Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: iglOATbM2N/4V5/HTzovZNp8jSaAaH2Edypr3ZFdP0s=
Subject key identifier: 75:91:82:87:AD:CD:0E:13:1A:27:28:DD:4B:2A:57:2B:4E:6D:B8:DB
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 019A725C95AD37A4E73000B44A00A5193BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 077D
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: VIKoEZKZW5BbKWumIDS9eRRzuoX7x0+A57nmawAbvhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:ad:37:a4:e7:30:00:b4:4a:00:a5:19:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=75918287adcd0e131a2728dd4b2a572b4e6db8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:1d:5b:4f:4c:01:b5:66:f7:93:58:80:27:
62:67:3a:ec:50:39:85:07:c8:99:ac:62:6b:bc:1c:
9d:59:bb:7b:13:dc:96:89:c0:6c:75:27:ba:da:26:
9f:0f:cc:a2:48:b3:83:37:0a:41:b0:64:4f:79:8a:
be:72:b6:4f:e8:cd:85:1d:42:91:44:6e:97:d7:29:
ea:21:fa:98:77:02:10:71:8c:77:3d:a3:c5:ca:60:
41:a8:d3:ab:3b:82:50:e5:0e:1c:6f:63:8e:30:9a:
47:7c:31:0d:e0:c7:2a:06:18:c9:fa:a5:00:99:c8:
c2:3c:13:7c:28:6f:f5:5b:fd:02:0e:f2:9b:65:c5:
f2:bc:cb:12:61:3f:10:8e:f8:b4:83:10:5f:97:9d:
1c:c1:8d:14:dc:d7:8e:d7:80:ff:01:e6:9a:bb:43:
f3:24:ab:2d:d7:2e:c9:fd:a0:f7:3f:2f:0e:7e:36:
98:1f:ec:a7:6a:aa:37:38:d6:50:69:2b:a9:19:e2:
74:88:91:d5:48:cf:68:c2:19:00:d0:ba:ba:48:02:
fe:07:10:50:e5:99:ff:d1:f4:c5:2b:f8:cf:7b:93:
f4:75:3c:9b:35:0a:b1:f4:a7:05:43:77:cc:65:ad:
9c:48:2e:2c:7c:b6:e9:3a:7f:68:16:e0:5c:9c:eb:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:82:87:AD:CD:0E:13:1A:27:28:DD:4B:2A:57:2B:4E:6D:B8:DB
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:4b:61:54:cb:ef:c2:75:27:0b:61:e3:6c:87:66:cd:d7:
c6:44:8e:0f:c9:c4:41:f4:49:98:fe:3c:1a:44:75:45:c3:17:
0f:0e:6b:55:97:3c:63:f6:03:da:91:35:a0:c9:d7:8b:34:d7:
bf:b5:34:15:86:5a:8d:79:fe:5e:7f:2a:1b:db:ef:14:6b:aa:
9c:e2:5f:d9:32:68:d4:70:df:d2:2c:be:0d:91:f2:ba:d6:bf:
49:dc:27:20:4d:70:aa:a6:72:08:21:d4:ce:fe:0e:53:61:79:
92:4a:92:74:12:4f:f2:7a:6d:59:3e:45:4e:eb:2e:b1:71:10:
0e:03:b7:a6:e0:75:e0:45:3e:3e:c5:a2:76:1a:ec:11:e7:e3:
4d:98:d4:cd:f1:fa:4e:77:f3:73:e3:99:51:b7:6c:c5:95:a4:
55:67:11:80:57:ac:f5:7d:4d:bb:77:c7:e8:dc:12:73:e3:2c:
a4:78:b3:60:39:11:59:ab:f4:28:81:11:dd:51:78:7e:35:3b:
da:e9:a4:2e:d2:e6:b8:ff:c2:11:0e:de:1d:5c:47:ee:b2:a3:
f2:c4:76:a1:a7:30:98:ad:3d:d8:16:ec:03:dd:db:ce:be:ca:
84:55:88:34:63:17:44:ba:79:97:43:97:15:47:38:7e:7c:78:
b2:99:6e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJWtN6TnMAC0SgClGTv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjQ5OGJhYjdmM2JiOTcxNjZkYTU3OTI5NGE4YjQ3MTQ1
MGU3NWMwHhcNMjUxMTExMTAwMTAxWhcNMjUxMTEyMTAwMTAxWjAzMTEwLwYDVQQD
Eyg3NTkxODI4N2FkY2QwZTEzMWEyNzI4ZGQ0YjJhNTcyYjRlNmRiOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT8dW09MAbVm95NYgCdiZzrsUDmF
B8iZrGJrvBydWbt7E9yWicBsdSe62iafD8yiSLODNwpBsGRPeYq+crZP6M2FHUKR
RG6X1ynqIfqYdwIQcYx3PaPFymBBqNOrO4JQ5Q4cb2OOMJpHfDEN4McqBhjJ+qUA
mcjCPBN8KG/1W/0CDvKbZcXyvMsSYT8Qjvi0gxBfl50cwY0U3NeO14D/Aeaau0Pz
JKst1y7J/aD3Py8OfjaYH+ynaqo3ONZQaSupGeJ0iJHVSM9owhkA0Lq6SAL+BxBQ
5Zn/0fTFK/jPe5P0dTybNQqx9KcFQ3fMZa2cSC4sfLbpOn9oFuBcnOtC4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWRgoetzQ4TGico3UsqVytObbjbMB8GA1UdIwQY
MBaAFB70mLq387uXFm2leSlKi0cUUOdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2Et
NzUyNjI1OTI4ZmVmLzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2EtNzUyNjI1OTI4ZmVm
LzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKlLYVTL
78J1Jwth42yHZs3XxkSOD8nEQfRJmP48GkR1RcMXDw5rVZc8Y/YD2pE1oMnXizTX
v7U0FYZajXn+Xn8qG9vvFGuqnOJf2TJo1HDf0iy+DZHyuta/SdwnIE1wqqZyCCHU
zv4OU2F5kkqSdBJP8nptWT5FTususXEQDgO3puB14EU+PsWidhrsEefjTZjUzfH6
Tnfzc+OZUbdsxZWkVWcRgFes9X1Nu3fH6NwSc+MspHizYDkRWav0KIER3VF4fjU7
2umkLtLmuP/CEQ7eHVxH7rKj8sR2oacwmK092BbsA93bzr7KhFWINGMXRLp5l0OX
FUc4fnx4splu0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:00:41 2025 by rpki-client