
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: 9w6JpGziKYH7o/Hiem8DDyVE2tmsTEhF3uADPHgvAjY=
Subject key identifier: D5:2F:CA:B7:AD:88:D4:F3:5C:99:22:78:45:69:74:12:B5:88:2F:60
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019840CFD4AA4A6FC8413B9B81EB07162F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 021F
Signing time: Fri 25 Jul 2025 09:00:18 +0000
Manifest this update: Fri 25 Jul 2025 09:00:18 +0000
Manifest next update: Sat 26 Jul 2025 09:00:18 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: yGIQo5qmFHzlNfccieD5wHWOCH61OH1E3V5Js+tpeds=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:d4:aa:4a:6f:c8:41:3b:9b:81:eb:07:16:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Jul 25 09:00:18 2025 GMT
Not After : Jul 26 09:00:18 2025 GMT
Subject: CN=d52fcab7ad88d4f35c99227845697412b5882f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:2f:ba:f6:6c:be:1a:68:0f:e3:41:27:64:
1c:09:20:0b:6b:7d:04:47:2e:c3:5e:d0:fe:1f:5f:
da:9f:59:65:be:20:8c:5d:84:a4:46:b0:1e:81:78:
34:d4:6e:fa:8e:35:b8:19:89:e0:62:af:12:e2:49:
b5:fc:7f:fc:94:88:ce:79:23:50:d3:d0:fd:0a:8d:
9e:23:43:43:62:da:ac:70:c6:5b:ec:6c:d6:86:4b:
01:ca:2e:55:ca:9d:68:a8:fa:39:09:e6:74:9c:a0:
01:4d:81:e7:d8:8d:0f:b2:bf:5c:b2:7a:ed:98:c0:
f8:fc:50:70:3a:26:1a:e1:8f:80:cd:01:39:c9:18:
b8:d8:1c:4c:4b:00:f5:7b:5d:2b:e9:74:80:a1:f4:
2c:e7:36:07:59:c9:85:ef:ed:58:ce:e5:49:a8:1b:
f6:53:0d:b0:62:23:c9:89:9f:0a:10:8f:17:a4:de:
08:c9:0f:41:89:c0:cb:cd:6c:7f:e8:63:fa:4a:b1:
6c:07:77:7d:22:5d:89:90:72:cd:87:9f:58:e4:da:
17:bf:b0:58:89:95:bf:33:21:85:d9:d4:d0:55:c4:
0c:bd:cb:dc:7a:2d:8d:35:ef:ac:7d:0d:52:d8:60:
34:d2:88:42:75:b3:c2:0f:1b:79:ba:04:f8:7b:fe:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:CA:B7:AD:88:D4:F3:5C:99:22:78:45:69:74:12:B5:88:2F:60
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:50:e0:31:64:47:ca:8d:9c:76:fa:a4:d1:63:2d:ff:b0:84:
86:68:37:0c:c4:af:17:cb:83:d1:dd:78:c5:76:25:25:da:73:
09:98:52:72:f7:48:9a:1f:c0:8f:47:05:6e:87:75:65:ec:4c:
07:d7:e3:27:33:bf:d6:16:b3:cc:88:fa:9c:1c:41:a9:6c:01:
02:c4:80:7a:e4:c0:27:19:d7:1f:7d:98:95:33:b1:86:13:c9:
28:99:7c:95:e7:76:f5:ad:c2:c5:5c:fc:7e:20:34:bf:61:60:
9b:6d:2a:d5:85:31:15:c7:f3:1f:44:d9:63:49:86:88:9a:a9:
ff:44:5d:38:c3:ce:ed:1c:52:43:57:0c:ad:cd:7e:64:08:0f:
e2:30:7c:bc:cc:16:73:d1:cf:67:eb:e6:fe:f4:76:5b:37:e4:
6b:bc:18:d9:b6:6b:55:9a:da:32:bc:a1:c2:2b:5b:82:b7:0a:
fd:49:8d:3d:ad:2a:a9:a4:db:6b:80:dc:f1:22:47:f1:c6:79:
6b:b3:67:48:06:d0:98:77:2a:de:f2:88:eb:25:3c:d1:0e:4e:
d6:eb:a2:3c:23:f1:8e:2d:7d:32:4c:40:d1:b6:23:04:87:a7:
1f:d8:2c:95:0b:32:c4:2d:88:f4:97:39:70:ae:3e:c8:ca:4b:
46:35:1a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAz9SqSm/IQTubgesHFi8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2
MjYxMzgwHhcNMjUwNzI1MDkwMDE4WhcNMjUwNzI2MDkwMDE4WjAzMTEwLwYDVQQD
EyhkNTJmY2FiN2FkODhkNGYzNWM5OTIyNzg0NTY5NzQxMmI1ODgyZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EgvuvZsvhpoD+NBJ2QcCSALa30E
Ry7DXtD+H1/an1llviCMXYSkRrAegXg01G76jjW4GYngYq8S4km1/H/8lIjOeSNQ
09D9Co2eI0NDYtqscMZb7GzWhksByi5Vyp1oqPo5CeZ0nKABTYHn2I0Psr9csnrt
mMD4/FBwOiYa4Y+AzQE5yRi42BxMSwD1e10r6XSAofQs5zYHWcmF7+1YzuVJqBv2
Uw2wYiPJiZ8KEI8XpN4IyQ9BicDLzWx/6GP6SrFsB3d9Il2JkHLNh59Y5NoXv7BY
iZW/MyGF2dTQVcQMvcvcei2NNe+sfQ1S2GA00ohCdbPCDxt5ugT4e/4iLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUvyretiNTzXJkieEVpdBK1iC9gMB8GA1UdIwQY
MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt
NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw
LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFDgMWRH
yo2cdvqk0WMt/7CEhmg3DMSvF8uD0d14xXYlJdpzCZhScvdImh/Aj0cFbod1ZexM
B9fjJzO/1hazzIj6nBxBqWwBAsSAeuTAJxnXH32YlTOxhhPJKJl8led29a3CxVz8
fiA0v2Fgm20q1YUxFcfzH0TZY0mGiJqp/0RdOMPO7RxSQ1cMrc1+ZAgP4jB8vMwW
c9HPZ+vm/vR2Wzfka7wY2bZrVZraMryhwitbgrcK/UmNPa0qqaTba4Dc8SJH8cZ5
a7NnSAbQmHcq3vKI6yU80Q5O1uuiPCPxji19MkxA0bYjBIenH9gslQsyxC2I9Jc5
cK4+yMpLRjUaYg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 15:25:01 2025 by rpki-client