Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: ybn20A5q5DvLko49OB48f6AnjN7OWWa3ME8yLn7v14k=
Subject key identifier: 42:3A:C4:1B:85:A2:5E:5A:BA:69:DD:00:97:8D:96:6F:15:84:BD:1E
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 019921E753C6ADFE09A8A55571C133CC0D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 06DA
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: MsvlQMurIWWHNOdOnLqq9WLvBgceARltgyFQ64OzJ60=)
2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:53:c6:ad:fe:09:a8:a5:55:71:c1:33:cc:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=423ac41b85a25e5aba69dd00978d966f1584bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:57:1c:ea:be:e0:6b:ff:44:6a:fd:e8:54:
4a:93:33:78:63:ac:bc:6b:c1:bf:50:2a:10:40:f6:
9c:82:81:67:e5:b7:a8:d6:db:81:0f:a6:2e:e3:d0:
a2:89:48:2c:7d:01:ec:f9:54:7f:b4:50:96:de:63:
6b:9d:bf:26:cc:9c:26:89:65:b9:9d:59:e3:7b:dd:
e0:8d:af:98:6e:4e:28:2e:fc:50:35:d2:12:ca:71:
bd:8b:2d:a8:b3:b2:ea:5f:6c:a6:6e:22:9e:8c:4e:
37:d7:49:3e:a1:14:c4:90:8d:92:a2:2e:45:bc:25:
64:62:08:ec:b6:39:2f:7a:88:fe:e2:3e:bb:72:4d:
26:a7:9e:99:49:4d:86:5d:74:61:05:f7:c3:60:e2:
2b:d0:22:1e:4e:3b:dd:4d:f7:70:e6:ae:37:82:76:
fb:1c:ce:6b:7e:f3:70:46:ff:96:f8:f0:ce:f8:9e:
7d:49:c9:85:0c:3d:2a:16:b5:d2:45:4b:aa:1a:32:
ef:ce:05:f1:b6:fd:2b:68:5e:ff:21:a1:c3:8f:3f:
3e:b0:e6:1e:da:7c:43:4a:62:2d:6c:b3:98:b7:38:
7d:37:3f:1f:00:21:e0:b5:09:5d:a6:f5:87:42:94:
1f:f6:49:2e:96:1c:a4:57:96:2e:ef:85:f3:4d:cb:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:C4:1B:85:A2:5E:5A:BA:69:DD:00:97:8D:96:6F:15:84:BD:1E
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:bd:ab:66:5a:53:07:69:ed:21:1d:df:a6:5b:4d:f1:6a:
1e:0c:ad:1b:d4:cc:15:60:ad:48:03:44:07:c2:00:10:bd:c0:
3a:1d:ac:48:17:f7:17:76:2f:a1:31:f8:1c:8d:ab:5f:52:9e:
0a:ce:81:10:00:4a:7e:98:bb:b1:5f:74:e5:b4:dd:49:59:f9:
20:dc:e4:c2:cf:b1:7b:67:b0:74:48:2b:5f:ed:5a:e4:34:ed:
26:6e:04:ba:36:d1:44:da:bf:61:8d:6d:e0:f0:57:75:5f:79:
42:66:e8:b7:55:ee:51:e7:a1:38:b9:bf:04:4b:0f:02:c9:f3:
f6:ba:1a:be:ff:52:1a:89:ef:8a:00:fe:a8:37:60:07:fc:9d:
1c:c5:54:62:6e:2a:4a:f8:9a:26:88:a2:69:b8:37:5d:e0:0b:
e6:11:aa:6d:f5:61:2f:c4:cd:47:f6:21:3e:93:15:45:a7:de:
02:e7:d2:c5:e3:3c:48:31:83:56:3d:54:9f:f8:fb:83:5b:84:
4b:80:f5:0a:cd:66:bd:cd:b5:4d:53:c1:b6:56:3f:05:23:fc:
b8:21:18:08:69:96:d9:2a:1e:aa:ff:15:c9:eb:dc:af:f2:e8:
c2:96:fd:91:98:6f:93:4e:bf:d9:71:90:ba:ca:18:3b:e4:14:
ed:48:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:45 2025 by rpki-client