Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: QHKLwLHR0mUk86bA3KTNq27zQPNSHdra6kn0PAjROR8=
Subject key identifier: 7B:29:94:7F:6C:3B:59:5F:FE:5A:E1:83:1A:96:1D:39:51:8C:94:06
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 019A70DBE3A905419B2084B0B80C0E74D20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 0341
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: ISE2jdoZIGjqPStC/TgIbbDPdNrxLeG7GPmC7w3BEN8=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e3:a9:05:41:9b:20:84:b0:b8:0c:0e:74:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=7b29947f6c3b595ffe5ae1831a961d39518c9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:6b:ce:f6:c4:6e:0d:dd:87:41:a7:fc:90:
a6:3b:c3:e8:91:d3:99:df:ba:0d:81:c0:93:d4:f2:
d9:1f:da:59:1b:16:58:64:f9:3d:a9:4b:4b:8f:7a:
25:b7:b5:9c:50:8e:00:7c:31:25:d2:95:ce:63:18:
13:9c:78:e0:ea:5d:37:20:71:95:a0:b4:33:3f:ac:
ed:c5:f8:c7:dd:d5:8c:18:1d:ff:f9:97:fa:33:db:
94:46:8e:a8:6a:7f:3b:6d:a3:7c:f6:09:c9:72:3f:
ed:53:7f:a8:64:ab:35:1a:53:fb:5b:d3:d8:47:f0:
60:85:20:b2:85:e0:4b:41:41:c2:29:31:f8:af:d0:
cb:ed:2d:31:0d:0d:3b:20:50:15:e0:76:25:01:53:
f4:4e:ec:ae:f6:0b:1d:da:2b:ef:9a:88:a8:55:4e:
ba:37:4a:de:b3:fb:58:e9:f4:cc:e3:87:94:56:22:
db:50:ab:06:ea:a8:ab:c5:e0:9b:ed:f7:2d:f3:73:
c9:91:df:2b:c5:f7:fe:50:22:12:68:df:b5:db:c8:
3e:39:ac:22:d9:6d:46:8c:14:a0:39:86:5e:9a:29:
86:08:75:e7:a0:16:cb:ec:b4:1d:01:71:10:23:43:
65:22:8b:13:d2:80:5c:48:52:99:fb:25:86:96:78:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:94:7F:6C:3B:59:5F:FE:5A:E1:83:1A:96:1D:39:51:8C:94:06
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:3a:ab:36:20:da:7e:5a:11:af:39:3e:80:86:99:17:55:
de:7c:89:19:8f:87:20:a1:10:b8:60:eb:8d:24:af:f9:2a:09:
bf:1c:39:a1:2b:e8:e5:16:a8:e9:64:96:ad:3b:25:34:c7:24:
83:ab:62:1c:a8:f8:f5:db:2f:57:83:b8:3c:e0:ab:a5:17:a8:
6b:e7:32:49:d4:b0:e0:c2:4e:4b:c7:61:43:df:7b:eb:3a:77:
42:c6:00:ce:81:1e:63:c7:51:ac:75:3c:e3:06:72:0f:71:2d:
ee:de:54:86:f0:83:2c:75:06:1a:1c:4c:0e:97:c1:89:c0:6f:
36:c4:e1:59:94:1f:6e:8e:e3:09:5a:05:ad:32:10:c7:e3:b0:
70:ea:87:3f:af:82:31:dd:dd:88:8b:3d:95:6c:54:be:ca:96:
6b:80:b4:2f:c5:2a:a1:30:8a:48:14:69:25:8d:5a:72:15:82:
6f:a5:df:67:6a:a7:6e:63:a7:48:1f:7e:0d:40:b0:7d:c6:ef:
0a:14:00:b5:5a:48:ad:7c:f4:20:59:1f:1f:70:12:0e:ca:9f:
1b:35:88:18:97:fa:5f:61:d1:76:0f:7a:95:71:ed:8b:e7:cf:
2a:7e:af:17:f9:b9:bb:d8:cd:42:5c:c6:62:c7:38:b4:a2:8c:
f7:9a:a7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:21 2025 by rpki-client