Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: kPJBMDc7xDnuwc59BRiezW1QuPyywDOCujWhd/cfySc=
Subject key identifier: DD:BF:26:7F:4C:93:40:1A:95:A9:48:12:75:F3:93:06:57:39:C4:5D
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 0199FC218086429CC2A3736EBB04B9E1F1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 07C8
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: RSw36ZX5TR29WH9UbjCJ4PVihXvwrDu8cNiEcUWGWio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:80:86:42:9c:c2:a3:73:6e:bb:04:b9:e1:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=ddbf267f4c93401a95a9481275f393065739c45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:b7:68:a7:05:f3:14:1e:c5:94:9f:03:ea:
d3:d3:67:d7:f3:7e:1b:01:6b:d9:68:e0:0b:c2:6c:
b6:3d:17:b4:f6:63:ba:70:af:c2:fe:f1:1d:da:49:
ed:81:9c:79:36:2a:15:6d:34:23:e7:de:0a:5e:e1:
04:cd:c9:44:45:03:53:76:39:75:c2:c1:67:6f:17:
39:ef:68:11:df:cb:9e:b8:d4:93:82:36:0f:b9:24:
d0:c9:5a:ad:34:b3:46:cf:a8:12:76:c4:b5:79:d7:
87:eb:53:4b:34:9d:11:2c:99:cd:32:89:aa:4f:9d:
6e:ef:ae:f3:f8:c3:62:c4:05:cf:75:07:71:1c:d5:
37:4e:c9:67:af:86:40:49:55:34:d3:e3:d7:04:3a:
80:87:09:f8:c4:83:47:7b:2e:66:a1:81:d8:8c:34:
5c:02:92:34:08:b9:e9:ea:a3:13:17:db:1c:8a:61:
82:ce:7a:df:31:8b:d2:b0:35:43:34:03:d8:5f:57:
98:7e:f5:7a:2b:30:2c:a5:01:cb:39:68:c2:b3:2a:
0d:0e:d6:50:d3:8d:2e:f4:ff:93:ce:b3:e9:85:6f:
df:a3:19:d7:81:4b:16:19:a8:90:fb:72:93:8d:2e:
00:4f:5e:bb:13:d9:18:db:ce:81:7d:de:e6:a9:e7:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:26:7F:4C:93:40:1A:95:A9:48:12:75:F3:93:06:57:39:C4:5D
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:84:e9:d3:87:77:c6:92:a6:a0:12:60:53:23:59:39:87:
e2:53:2f:9e:e8:7b:57:9c:03:4a:77:ce:41:ab:cf:fb:94:a6:
de:a6:46:06:14:47:8f:1e:ed:c2:72:30:98:2e:31:9e:26:4f:
93:17:9d:92:d3:f2:b9:eb:56:30:5c:81:04:35:81:ae:8c:71:
a1:e7:d4:7f:d1:e1:cd:06:59:e0:e7:b9:df:f2:1c:32:43:4f:
43:97:93:80:62:7c:11:eb:c3:97:fe:41:1c:cc:c8:3e:f5:72:
02:03:75:c2:81:dd:50:05:a8:ce:f9:a3:d4:3f:67:6b:51:8d:
71:30:51:af:5a:f4:54:09:c3:c9:9f:0e:01:41:7e:32:72:f3:
4d:57:93:42:ff:9b:51:10:d4:f7:02:b6:61:99:eb:ed:b8:80:
ac:14:49:91:cf:87:27:fe:5a:37:c5:37:da:d4:6a:b5:73:62:
aa:6b:94:7f:9a:d9:76:12:cc:8a:7f:2c:d2:07:6a:7f:88:2f:
a1:3a:7b:ec:b3:db:cc:f6:7c:0b:78:e8:cc:f3:16:74:72:65:
05:bb:01:83:3e:01:6a:cb:e1:51:f1:10:f8:1c:5a:74:b6:01:
51:dc:69:f1:3b:8a:2a:05:b2:93:0d:a5:92:e9:c7:26:b6:ac:
0d:be:54:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYCGQpzCo3NuuwS54fHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD
EyhkZGJmMjY3ZjRjOTM0MDFhOTVhOTQ4MTI3NWYzOTMwNjU3MzljNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtei3aKcF8xQexZSfA+rT02fX834b
AWvZaOALwmy2PRe09mO6cK/C/vEd2kntgZx5NioVbTQj594KXuEEzclERQNTdjl1
wsFnbxc572gR38ueuNSTgjYPuSTQyVqtNLNGz6gSdsS1edeH61NLNJ0RLJnNMomq
T51u767z+MNixAXPdQdxHNU3Tslnr4ZASVU00+PXBDqAhwn4xINHey5moYHYjDRc
ApI0CLnp6qMTF9scimGCznrfMYvSsDVDNAPYX1eYfvV6KzAspQHLOWjCsyoNDtZQ
040u9P+TzrPphW/foxnXgUsWGaiQ+3KTjS4AT167E9kY286Bfd7mqec+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2/Jn9Mk0AalalIEnXzkwZXOcRdMB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4qE6dOH
d8aSpqASYFMjWTmH4lMvnuh7V5wDSnfOQavP+5Sm3qZGBhRHjx7twnIwmC4xniZP
kxedktPyuetWMFyBBDWBroxxoefUf9HhzQZZ4Oe53/IcMkNPQ5eTgGJ8EevDl/5B
HMzIPvVyAgN1woHdUAWozvmj1D9na1GNcTBRr1r0VAnDyZ8OAUF+MnLzTVeTQv+b
URDU9wK2YZnr7biArBRJkc+HJ/5aN8U32tRqtXNiqmuUf5rZdhLMin8s0gdqf4gv
oTp77LPbzPZ8C3jozPMWdHJlBbsBgz4BasvhUfEQ+BxadLYBUdxp8TuKKgWykw2l
kunHJrasDb5UWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:38 2025 by rpki-client