Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: C1KxXP+MlOBPjnkCrHOlhgk3qyFu4Itl354ttorS9LA=
Subject key identifier: A5:4D:EF:2E:EB:B3:E3:FD:0C:DC:5E:C6:C8:D2:1A:B2:0E:65:97:4D
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 0198D65FE41BC3100BAF07207C705FDC6194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: AOOWSVev7Gb+Iz6w9QBRBnLSlnxE7GTQzJmO4bY6TC0=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e4:1b:c3:10:0b:af:07:20:7c:70:5f:dc:61:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=a54def2eebb3e3fd0cdc5ec6c8d21ab20e65974d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:e6:68:42:8a:39:e5:e5:99:4f:8e:73:2a:
3b:24:fb:a9:74:40:c2:60:2f:d6:52:6f:e1:28:e7:
9a:6d:b4:51:86:48:1a:de:02:d3:1a:01:53:a0:63:
1e:78:2d:0e:d9:8c:aa:40:a1:c7:74:38:c4:e0:fa:
83:14:45:59:e8:07:5d:9c:c7:cc:a7:c0:a1:77:e7:
a3:9d:87:38:14:d4:41:fe:0b:2e:f7:a0:80:e2:b3:
0c:3d:38:dc:59:f2:34:e6:9e:61:ff:7a:3e:1d:39:
f2:27:16:e6:f6:16:71:51:01:6a:a0:c9:76:89:71:
60:fc:7e:8f:15:57:bf:69:87:35:63:5d:7a:4a:84:
96:64:32:83:14:2e:3a:e7:8f:42:b0:d4:16:7e:8e:
6d:33:8a:bf:e6:c0:18:03:3e:22:d2:f4:e8:7e:de:
07:6d:00:f4:90:db:de:f3:73:eb:ba:72:cd:f5:7b:
24:4c:2b:1f:bf:c5:4c:1d:1b:73:d4:86:05:81:88:
5d:fd:29:d4:80:2b:a6:22:bf:17:60:0d:80:b9:13:
36:fa:e4:cd:85:6d:83:38:4d:36:a5:b7:54:02:1b:
e7:fe:93:c9:40:11:69:96:ab:ec:a7:0a:55:0e:cc:
7f:c7:ec:e7:a0:b1:4c:6c:5f:6c:86:9e:54:7b:0f:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4D:EF:2E:EB:B3:E3:FD:0C:DC:5E:C6:C8:D2:1A:B2:0E:65:97:4D
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:5c:29:65:aa:04:fb:5b:b3:50:24:34:89:3f:a5:84:f1:
04:57:6a:a9:e9:4e:97:b6:df:b7:7d:c1:e2:68:71:3f:3f:bc:
b8:35:dd:5b:3d:23:60:5c:7c:89:cb:36:36:c0:9b:be:51:e3:
6d:21:e4:2c:98:ad:2f:ea:ac:b5:cc:df:33:8a:26:b8:3a:73:
aa:f8:57:37:16:82:e7:be:9d:0e:4e:c7:2e:b2:23:94:61:c2:
ef:a3:99:4d:15:ce:33:19:cd:1a:48:90:4b:e9:5e:86:6d:35:
13:7a:a0:04:82:94:78:68:c9:33:20:1d:9c:6d:be:56:76:0a:
63:b1:bc:86:0d:6c:ad:9d:94:e4:af:4f:ce:55:62:41:4e:d7:
f9:10:d3:95:3c:f6:7c:36:9e:d2:6d:96:99:c6:8c:ad:af:fe:
b6:75:5c:74:33:c0:5a:70:5f:04:bf:9d:83:69:1b:2c:38:2b:
bb:e9:60:9e:ee:59:f2:55:06:d3:76:3c:d6:2e:55:cc:2a:d1:
2b:07:c4:5e:84:83:0f:cd:9b:af:cc:18:32:e9:a7:ac:71:ad:
05:ae:af:f4:b2:9a:43:40:1e:51:b2:25:cb:b0:cf:f6:8d:43:
9c:a8:59:36:f6:a2:c1:8a:a2:dc:a5:6e:af:cd:58:84:34:01:
b8:75:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:43 2025 by rpki-client