Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: aOdaldyoh7HTTVDry0AEGCvaYUDtQrejOHa3HP06lMc=
Subject key identifier: DC:D3:A6:3B:17:C2:B5:53:4D:02:9D:01:1D:B0:49:E8:31:8D:30:B5
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 019A71134431800ACE0E8FC51FFF56633435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 02D3
Signing time: Tue 11 Nov 2025 04:01:19 +0000
Manifest this update: Tue 11 Nov 2025 04:01:19 +0000
Manifest next update: Wed 12 Nov 2025 04:01:19 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: GRJZpJh2i4/N+9EdJwb2oe4bv4shlc8rVGvMpyZaZ4Q=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:44:31:80:0a:ce:0e:8f:c5:1f:ff:56:63:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Nov 11 04:01:19 2025 GMT
Not After : Nov 12 04:01:19 2025 GMT
Subject: CN=dcd3a63b17c2b5534d029d011db049e8318d30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:25:b3:57:5e:3e:0d:49:6d:77:b8:36:1b:
dd:02:f6:79:6e:46:5d:b8:7e:72:6b:be:a2:03:d6:
ca:d9:7b:f6:5f:ce:76:f9:ed:66:fa:2e:1e:ca:a8:
77:d7:d2:6b:2e:96:bb:58:ec:60:bb:d1:af:56:02:
6d:f2:4d:b8:f5:8c:70:a1:df:a0:6c:34:89:6c:b1:
31:a4:d0:11:87:6a:65:8b:b0:52:4b:33:d1:bb:b6:
03:24:13:fb:88:83:db:db:e1:c6:5f:50:91:ba:96:
ae:bb:e4:7b:11:c7:0a:dd:a0:2d:ca:ae:12:b7:21:
87:63:4c:41:f6:7a:49:93:b7:14:48:e8:6a:1d:ae:
8f:e3:40:38:32:8b:06:67:e4:21:8f:58:37:6d:d1:
ac:19:b1:83:53:bb:17:9f:9e:75:a8:0e:85:66:02:
4c:ff:5e:3c:f4:54:e9:55:ba:11:e1:1b:d4:d3:57:
ea:4b:3d:82:a9:69:b7:fb:16:7d:c5:2b:89:b7:e7:
7c:e9:5e:93:ed:ea:90:85:83:d4:95:70:81:53:c9:
bb:e9:85:5a:76:48:64:24:87:fd:9f:75:df:10:a1:
09:85:7d:b3:bf:f1:6b:c3:87:db:3d:dc:85:01:81:
46:02:07:b6:98:8e:ad:1f:4a:9e:b4:d3:cb:ce:99:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D3:A6:3B:17:C2:B5:53:4D:02:9D:01:1D:B0:49:E8:31:8D:30:B5
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:d1:69:f5:ac:bb:a4:4b:1f:ca:e3:37:2c:1d:85:ba:d3:
a5:c7:75:97:78:e7:4d:b6:91:6f:5c:af:c2:33:e8:f4:28:f5:
22:41:79:e5:a2:1d:b3:d2:e0:c8:5a:50:f0:17:f7:8e:aa:8c:
7a:8d:21:f3:55:83:80:4d:1a:d1:b6:80:32:29:10:8c:54:81:
43:31:be:64:93:de:3a:51:0b:61:17:bf:da:86:bb:a4:e3:32:
1f:aa:85:3c:21:eb:48:e4:5a:a4:4a:af:d3:0d:02:6e:b2:6d:
ac:aa:71:04:42:89:11:33:0b:a0:aa:d7:87:18:a6:7a:e8:06:
e8:c5:b8:82:43:88:eb:e1:8a:7a:15:1a:a1:b9:b3:3b:7e:d0:
60:52:f9:99:73:7c:27:9f:2e:d5:b9:dd:53:ce:fe:07:21:82:
e9:65:15:78:1d:c7:43:73:7f:60:21:a2:dd:ad:f8:1f:56:32:
21:99:2c:b4:e0:11:f2:b2:39:ee:38:a1:38:a0:43:99:9b:6d:
e1:79:8a:9d:1f:fa:21:fa:b2:68:c3:6f:e9:1a:45:b5:f2:ef:
cb:19:6a:31:94:70:a1:2a:ec:93:28:33:5a:b9:b5:ff:0f:bc:
df:c0:a3:23:8f:4e:86:39:fb:57:34:a1:89:f8:c9:06:be:a0:
53:7f:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:06 2025 by rpki-client