Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: OIMci9HmfEew86V3GG1aHp3I7+A98JGIMW43ov3Tyjc=
Subject key identifier: 3F:9A:C1:61:3C:C9:D4:B6:5D:56:57:66:03:EA:AE:10:AB:8B:AD:2D
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019A1F88CFD3DDFAE616CF0D381102505A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0D23
Signing time: Sun 26 Oct 2025 08:00:51 +0000
Manifest this update: Sun 26 Oct 2025 08:00:51 +0000
Manifest next update: Mon 27 Oct 2025 08:00:51 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: la39PdWwm4cbvHVGwikwyhBVzm9E6g25PUgxHftKPgI=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:cf:d3:dd:fa:e6:16:cf:0d:38:11:02:50:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Oct 26 08:00:51 2025 GMT
Not After : Oct 27 08:00:51 2025 GMT
Subject: CN=3f9ac1613cc9d4b65d56576603eaae10ab8bad2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:29:d8:40:33:4f:68:c9:4b:4e:ab:d2:e5:
ea:d2:8d:67:c5:58:1f:5b:f2:df:d3:e6:37:57:12:
b5:9a:ee:1c:8d:cd:c7:4f:aa:9f:9d:32:67:6e:69:
59:54:13:ae:e2:26:83:bb:9f:1b:62:a5:4d:43:08:
59:28:72:a4:3e:5e:37:4f:db:4e:72:d3:42:e3:d9:
4e:4e:64:f8:91:96:63:ee:b3:4e:91:ab:bc:73:00:
51:37:22:04:cd:d6:fc:63:ee:26:eb:13:84:18:03:
d8:32:bb:98:07:2f:2e:81:d8:dc:2e:56:65:9d:aa:
80:fd:1d:36:92:13:75:19:d3:f6:69:b7:bb:6f:14:
92:64:27:19:07:ac:31:a5:48:3e:b3:ec:7e:0f:30:
79:ec:39:f4:bb:a3:82:1d:a3:80:c8:7e:74:ad:2a:
20:a1:21:75:cf:83:b0:19:6f:d9:80:e4:3f:47:b4:
fe:a9:1f:27:d6:a1:40:23:67:df:fd:6b:14:88:7d:
3b:e5:30:92:e5:70:48:4a:81:1e:45:70:ee:a8:18:
7f:20:b9:f2:a1:73:0a:7b:f1:79:93:9e:aa:a9:ed:
5b:4b:13:8c:b7:4f:a8:02:1b:cf:38:ec:18:0b:3c:
b7:3f:04:0f:9c:fc:45:cd:ca:17:51:12:ae:04:39:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:C1:61:3C:C9:D4:B6:5D:56:57:66:03:EA:AE:10:AB:8B:AD:2D
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:e4:6c:fa:95:2e:9b:5d:4b:2b:77:42:63:4e:24:f0:2c:
c8:24:c8:d7:1e:14:79:ea:26:1b:91:66:2e:bc:4b:03:1c:6f:
21:bc:be:b3:57:95:e2:d1:47:38:46:81:1d:c1:f6:42:8f:03:
ef:26:73:ac:0c:e1:e3:5b:24:52:5c:66:80:67:68:fe:75:bd:
26:05:b1:2b:0f:9d:5d:b9:e5:46:e2:04:ad:1e:38:a0:dc:07:
14:9a:00:7b:73:0e:15:ff:78:be:52:d2:d8:bb:63:67:87:2b:
89:ca:35:6f:42:e7:16:14:75:e3:2e:a9:3d:1e:16:7e:8a:d2:
8e:4d:2f:2c:63:df:25:f8:be:ac:1d:8a:ae:f6:df:db:60:fb:
72:cf:08:61:df:73:0d:eb:75:c7:42:40:c1:11:2d:4a:5a:e6:
7b:1f:b3:c3:92:2c:46:1e:02:00:44:26:0c:eb:6e:53:c3:8e:
04:2f:7e:d8:ea:bb:e7:41:8b:e2:84:5d:1f:70:9e:a1:4f:76:
19:a8:e5:a2:8b:7b:38:17:f0:ce:3f:24:b9:61:eb:93:88:b9:
05:ae:8d:e4:6e:be:03:24:8c:fb:cd:cd:fa:60:af:10:9b:8f:
2a:10:6f:b7:c3:69:6d:b4:c7:fd:e1:b0:74:02:04:a9:3b:54:
e8:13:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:54:21 2025 by rpki-client