Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: GFSmJ5foqLB8RdpdPHp1CzDP+cFbtb9c39Sryl2UZNk=
Subject key identifier: 2E:BB:00:B8:2A:84:D4:58:11:49:C5:76:8A:01:DB:A5:DE:85:71:8C
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 0197B745B4B4FA87A75277F9F99A2F9450EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 12A1
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: aDNdGvzoWPFow37Nf2wgYSu6cITqvUFZvDSO3oJ+1Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b4:b4:fa:87:a7:52:77:f9:f9:9a:2f:94:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=2ebb00b82a84d4581149c5768a01dba5de85718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:cd:87:fe:29:18:39:cd:29:34:33:0c:28:
a3:76:2d:d6:97:cd:47:a3:62:37:63:60:6e:c5:47:
67:d9:e6:1b:67:d6:51:8f:6f:6c:88:69:9c:74:6c:
c0:61:8c:8c:eb:d4:eb:73:86:b0:a1:70:aa:86:74:
86:cd:d7:43:1b:81:79:44:d7:a9:d1:f3:78:52:7e:
c9:09:51:31:dd:37:94:d2:51:cd:11:70:c6:03:8e:
03:5e:35:66:90:8b:e4:3a:2d:f8:1b:ae:5e:08:26:
db:5a:e7:2b:ee:02:73:a4:70:c5:b2:fa:0b:44:2b:
55:d3:8a:0a:aa:f1:d9:35:0c:a3:e9:43:4b:42:1b:
7a:b3:c6:96:a9:68:ca:d1:82:e9:b0:a1:7c:1b:11:
6c:6d:b4:6c:52:5c:c0:4d:c5:ee:a4:84:f2:5e:d6:
1a:76:d6:a9:0e:22:86:23:7a:a3:de:41:6b:d3:5e:
0c:d5:cd:d0:26:2b:bd:f4:d4:57:ee:9a:35:86:78:
80:85:df:58:d4:26:6a:7a:1a:59:e5:c5:61:a5:25:
4d:f1:dd:2a:ef:ae:2d:71:09:e1:85:2b:00:c0:9d:
f2:b6:78:cd:a3:49:9d:ab:62:f1:63:b4:95:dd:39:
2a:9f:dd:d9:d7:43:21:f5:a2:33:b0:6c:80:b4:05:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BB:00:B8:2A:84:D4:58:11:49:C5:76:8A:01:DB:A5:DE:85:71:8C
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:92:d8:d2:ea:50:9d:2f:d0:5d:2e:4d:97:71:6b:f7:45:
02:1b:78:34:60:83:dc:b2:fb:35:42:07:99:c1:02:b7:41:92:
0f:4f:46:17:04:34:6f:13:cc:11:6b:26:7f:7a:c6:e0:4d:96:
63:17:13:d6:46:c3:7e:de:fb:75:f9:94:97:4e:e7:4f:94:08:
74:a2:fb:ae:40:48:21:51:72:a6:6f:9f:20:33:47:dc:89:d5:
91:3d:3a:9c:3a:7b:44:d1:1d:f1:b7:aa:93:5d:88:49:a0:34:
ef:23:dd:a5:3c:47:2d:32:b5:a8:fd:f1:f3:0b:da:29:9e:a7:
79:2b:c2:54:e6:21:75:6d:8b:22:64:27:b1:82:9c:e1:74:22:
10:77:ef:36:a7:3d:33:97:31:0a:6c:bb:c0:b4:dc:a2:23:d3:
c9:0b:1d:f0:6d:b6:3b:63:ff:65:95:16:a7:03:fc:14:6b:76:
31:80:e0:e3:9f:ee:53:e6:3f:79:4b:b3:b2:08:0b:df:8d:66:
ec:cd:d2:28:46:9e:f1:a6:10:84:a3:78:9c:fa:17:d5:c1:cc:
1a:8c:d3:1d:db:00:9f:8f:ce:d0:85:1a:52:31:9d:47:84:c8:
74:16:a0:d8:cd:b9:91:71:d4:01:f6:13:60:e1:56:7c:f1:7f:
df:9f:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:28 2025 by rpki-client