Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: mUfkyaP/TOZvqKeLRsNnyKhDE3iXRD8G5Pg1elmVRWI=
Subject key identifier: 4D:85:7C:D9:14:51:54:E6:A0:6C:83:CC:E5:90:A9:32:93:43:D4:55
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 0198D515EBA2732BD294476B3F027BB21BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1335
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: U5dd2OGlSr41A5PlkjiMqfUAWrakQ+kVQJ2hK05x4Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:eb:a2:73:2b:d2:94:47:6b:3f:02:7b:b2:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=4d857cd9145154e6a06c83cce590a9329343d455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:a9:56:b8:e4:25:5d:0e:29:0e:4c:3d:4e:
4c:8b:89:5c:5d:6a:48:9e:42:49:55:d9:11:9b:f0:
64:a2:73:2b:2d:50:bc:0f:22:26:46:da:d8:2a:6d:
ea:60:12:26:19:b5:e8:b1:13:38:06:84:86:04:62:
ea:22:38:e6:85:e3:c2:bb:40:38:b9:17:92:a7:57:
10:d3:24:1c:77:9e:e8:34:0a:ca:77:2d:82:19:14:
50:b9:a6:af:ac:d4:33:c1:02:f5:b4:f1:97:65:2b:
6d:f9:2a:7d:df:54:4d:d8:b4:b6:96:11:5b:91:41:
f6:6a:e8:15:1c:9f:bf:83:30:05:61:0d:70:13:90:
ba:0d:25:6f:db:54:f8:ea:29:3c:aa:9b:9d:93:3d:
f3:65:40:ed:fb:29:79:26:ce:0e:72:0d:56:53:da:
ed:46:a9:ca:f4:f3:ad:8b:e6:53:f2:59:75:66:44:
73:72:3a:c0:b5:49:c4:17:48:a8:b8:ff:1f:02:41:
be:3e:c5:74:ec:b3:c1:e4:d9:63:22:04:e8:ec:04:
19:7c:fc:6a:4b:ca:b6:68:1c:c4:a7:12:ba:13:15:
43:4b:70:58:c2:bf:3e:d4:b3:ce:39:56:36:41:2a:
91:4f:9f:18:88:11:32:38:78:5e:64:50:90:c6:56:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:7C:D9:14:51:54:E6:A0:6C:83:CC:E5:90:A9:32:93:43:D4:55
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:49:af:20:c1:8e:27:3f:e0:a1:f7:2f:d1:7d:a5:df:b5:
5e:30:92:99:92:66:8c:82:0f:87:7d:b9:5e:c3:23:d3:e4:97:
86:36:7b:0c:ea:43:36:36:dd:02:9a:9b:5a:b6:57:00:8e:8c:
f9:76:88:7d:e9:db:ee:eb:32:6f:46:c4:d5:0e:46:26:ad:1c:
b8:28:10:93:3b:ae:1d:e4:58:5d:3c:33:a9:98:39:2e:4f:7a:
af:e2:6e:de:ee:ea:99:24:9f:61:50:a3:eb:37:2e:3d:ed:49:
a7:a9:49:33:3d:56:5d:18:01:d7:d1:fa:41:bf:8e:f8:3b:65:
84:dc:94:69:15:e8:ae:69:42:a7:4b:de:9b:0b:d0:c5:5b:8f:
a5:5f:ad:7b:6a:a9:d2:46:36:41:8d:7d:c1:26:b4:c2:8c:57:
41:32:67:07:08:6c:a0:ba:9e:08:9e:63:86:de:c8:ac:c6:e6:
df:62:94:75:18:04:d1:f7:e8:38:af:00:09:51:4b:17:48:40:
05:2c:d9:e7:0a:87:71:c9:0f:d0:83:a9:a3:f1:8a:07:07:0d:
b9:6d:73:f1:ff:ea:a9:df:d6:c1:e3:81:b9:a9:87:22:9e:3c:
02:c2:ba:b8:3f:18:02:2b:03:bc:7d:60:02:07:fc:bb:37:f5:
4a:f9:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:00 2025 by rpki-client