Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: Vc0U0gebXhniVicj7lFfo0ep4sb6K8KX/Papq4eGLx0=
Subject key identifier: EF:13:81:8D:9D:A9:B6:AC:D1:39:90:24:F0:11:85:0D:26:7C:D9:89
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019A72939C3E6A550B2A07EBBA0F7A04BD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: KALniUf7Q8sTdUibL54RowjLc1kVRCJfeMNg6cNbRXs=)
2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9c:3e:6a:55:0b:2a:07:eb:ba:0f:7a:04:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=ef13818d9da9b6acd1399024f011850d267cd989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:30:ee:8f:e0:e6:c5:37:b9:85:3d:bd:14:
81:45:19:ee:7f:37:53:a1:e0:df:31:68:ee:39:b7:
0d:db:cd:b2:2a:a2:a9:e9:e7:b8:3f:ca:9a:de:e9:
48:eb:f6:44:ee:78:c7:82:96:29:0f:54:8d:a2:53:
c8:5a:d1:f3:77:c6:1b:4e:13:a7:11:c7:48:4e:0b:
d8:3b:32:fa:db:b6:0e:a4:2e:3d:50:ef:c6:03:05:
5c:39:a3:27:a3:ac:e5:3e:b0:c0:a6:8f:1f:d0:a7:
cc:52:3b:38:f6:de:4f:20:13:fa:2f:59:d2:58:e8:
58:84:67:c1:6b:66:58:aa:74:79:4b:62:9a:ff:4b:
d9:4d:af:b0:ab:48:e9:da:38:21:c0:3d:42:a0:ff:
8f:b9:6c:a2:55:9d:5c:29:f5:16:d9:0c:9a:e4:5d:
3e:bf:0b:c2:b2:82:98:f6:16:dd:50:be:8f:0f:b0:
7d:e6:a7:7d:da:ab:f7:2e:c4:eb:f7:33:d2:9a:44:
88:e8:61:32:b0:9f:41:6e:36:1c:72:d6:eb:fa:98:
c7:76:5d:55:3e:d5:de:d7:12:69:cc:51:a6:b3:79:
48:50:03:a2:45:31:f5:5e:57:cd:99:4b:f2:61:98:
9b:18:8d:01:54:18:b4:6c:fe:f0:02:be:90:03:78:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:81:8D:9D:A9:B6:AC:D1:39:90:24:F0:11:85:0D:26:7C:D9:89
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:86:c3:cd:13:f4:40:05:15:64:fb:58:a6:ec:5d:da:ca:
a2:48:6a:5e:e8:31:13:3f:ff:90:99:8b:a2:8d:41:89:af:0a:
2d:cc:37:71:21:bd:10:b3:18:84:9f:14:aa:22:71:84:bc:e8:
5f:8e:cd:5b:7f:0a:c3:de:11:d3:aa:19:0c:3a:e9:6a:7f:e2:
84:9e:65:22:bb:47:55:9f:73:81:e6:a3:9b:cb:f6:9a:97:cc:
2e:d5:c1:c4:c9:27:94:3b:3f:ca:61:1d:15:08:34:8c:18:94:
8e:97:7d:1e:dd:17:3a:b4:ff:4e:fb:85:48:43:db:97:c7:7c:
00:b7:22:9d:16:f5:ac:59:b2:c8:99:5e:4c:13:e2:42:a5:3a:
f1:5e:64:b0:eb:24:5f:e0:bd:08:a1:23:54:39:b3:a6:48:f1:
02:d2:b2:72:e3:c2:dc:21:06:dc:d3:6b:4f:3b:dd:d7:3d:25:
15:7a:5f:71:e4:f3:0a:ad:32:fe:81:ed:11:02:13:a9:21:c7:
13:0c:85:e0:fb:5b:ae:0a:64:37:ce:bc:8e:fa:f9:e8:46:c1:
07:41:dc:fc:3a:64:f0:a1:d3:64:8d:9b:c2:b3:68:70:67:d9:
f3:5e:1e:a8:6d:1d:12:82:d0:a7:9e:53:9a:37:8c:16:8d:86:
cc:7e:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:18:57 2025 by rpki-client