Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: cyBlqM9PKldGYOnqjCwx3c1EXyvrvdPK0xtY76S2fDI=
Subject key identifier: 06:4C:6E:2A:79:75:4A:59:EA:A3:09:7F:76:6D:26:20:97:1C:C4:96
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019A71B7A405E37DA5C2C29BD8BA5DBCD0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: 5G8rjT0KKNQwTjsU9u5mSenNCu30U+DfAIs0TGXqm0I=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:05:e3:7d:a5:c2:c2:9b:d8:ba:5d:bc:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=064c6e2a79754a59eaa3097f766d2620971cc496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:c9:37:eb:c1:0e:6d:f0:7b:52:11:b4:a0:
ca:b2:56:7f:5f:c7:c2:e9:ef:2b:06:23:d1:fc:3b:
6f:a7:42:74:cd:d7:9d:1c:d4:9b:23:90:20:9c:c3:
ae:68:63:1a:2d:12:f2:b9:fd:8f:8b:91:b7:72:27:
cf:1f:0d:f0:03:41:ca:e8:0a:3c:cc:95:02:e5:24:
23:e3:4d:81:78:aa:02:3d:9f:ad:4e:9d:c6:c5:55:
8b:12:e4:d6:b8:92:a7:a8:12:5e:83:0b:c8:44:07:
41:5f:88:ff:8f:9b:aa:28:04:29:24:cc:5f:9a:bc:
7f:a8:b6:4a:33:6c:35:d9:f1:ef:18:36:2c:36:b4:
de:e6:d7:4b:92:e6:d9:d2:6b:58:76:81:95:77:32:
7c:44:f5:c9:ef:59:c3:81:36:f3:da:cc:69:e0:e5:
0c:f4:8d:76:46:6a:e3:51:58:ce:31:7d:5f:60:67:
ee:ba:58:37:9e:32:65:8c:a2:74:d9:52:88:2b:b9:
d0:d7:2e:5c:c1:c2:f9:f9:74:b5:d0:8b:0f:ef:5b:
e1:3a:54:02:fd:ee:9d:5d:0b:f0:ea:9b:8e:e0:a1:
db:f0:05:e9:5a:3e:f3:66:e2:e3:98:1f:67:15:5d:
a7:73:87:31:b3:b3:92:0a:4f:a7:20:91:57:4f:cf:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:6E:2A:79:75:4A:59:EA:A3:09:7F:76:6D:26:20:97:1C:C4:96
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:dd:99:86:85:ce:46:bd:61:fe:65:16:cd:7e:2f:e3:bb:
20:cc:fc:65:78:7d:4a:ed:52:d3:9c:01:ed:26:ab:d4:94:f8:
d4:a4:b5:3a:dd:ed:4b:b7:ba:83:98:93:5e:54:3a:36:d9:c9:
05:8d:14:1e:07:0d:68:c2:7c:36:ae:eb:9c:40:86:20:7e:db:
e2:05:3a:92:f7:85:bc:35:33:5a:1d:85:e0:4d:5c:49:b9:72:
83:eb:23:06:0d:3c:64:f7:8b:3f:54:2d:c1:d4:46:bc:8f:33:
5f:97:36:c7:ad:9b:59:75:08:e8:f5:75:1c:7d:b7:f5:33:e2:
ae:7a:87:df:e5:5c:31:49:5d:7f:af:c2:93:89:85:0a:e1:71:
24:02:03:1a:52:20:18:43:74:23:81:80:8b:c9:02:50:9f:35:
11:1f:71:21:a2:58:dd:d1:ae:88:b8:8f:8b:5c:82:4e:ca:b6:
06:ee:5a:f8:c8:c9:47:aa:f7:37:8b:d5:e3:48:2c:8d:e0:e0:
fd:05:d6:d3:d4:c9:13:9f:79:b9:e9:c3:f1:f3:0e:35:1c:c8:
13:d6:f5:01:d1:16:10:2b:70:6e:d9:8b:a5:5a:3d:b8:d1:a4:
04:ce:27:c9:82:ac:c5:7e:ff:16:a0:ad:04:58:41:cd:50:e5:
0c:f2:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client