:
27:78:c6:bf:bf:ed:17:fc:74:69:a0:e5:2a:b7:b4:
ad:87:96:37:68:7c:94:1a:09:9b:b8:47:5e:94:10:
55:63:7e:63:03:d9:37:0f:c7:c3:54:11:ec:66:bb:
78:2c:bd:a5:71:70:c7:be:dd:e9:8b:ec:6c:eb:07:
22:dd:98:ff:c2:a7:38:65:64:77:88:7f:74:a3:7e:
5e:08:50:f5:9a:20:2a:cf:7b:c3:88:6c:bc:fe:81:
55:ff:53:b6:00:e6:30:53:cf:62:3a:8c:52:c9:30:
ec:a2:79:a2:71:23:de:1c:54:9f:f3:5d:bc:84:d2:
c9:9b:a3:e5:4e:bc:6a:e5:a7:3b:02:31:d4:f6:41:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:E5:C6:EA:11:6B:64:2E:7D:93:B3:BE:68:84:2D:2C:16:D9:9F
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:38:85:d4:bc:b1:38:78:9a:e8:14:33:d4:5e:69:a3:81:
f2:bf:53:95:4b:75:f5:c2:b5:5e:d0:97:4e:0b:98:df:29:fe:
80:6d:54:e0:a5:8a:51:b8:e5:99:ba:39:fa:3c:ab:5b:65:6c:
a5:d8:99:c7:a7:24:84:3a:31:e0:f1:49:7e:96:04:0e:40:f9:
37:83:f3:6e:88:17:82:7e:a8:94:e1:bb:2a:ca:6b:96:3a:52:
a4:89:26:c7:2a:e6:9f:a9:a4:9d:2b:51:86:08:d7:98:1b:77:
a1:49:d5:c2:78:e3:73:76:69:fe:5f:f1:d8:ef:b6:2a:74:83:
f6:5d:e8:60:ee:d3:82:40:70:f4:ed:37:73:c5:d8:20:05:6f:
09:ae:de:82:ad:75:9f:24:0d:cb:ad:eb:78:f9:d9:57:36:24:
a7:fa:f7:71:e9:c5:52:75:dd:d5:36:65:02:e4:ea:6b:19:19:
49:35:1a:31:cb:6e:77:d2:a1:51:d2:e1:04:03:5c:17:b9:31:
7c:20:b8:b5:55:d1:77:71:e3:12:68:ea:44:94:f1:0b:b0:79:
29:0a:21:d6:e7:da:bc:9e:d1:5f:d2:ad:4e:ab:e8:d7:62:41:
f9:71:05:98:09:40:94:1f:d2:21:95:fe:1a:df:bc:b0:eb:56:
a9:a9:61:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFh3bI3UBoSC/xCiwcZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj
OWVmMGMwHhcNMjUxMDE5MTIwMTEyWhcNMjUxMDIwMTIwMTEyWjAzMTEwLwYDVQQD
EygwNzYzZTVjNmVhMTE2YjY0MmU3ZDkzYjNiZTY4ODQyZDJjMTZkOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY07QCt6s2Q710gpAJIFC9DcgDs9
mHvGkhnGUyCrD414XEUE7D3/JDR2qUmsq6gciFTVuQxm2NwhNGTV4x0dY/KFDX9C
RltxQuT+ya8VhHT9I1Ea7Nlu8al43qtqsjIMOEmtQXQNC1jNitRd6I077D1GzNgV
1aQneMa/v+0X/HRpoOUqt7Sth5Y3aHyUGgmbuEdelBBVY35jA9k3D8fDVBHsZrt4
LL2lcXDHvt3pi+xs6wci3Zj/wqc4ZWR3iH90o35eCFD1miAqz3vDiGy8/oFV/1O2
AOYwU89iOoxSyTDsonmicSPeHFSf8128hNLJm6PlTrxq5ac7AjHU9kEz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdj5cbqEWtkLn2Ts75ohC0sFtmfMB8GA1UdIwQY
MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt
MzJkZDUzNjQwYjljLzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj
LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhs4hdS8
sTh4mugUM9ReaaOB8r9TlUt19cK1XtCXTguY3yn+gG1U4KWKUbjlmbo5+jyrW2Vs
pdiZx6ckhDox4PFJfpYEDkD5N4PzbogXgn6olOG7KsprljpSpIkmxyrmn6mknStR
hgjXmBt3oUnVwnjjc3Zp/l/x2O+2KnSD9l3oYO7TgkBw9O03c8XYIAVvCa7egq11
nyQNy63rePnZVzYkp/r3cenFUnXd1TZlAuTqaxkZSTUaMctud9KhUdLhBANcF7kx
fCC4tVXRd3HjEmjqRJTxC7B5KQoh1ufavJ7RX9KtTqvo12JB+XEFmAlAlB/SIZX+
Gt+8sOtWqalhyg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:39 2025 by rpki-client