Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: 2sN3xTG7bHj6mznAkwUlu2+MC2u4jwCx+eAx7y8a4BM=
Subject key identifier: 93:CA:34:BF:56:04:10:3B:E9:FF:10:72:B8:58:7C:23:C4:1C:45:58
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 019A71EE9C4B925C911B8825C43B58F86CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 0788
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: b1iwY8QQer0SNc3Nv5JpiUwz4NL466rlEUFzgSTRWdg=)
2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9c:4b:92:5c:91:1b:88:25:c4:3b:58:f8:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=93ca34bf5604103be9ff1072b8587c23c41c4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:fc:f3:44:af:88:11:ed:a0:4d:b4:9a:c2:
5f:47:26:88:7c:17:c0:4e:bd:9c:c9:22:ca:20:b1:
2d:b9:69:fd:2d:e4:cf:10:bc:33:80:32:57:84:67:
d7:2f:95:f8:e7:29:2d:fe:96:97:d8:92:30:51:e8:
e0:da:40:d8:0e:c9:99:e2:01:23:99:b9:f1:23:09:
06:3f:3e:db:ca:d9:83:84:51:42:98:97:5d:16:bf:
3d:fb:c5:54:7e:91:68:60:d5:db:3b:2f:d3:e6:2d:
ef:0f:b7:06:12:aa:49:e1:1a:6e:59:ff:97:ec:59:
05:e4:fc:b2:52:4c:1f:66:78:9b:ab:42:06:31:4a:
9b:0e:92:ef:cc:41:20:05:9a:24:5b:63:84:13:8b:
9f:1c:de:31:c4:37:f2:fa:dc:12:07:59:c9:17:62:
70:bd:6f:1e:e2:3c:cd:4c:ca:a2:e0:f9:47:64:66:
3f:2a:32:33:eb:0c:8d:ba:67:6e:88:e5:30:46:b8:
ba:fb:31:0d:c9:c3:d2:16:0e:c2:99:ae:da:df:38:
13:2e:b6:71:9c:59:08:42:32:c4:ea:2c:bf:46:68:
2e:e3:ed:df:8c:e6:35:55:51:c5:e3:76:18:b8:07:
2b:b7:8f:7d:65:36:1c:74:8c:44:ca:64:e6:17:a7:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:34:BF:56:04:10:3B:E9:FF:10:72:B8:58:7C:23:C4:1C:45:58
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f3:1e:03:ae:bd:90:79:8e:cd:31:a3:ef:25:7f:aa:a9:cb:
2a:45:9d:4d:2e:a7:17:ef:89:4e:ee:7f:af:40:d3:b8:f4:be:
31:9a:9f:d3:f0:07:18:c7:0d:28:92:64:83:43:2f:62:45:99:
45:0a:8c:80:49:1e:9f:55:b7:47:4c:1d:3d:88:63:2d:21:7f:
81:5d:39:f9:3d:d6:de:69:f3:81:15:b9:0c:8b:7b:4b:0b:30:
00:01:04:1e:ed:0d:c1:6e:a4:70:fa:62:b6:77:a9:bb:66:ee:
41:56:09:e7:8e:b7:8d:60:51:62:32:ca:22:4e:59:63:7a:be:
03:56:b4:5b:cc:37:8a:33:6b:ba:7c:08:99:e1:7e:a0:4f:bd:
4b:00:52:40:b9:50:13:2c:c3:ff:27:c9:18:c4:83:12:c8:eb:
63:b4:f1:95:05:f6:f6:28:a9:5c:16:3c:88:b3:f7:bf:bb:da:
4c:86:95:d7:0b:6a:b3:90:c1:06:6d:2f:d4:d6:65:98:2c:9f:
30:c2:1d:20:25:93:fe:9b:39:3f:ee:3b:81:f0:fc:e7:8e:96:
02:0a:6f:b4:e1:19:7c:b1:9e:88:97:63:3e:cc:32:c0:7d:5c:
40:b8:78:01:6b:e5:6e:d0:a8:ae:3b:f2:0b:84:bd:29:a5:c6:
4c:15:92:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pxLklyRG4glxDtY+Gy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZmNhYjRkZWRlZDY2YWJlZjdjZDdlZDcyNjU3YmMwM2E4
MjI5ZDYwHhcNMjUxMTExMDgwMDU0WhcNMjUxMTEyMDgwMDU0WjAzMTEwLwYDVQQD
Eyg5M2NhMzRiZjU2MDQxMDNiZTlmZjEwNzJiODU4N2MyM2M0MWM0NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrL880SviBHtoE20msJfRyaIfBfA
Tr2cySLKILEtuWn9LeTPELwzgDJXhGfXL5X45ykt/paX2JIwUejg2kDYDsmZ4gEj
mbnxIwkGPz7bytmDhFFCmJddFr89+8VUfpFoYNXbOy/T5i3vD7cGEqpJ4RpuWf+X
7FkF5PyyUkwfZnibq0IGMUqbDpLvzEEgBZokW2OEE4ufHN4xxDfy+twSB1nJF2Jw
vW8e4jzNTMqi4PlHZGY/KjIz6wyNumduiOUwRri6+zENycPSFg7Cma7a3zgTLrZx
nFkIQjLE6iy/Rmgu4+3fjOY1VVHF43YYuAcrt499ZTYcdIxEymTmF6cOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPKNL9WBBA76f8QcrhYfCPEHEVYMB8GA1UdIwQY
MBaAFB78q03t7War73zX7XJle8A6ginWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgt
OTFhNzdlYTA1ZGYxLzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgtOTFhNzdlYTA1ZGYx
LzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufMeA669
kHmOzTGj7yV/qqnLKkWdTS6nF++JTu5/r0DTuPS+MZqf0/AHGMcNKJJkg0MvYkWZ
RQqMgEken1W3R0wdPYhjLSF/gV05+T3W3mnzgRW5DIt7SwswAAEEHu0NwW6kcPpi
tnepu2buQVYJ5463jWBRYjLKIk5ZY3q+A1a0W8w3ijNrunwImeF+oE+9SwBSQLlQ
EyzD/yfJGMSDEsjrY7TxlQX29iipXBY8iLP3v7vaTIaV1wtqs5DBBm0v1NZlmCyf
MMIdICWT/ps5P+47gfD8546WAgpvtOEZfLGeiJdjPswywH1cQLh4AWvlbtCorjvy
C4S9KaXGTBWS6w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:43 2025 by rpki-client