Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: iPdlRrAJI+AuUmKDhmnYW/wkfS90+nw0/iWv+KDEUWQ=
Subject key identifier: FB:FD:29:9A:7D:74:B4:B9:BB:34:E1:74:D5:5F:75:AA:95:31:D1:94
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 0197B6D7632B34F6D2EFD7334B9E55DEDE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0B83
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: fDKJsvwBNbrqRK39fiTfO4zMWmBM3foGleKMe1f15d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:2b:34:f6:d2:ef:d7:33:4b:9e:55:de:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=fbfd299a7d74b4b9bb34e174d55f75aa9531d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:c3:e7:4b:07:4c:54:b9:ae:d7:02:6d:7d:
07:ff:a5:34:91:19:1b:8d:28:37:2e:0c:4e:79:09:
34:c5:89:d8:7c:68:42:58:a9:85:29:1a:5b:78:49:
d3:c9:94:10:a1:93:bb:2c:36:07:87:07:8c:c6:54:
14:85:5c:7b:79:f5:d7:82:b7:2b:40:32:7f:59:98:
be:09:58:64:25:18:6b:78:16:87:8c:6a:06:ea:64:
2c:b0:d7:59:df:95:eb:1e:1a:45:a5:17:1d:b5:17:
02:54:3f:5c:59:16:60:b1:4c:9c:5a:47:53:d6:96:
9a:ec:c9:2c:51:3d:33:bb:f4:f0:35:d6:3f:60:6a:
1c:1f:fe:92:57:d8:76:c4:de:82:41:ed:ac:21:52:
9d:fd:1c:f4:e5:29:0a:38:c1:1b:ad:40:3e:f0:04:
ed:d2:f2:86:ab:43:04:28:34:e2:1b:7a:e8:28:9f:
1d:56:9e:45:0c:ab:ec:33:e8:c9:7c:2a:15:b1:94:
44:86:53:bf:0a:46:75:01:9a:2f:c7:cb:4f:0a:ce:
cb:70:01:3e:c6:66:6b:c7:f5:bb:7f:1f:c1:a8:ab:
4d:87:c0:6d:6b:94:99:d9:3d:2f:e8:50:44:4d:5d:
fa:87:52:0e:fa:eb:95:04:57:a1:27:dc:6d:1d:8f:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:29:9A:7D:74:B4:B9:BB:34:E1:74:D5:5F:75:AA:95:31:D1:94
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:f1:ec:c9:59:9f:41:d1:3e:b0:06:15:54:ef:68:08:f3:
15:27:8b:28:ed:fc:d3:45:6a:aa:c8:fc:cf:90:01:ae:71:d5:
89:00:3f:64:7d:d3:4a:2f:1c:55:b7:ba:fa:15:b2:9a:99:cf:
67:0b:71:40:a4:4d:b5:d4:12:ef:7d:a0:92:e8:4a:b4:de:4d:
79:96:89:7e:85:ba:7e:ed:d6:4d:14:df:5c:a0:34:b3:ea:52:
15:a5:6b:5b:b4:68:7c:68:ae:01:6b:ff:99:62:1b:53:40:ca:
40:db:d8:6e:12:b9:7d:3d:ff:4e:e7:3a:af:e9:76:a9:10:62:
c1:f2:e0:58:f1:9c:7e:5b:3e:02:10:1c:7a:50:fe:03:8f:58:
ce:a6:e0:d4:97:cd:a0:eb:58:73:a1:5d:a3:92:10:c2:6c:4f:
17:ae:39:2a:bb:93:59:35:ed:6b:64:b7:19:43:5e:96:39:62:
2d:54:d1:e1:29:8d:2c:cc:fa:d2:53:b8:6e:09:31:d6:47:9f:
8b:90:c3:79:a8:38:6e:1d:bd:b4:a4:0e:93:ae:ba:6a:69:88:
40:c0:e3:35:0d:df:f6:51:7d:36:23:12:0a:2a:7c:cb:48:4f:
f6:52:e6:86:95:cc:76:ee:15:e5:d4:a7:53:9b:73:4f:91:c8:
c3:16:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:19 2025 by rpki-client