Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: WQhw6KYKKONkeE//FLy+Cfh1iAu8WB3dTpHLd935bB0=
Subject key identifier: BC:82:F5:95:96:F3:CB:60:09:AA:29:26:09:B4:E3:E4:3E:28:3D:BA
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0198D4E055B19FA39935C65A1A380BD2F5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0897
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: IuDrsehrFtoR8HJ8FE5NX7dSkU0nckPhrQaxZ8IGBSI=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:55:b1:9f:a3:99:35:c6:5a:1a:38:0b:d2:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=bc82f59596f3cb6009aa292609b4e3e43e283dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:ea:ff:77:df:b2:a2:bc:96:09:d3:d7:73:
c6:ec:b4:10:e3:f0:e6:2c:79:6a:e9:a8:03:ee:72:
03:76:22:6c:fb:6e:1f:71:cb:db:06:c6:da:9a:9a:
9e:3b:7b:37:d9:90:a6:c4:b3:77:3c:fa:1f:fb:3d:
b7:ed:68:35:d2:ff:a0:a1:6a:ae:d1:5d:07:29:fa:
59:f8:cb:6a:c0:c4:95:51:1c:b9:51:49:ed:a7:cb:
6d:9d:a7:34:58:c9:11:e7:39:96:54:99:6b:7a:fd:
8e:8a:4d:0f:d1:b1:ee:84:64:4b:39:86:59:a7:53:
88:ef:71:7e:58:06:16:80:aa:17:5f:21:7c:52:f6:
7d:0b:9c:13:cd:45:9d:cb:56:08:f0:e2:76:82:ff:
9e:67:83:2a:94:35:78:1d:09:83:7f:07:51:e7:f4:
46:63:6b:7b:ec:9e:e5:84:0b:31:63:b0:08:a9:26:
2f:43:2f:96:fa:9d:e9:c1:e5:c3:8f:64:2a:3e:ec:
78:67:08:89:88:0f:19:f2:c0:3f:51:c6:61:bb:e1:
32:4e:ea:96:5b:40:0f:ea:f7:b1:c6:ac:ec:64:38:
f9:b8:90:71:bc:9b:ea:1f:20:d9:00:53:db:5a:98:
05:17:ac:60:37:dc:36:d1:5a:1b:70:fd:55:07:66:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:F5:95:96:F3:CB:60:09:AA:29:26:09:B4:E3:E4:3E:28:3D:BA
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f2:9c:60:0b:dd:e0:dd:0b:bb:25:56:b9:86:43:09:0f:74:
cc:7d:88:cd:17:24:fb:93:4c:cd:76:09:0b:fe:7e:52:1f:4b:
32:8d:d1:7d:ce:a3:a4:b5:91:73:5e:b5:00:58:5f:ce:aa:63:
f3:ca:b0:a5:d7:f6:a5:aa:1c:49:22:cc:ee:f9:22:23:d9:12:
27:34:03:b5:15:a9:d4:65:f5:25:ef:0b:d4:42:b8:b9:10:97:
c3:5f:e3:b8:41:f7:62:76:1c:1b:b3:2a:78:a7:5b:9b:ed:34:
30:c0:62:04:29:67:0c:29:31:c2:ae:0a:7e:eb:e0:78:ac:45:
35:1c:52:2a:59:63:ee:f7:32:62:0d:42:a6:d8:41:b4:4a:d9:
81:25:e7:fe:d0:94:c0:e5:3c:9a:38:e8:91:cb:ef:b6:be:db:
af:56:76:9d:41:45:37:cd:7b:4d:58:9b:63:eb:e3:33:2c:e1:
2f:40:90:9e:cf:45:b4:0d:8e:d7:91:96:36:41:02:9d:e1:be:
44:ee:95:2c:f8:66:9a:73:49:ec:dc:ae:f7:9c:d4:fc:be:d2:
47:ef:bc:56:1d:11:f1:87:e0:6b:3d:ae:81:b3:c6:4d:10:92:
4d:b9:e5:81:b2:a9:b8:ba:1b:99:7f:ef:d6:af:b5:12:e3:e5:
f2:f1:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:40 2025 by rpki-client