Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: EU3N8ntMADw8UXXwGyMbfCak6YVy2uyZDML+Z1/TvfE=
Subject key identifier: 57:81:46:EC:4D:29:9B:D7:FD:09:10:80:D4:DB:13:4B:48:D2:60:EB
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 019A72261F387F53E16192BDFB339B090FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 161C
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: qf+WdPAoRHPKXQj8g6S80s3SOmvnv1TSXuD6LEfbdhw=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:38:7f:53:e1:61:92:bd:fb:33:9b:09:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=578146ec4d299bd7fd091080d4db134b48d260eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:da:39:4a:bc:1b:d9:df:3f:08:b8:c8:4a:
5c:a0:15:36:6c:5f:62:cb:9b:a3:22:a9:75:4c:ef:
02:11:d0:f5:b9:d2:eb:9c:e2:df:26:44:0a:50:ce:
89:70:a0:00:f9:54:55:88:b0:dc:7e:99:1a:0a:96:
57:c7:72:79:dd:c2:e6:fe:87:cd:71:81:63:8a:ba:
55:ea:ec:e8:70:fc:02:80:53:57:fd:68:70:02:a5:
18:a2:e6:17:d9:b6:ce:13:0a:86:70:fb:eb:da:a6:
dc:3f:ed:26:a5:28:a4:83:d5:99:04:bd:e8:d3:0b:
2b:14:0a:87:2a:8e:59:7d:58:16:3b:14:e6:03:78:
d7:a2:b4:d8:1a:b7:e3:93:15:58:58:55:f2:30:87:
fa:80:60:b1:84:0d:49:b3:66:04:b6:de:54:b1:ce:
54:7e:60:fa:13:eb:0e:22:78:ca:90:19:50:ee:fa:
c5:73:13:84:ea:59:88:e8:68:d8:4c:88:e1:a8:c3:
e1:d8:9e:67:c8:59:1c:b7:9b:57:f7:6b:2e:da:a5:
23:51:da:85:8a:0e:eb:77:ae:21:bf:2e:ee:6d:31:
c9:9d:06:c2:e4:83:6e:e7:bd:f2:d2:14:8d:48:75:
a2:cf:f0:5b:13:ec:26:fd:f3:23:19:53:af:32:96:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:81:46:EC:4D:29:9B:D7:FD:09:10:80:D4:DB:13:4B:48:D2:60:EB
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:12:47:34:37:ef:eb:20:2f:e8:a4:39:ff:a0:af:de:b6:60:
a3:30:7b:f9:dd:42:c5:4e:1d:74:be:f1:b3:3b:a2:25:2a:96:
8c:85:e7:80:e9:52:e2:7b:34:1d:32:fe:34:3c:9f:f5:3c:c9:
9a:3e:e8:6b:43:7e:70:d8:06:17:bb:99:af:33:cb:ab:29:81:
4e:a1:ba:ca:a0:3a:a7:16:b6:a7:22:9f:d3:2c:87:73:a5:30:
a9:1e:b7:02:55:7b:86:fa:9b:1b:ce:c2:6e:e3:d8:9f:0a:86:
bb:12:3f:8d:6d:fe:a1:dc:dd:6a:23:51:be:ca:ce:82:31:91:
a4:e9:52:67:e5:29:17:99:af:ac:c2:67:63:a2:5f:eb:20:ea:
51:7a:64:8f:cc:09:5a:7f:60:8d:02:34:14:13:9e:83:2c:30:
8b:00:46:cf:01:bb:fe:aa:c3:3d:22:35:79:fc:16:87:24:f9:
d8:5d:8c:c8:39:ac:4a:0d:00:53:2f:6c:92:66:6a:31:b9:8f:
ba:e0:c2:b2:56:a0:8a:b2:aa:38:d7:28:6c:70:46:00:3b:82:
86:7e:df:70:cd:f1:38:ba:bf:39:20:54:49:2c:cc:15:cd:4d:
a3:52:c1:62:12:6d:0e:02:a4:49:57:96:a4:75:c1:16:ab:ec:
49:18:47:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJh84f1PhYZK9+zObCQ/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjUxMTExMDkwMTMyWhcNMjUxMTEyMDkwMTMyWjAzMTEwLwYDVQQD
Eyg1NzgxNDZlYzRkMjk5YmQ3ZmQwOTEwODBkNGRiMTM0YjQ4ZDI2MGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTHaOUq8G9nfPwi4yEpcoBU2bF9i
y5ujIql1TO8CEdD1udLrnOLfJkQKUM6JcKAA+VRViLDcfpkaCpZXx3J53cLm/ofN
cYFjirpV6uzocPwCgFNX/WhwAqUYouYX2bbOEwqGcPvr2qbcP+0mpSikg9WZBL3o
0wsrFAqHKo5ZfVgWOxTmA3jXorTYGrfjkxVYWFXyMIf6gGCxhA1Js2YEtt5Usc5U
fmD6E+sOInjKkBlQ7vrFcxOE6lmI6GjYTIjhqMPh2J5nyFkct5tX92su2qUjUdqF
ig7rd64hvy7ubTHJnQbC5INu573y0hSNSHWiz/BbE+wm/fMjGVOvMpbC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeBRuxNKZvX/QkQgNTbE0tI0mDrMB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRJHNDfv
6yAv6KQ5/6Cv3rZgozB7+d1CxU4ddL7xszuiJSqWjIXngOlS4ns0HTL+NDyf9TzJ
mj7oa0N+cNgGF7uZrzPLqymBTqG6yqA6pxa2pyKf0yyHc6UwqR63AlV7hvqbG87C
buPYnwqGuxI/jW3+odzdaiNRvsrOgjGRpOlSZ+UpF5mvrMJnY6Jf6yDqUXpkj8wJ
Wn9gjQI0FBOegywwiwBGzwG7/qrDPSI1efwWhyT52F2MyDmsSg0AUy9skmZqMbmP
uuDCslagirKqONcobHBGADuChn7fcM3xOLq/OSBUSSzMFc1No1LBYhJtDgKkSVeW
pHXBFqvsSRhH9w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:18:32 2025 by rpki-client