Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
File: HYP6iaSSDrq2qBlvp9MwdEFArnU.mft (raw, json)
Hash identifier: rjaXmP26NJxS4SRLKBAuX7GJKbq+Dzg2MS61Ms+K4qo=
Subject key identifier: DD:42:00:0D:58:AA:F2:D5:AE:6A:61:40:7A:DF:B9:67:32:65:48:BE
Authority key identifier: 1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
Certificate issuer: /CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Certificate serial: 019A71135506DEC1E43C6F33C53D37345A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: 0Ox66VfhpkksOxsQKvgplGDbF6A.roa (hash: 2hQepAwHuEvKh7LX4V/wopW78ujoteaNGMyduaqzBZo=)
2: HYP6iaSSDrq2qBlvp9MwdEFArnU.crl (hash: BPOiR4Fd4IZwIhzXmfHR89uiOCHlULXgWXw54npozcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:55:06:de:c1:e4:3c:6f:33:c5:3d:37:34:5a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d83fa89a4920ebab6a8196fa7d330744140ae75
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=dd42000d58aaf2d5ae6a61407adfb967326548be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:e5:ab:c4:55:53:89:a2:13:f0:4a:89:eb:
f1:d4:5f:57:8e:ee:e7:ee:eb:b2:de:1e:19:41:60:
ac:3a:0d:52:6d:86:92:c2:93:db:0f:cb:41:66:2c:
f3:94:90:3c:f6:d8:16:e6:7e:0b:e8:6f:f8:5a:b2:
36:64:c6:a1:a3:2f:e3:5a:ce:2b:91:2c:ed:9d:2f:
01:f0:b1:1b:5c:f4:ee:52:e4:92:b3:27:17:17:29:
cc:45:47:5b:0b:6a:4c:af:c3:94:df:b7:7b:72:3f:
ce:b7:d5:ec:ca:4a:51:8d:88:fc:b6:e2:c8:ab:0f:
4a:79:e2:e1:99:21:5c:a8:c8:56:c5:8e:39:27:4e:
1b:6d:9c:ff:b7:43:d4:f4:5d:36:57:bf:1a:8e:e8:
7c:6f:a7:b0:6f:31:95:8a:99:ad:92:f7:42:ce:c9:
94:b0:7b:78:1b:22:93:be:19:57:c5:e9:b2:09:cb:
3c:75:71:2a:78:4c:50:bc:0d:eb:7a:1f:64:98:6c:
7e:8d:22:6d:f6:63:90:1b:10:43:38:57:f1:d3:0c:
fc:29:22:02:0e:42:77:90:b1:16:9b:2e:ad:bc:a3:
de:7e:60:15:7f:7e:ab:23:3c:48:96:cf:c7:4e:67:
57:dd:2e:03:6d:2a:bf:a5:0e:5b:48:4b:b8:a5:78:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:00:0D:58:AA:F2:D5:AE:6A:61:40:7A:DF:B9:67:32:65:48:BE
X509v3 Authority Key Identifier:
keyid:1D:83:FA:89:A4:92:0E:BA:B6:A8:19:6F:A7:D3:30:74:41:40:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYP6iaSSDrq2qBlvp9MwdEFArnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/066dbd-b447-4b59-8936-c3bc5c521bc5/1/HYP6iaSSDrq2qBlvp9MwdEFArnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ed:3a:bf:25:09:f3:3a:c0:99:81:76:9d:3c:06:15:76:cc:
81:c0:a0:5b:e4:a1:7c:80:1f:2a:0e:4b:0d:f5:30:4c:ae:3c:
50:67:b4:28:e3:60:28:ab:cf:80:86:58:43:28:64:5a:fe:02:
4e:82:c1:e4:16:7c:4a:54:49:19:aa:b2:a3:a1:94:5c:f6:ec:
5c:1b:43:b9:ca:50:81:27:6d:aa:a8:8a:2f:8b:af:75:61:e3:
ea:92:ca:40:62:4b:7c:9e:af:2b:8b:4f:4f:5c:c1:7d:59:de:
29:14:c0:22:18:b6:cd:70:86:b7:8c:e3:05:26:2e:a5:3f:c7:
50:32:4f:50:64:03:e6:03:b4:46:33:ae:ea:ae:10:fd:72:04:
d6:9e:e4:1e:88:f8:b6:9f:de:75:06:cb:7b:4b:44:83:55:ce:
5d:68:3d:ab:55:94:7e:82:36:97:0c:c8:2d:62:e2:70:e5:eb:
07:57:9b:cd:36:0a:7c:7d:b8:5a:9b:5c:ac:28:9e:f8:b6:9d:
04:87:96:61:9d:ad:2e:df:54:71:c9:1f:57:12:c0:38:ad:72:
ad:ff:55:52:cd:d3:8e:d3:d8:6b:50:49:fd:4e:43:bb:c2:a4:
d7:95:fd:d4:21:4e:a1:d3:50:32:fa:01:82:51:61:a8:ae:30:
cf:75:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:37 2025 by rpki-client