Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: vptb9mHaLXBsxkyWAM9H/Di9cluX4j0m0PFAWhEvvGs=
Subject key identifier: 89:D7:85:5D:07:B2:A0:47:8D:FE:44:F5:CA:F5:3B:3F:00:6E:3C:F5
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019A318E7CC524F4E58AEA1C837DA5B5BF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 143F
Signing time: Wed 29 Oct 2025 20:00:12 +0000
Manifest this update: Wed 29 Oct 2025 20:00:12 +0000
Manifest next update: Thu 30 Oct 2025 20:00:12 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: ujdVkWEg4mDDRees6uQ1vqbyILR8WXhqELvCWG7jncU=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:8e:7c:c5:24:f4:e5:8a:ea:1c:83:7d:a5:b5:bf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Oct 29 20:00:12 2025 GMT
Not After : Oct 30 20:00:12 2025 GMT
Subject: CN=89d7855d07b2a0478dfe44f5caf53b3f006e3cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:97:12:61:bb:20:cf:a6:e5:cb:aa:6c:c6:
58:0d:6d:9a:33:4c:ef:c3:88:9f:7c:1c:47:96:20:
41:e7:59:10:01:d2:42:7d:7a:4d:5f:bf:38:29:4d:
8c:91:38:8c:ed:94:27:48:67:dd:f8:78:5b:a5:fa:
96:31:b6:d0:c2:9e:75:8c:15:81:6f:64:64:27:12:
40:f9:a7:ae:7b:6d:60:82:16:dd:ca:62:25:e6:b9:
50:c5:2d:10:88:50:b0:de:e7:a9:38:2c:b0:58:f9:
b6:70:1a:a5:47:f5:7d:a8:d6:10:3c:21:86:54:5c:
d9:72:e8:7f:85:3a:59:21:52:c0:5b:82:12:89:56:
a1:6c:ce:c6:43:10:30:61:98:40:64:b8:af:47:42:
d7:de:c8:84:cf:3e:3a:3a:a6:c4:38:24:d5:3c:12:
78:56:4c:19:82:2c:f8:40:a1:74:9e:5a:dd:67:a4:
7d:d8:5e:36:62:c0:b9:bc:04:a9:1d:32:9a:d8:57:
37:32:01:1c:79:4a:f6:d6:fc:ef:26:1a:ed:57:f9:
12:fc:aa:26:de:a3:87:56:1c:c5:0a:23:9f:fc:cf:
87:b8:40:5f:09:36:fe:21:9c:aa:e2:29:53:cc:83:
4c:e8:95:72:8a:3e:b0:50:5b:93:6d:ce:57:70:db:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:85:5D:07:B2:A0:47:8D:FE:44:F5:CA:F5:3B:3F:00:6E:3C:F5
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:b4:b9:b4:11:20:4f:bd:08:a8:75:39:e4:73:40:27:56:
0f:69:1a:7d:4c:9e:d6:ba:6c:3d:74:71:87:9a:39:15:97:87:
ae:bc:30:54:10:27:69:9c:8d:99:d5:97:9d:e5:90:5a:bc:72:
54:9c:cb:7f:03:2b:ae:ce:2a:5a:d3:65:dc:d0:1e:11:36:4e:
9c:ce:0d:d9:ca:57:58:91:c3:5e:0b:30:df:1b:d1:b6:84:09:
aa:70:3d:ea:40:46:b3:dc:c5:12:9d:48:94:86:f5:da:96:2c:
83:5a:65:f4:7a:9a:24:0a:8b:78:48:63:fd:58:fd:04:fa:09:
0a:99:ec:d2:5f:84:8c:b2:12:5f:d4:35:58:91:48:a7:00:d3:
14:dc:37:9d:22:77:e3:82:9b:3c:16:b2:bc:31:7b:af:82:65:
5d:b5:96:ec:f3:2d:a2:5d:1e:f6:7c:45:5d:fb:a7:e5:08:2e:
e0:6b:0b:e6:47:b1:5f:d7:bc:5d:ea:02:09:ce:6f:74:3c:bf:
bc:fa:67:df:34:e9:92:b3:f5:61:c2:fd:62:a5:42:d1:72:90:
10:f3:51:93:bf:5f:60:62:e7:17:79:0a:4f:0d:9c:6f:b2:b5:
e5:fa:52:2b:07:61:a2:f2:ef:d6:56:68:44:d2:fe:ae:b8:bf:
15:88:27:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 02:12:28 2025 by rpki-client