Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: cUJJRQCPn6D98pNLM0YF0Oc/1636oJ+cj0ttuzRBpAM=
Subject key identifier: 43:63:41:94:C8:FB:D7:DE:A1:F9:10:14:B7:38:9D:20:97:A9:52:BA
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 0199326D8F180937426503431342CE8080E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 022E
Signing time: Wed 10 Sep 2025 07:01:04 +0000
Manifest this update: Wed 10 Sep 2025 07:01:04 +0000
Manifest next update: Thu 11 Sep 2025 07:01:04 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: +ZODY7wP0lcAfSm0YTG3+sRmnWNgEEObSPVx36e60Rw=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:8f:18:09:37:42:65:03:43:13:42:ce:80:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Sep 10 07:01:04 2025 GMT
Not After : Sep 11 07:01:04 2025 GMT
Subject: CN=43634194c8fbd7dea1f91014b7389d2097a952ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:98:c8:42:17:8c:f6:40:fb:04:f4:4f:72:
7c:f9:e4:30:05:75:55:0b:b2:a2:3e:0e:0e:97:6a:
1d:87:17:11:d0:b8:53:14:fa:de:33:e3:8b:d1:c9:
d2:84:67:56:57:5c:35:43:2c:79:4f:f5:d3:47:a1:
3f:35:39:e7:54:7d:17:b9:74:27:44:5f:25:ba:fd:
c8:e8:d5:c8:26:ab:ca:fb:40:0a:b9:1b:32:ba:62:
48:62:7a:e9:74:64:be:47:15:4f:4b:9f:f4:42:30:
4f:a5:79:52:4e:72:d2:ab:fe:29:9a:51:4d:84:70:
f6:75:f3:dd:0f:47:64:a7:65:9f:62:cb:59:8d:62:
4c:c8:89:ee:38:23:0b:58:67:61:79:a0:2c:3c:28:
92:9e:79:19:a1:ee:53:05:29:b4:88:b2:43:d7:11:
92:e9:0b:e8:9b:01:71:13:e6:1f:94:a6:c7:cc:e1:
32:7b:aa:75:a4:e7:66:36:1f:39:31:4a:18:bc:d8:
6a:ef:aa:12:c6:c7:97:81:d6:54:f9:99:fb:63:99:
68:cc:76:e6:39:49:48:7a:f4:ac:d5:f9:ec:46:0f:
f4:a3:8a:c8:67:af:82:cf:8e:0c:4b:da:8b:24:b7:
35:fc:9c:a6:fb:d8:c9:b9:19:f1:8a:31:8d:bd:c5:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:41:94:C8:FB:D7:DE:A1:F9:10:14:B7:38:9D:20:97:A9:52:BA
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b2:b0:64:be:7d:4d:85:88:24:17:19:c3:3b:a1:48:fc:52:
e9:fb:7f:39:e3:8e:9d:01:ef:5e:bc:71:fc:8c:0f:b8:da:e2:
cf:a6:4b:d5:a6:38:bc:95:0b:95:5f:40:8b:54:50:0c:f9:14:
b3:34:c0:96:33:31:35:69:d5:c7:26:1e:12:74:47:c3:a6:27:
9a:9d:a3:60:d4:2b:69:7f:5a:d6:a4:9d:12:51:0f:2b:76:95:
f1:8c:d6:74:3c:15:f0:df:40:8f:8f:75:d8:8a:9d:0f:a9:4b:
70:44:79:56:8b:45:33:64:cc:cb:5b:ef:54:a6:4c:9b:e1:83:
81:e6:bd:6b:c9:b5:eb:44:32:c3:f2:ae:03:81:d5:a5:98:fb:
0d:d6:10:b0:f5:1a:0b:c9:7f:49:b7:9e:ee:5a:a6:58:9d:94:
50:ff:a2:cf:dd:c2:4d:37:e3:6d:9b:b2:23:5f:41:ec:72:ae:
ea:56:46:db:bc:df:71:96:ad:56:64:24:3c:da:14:06:67:c3:
1b:f9:6a:e7:93:07:4b:2f:66:2e:5b:32:27:37:3c:86:c9:ea:
97:2e:68:9f:f7:c6:c0:1d:40:6b:ed:8b:25:0f:ce:f5:82:c7:
cb:a2:80:7e:f8:22:d6:7d:58:28:3a:fc:41:41:f6:83:cb:f9:
d9:72:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:14:25 2025 by rpki-client