Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: f3ZzLfpiCFX79pcP/s3FKHuiRqQ/QST14KxnyOBJv70=
Subject key identifier: 83:06:0A:92:25:73:FB:72:C8:C2:30:4D:59:76:01:40:55:41:24:BD
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0197B70EB9A1001395E636D90766B9C274FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0803
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: rir2sMRCAEHBI9TcnNaN5080Tel+GAg3F2HCBfML8t8=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b9:a1:00:13:95:e6:36:d9:07:66:b9:c2:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=83060a922573fb72c8c2304d59760140554124bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:84:94:3d:c3:c8:a5:51:e8:f8:da:e7:f2:
85:36:83:2d:ed:a5:90:fe:98:98:bd:65:5f:f6:f9:
46:71:a4:89:9a:54:5b:a2:a6:79:21:85:ee:de:ed:
c1:c7:14:72:70:da:fa:f7:30:85:14:34:a0:32:a2:
54:3b:19:2b:1d:b7:d5:d7:c5:18:64:65:f0:31:39:
e7:b7:36:6b:81:f7:0e:10:d3:89:e4:f2:b7:ad:91:
e8:13:f4:85:ea:cb:29:79:79:9d:c2:ea:95:95:0c:
a4:27:91:7d:db:da:e6:4b:c0:cd:93:5a:6e:44:58:
ca:0e:37:2c:e5:ab:3f:54:70:8d:31:e7:b4:23:b6:
2c:fc:24:a7:ed:19:3c:87:18:ef:0e:c0:6d:33:0e:
6d:6c:2f:70:86:ca:52:10:e5:ec:4b:20:9b:e9:ad:
aa:b1:97:e0:db:f2:56:2b:a0:78:2d:4a:63:55:99:
4d:a8:cd:4c:d9:96:12:bb:28:c9:64:5d:94:5a:3a:
4a:de:dd:48:ea:69:73:d4:78:7f:06:71:a3:c4:60:
99:c7:76:50:83:57:b4:99:d7:0e:c0:16:c4:b9:e1:
95:de:d0:23:de:5f:e1:4b:23:70:ac:41:e3:f0:b0:
7d:9b:cf:f7:1f:a6:a9:7b:96:6f:ff:48:dc:33:f1:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:0A:92:25:73:FB:72:C8:C2:30:4D:59:76:01:40:55:41:24:BD
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:58:f6:6c:3b:bc:3a:19:e2:e1:c1:4c:3f:da:d9:e6:bd:d9:
b2:b2:2a:55:2e:4c:76:1c:12:ce:3e:8d:6c:e4:11:90:cf:da:
d7:59:f9:c2:85:fe:a1:8e:83:5c:bd:20:c1:73:5a:04:27:16:
8e:75:26:3a:b4:3c:88:28:c8:af:2d:02:fd:22:6a:f6:18:c4:
56:62:99:8d:d9:8a:37:47:cc:d5:a4:26:e8:dc:be:4b:74:13:
a2:a6:78:ff:78:5c:2f:34:3d:8c:40:91:fe:a3:36:68:5a:97:
73:b4:5e:96:00:05:50:00:61:e8:b7:10:b7:d4:eb:cf:93:27:
d2:2a:5d:31:d7:42:46:6d:36:00:5d:7b:80:40:a2:b0:94:d3:
2e:04:63:eb:5e:af:d4:8b:7c:c2:d5:cb:45:8d:c7:84:11:ac:
65:72:5d:af:66:41:75:3f:3c:3e:b2:e7:0d:b7:e6:5d:fb:3a:
cf:15:15:dd:d9:f1:c2:ca:49:b7:ac:a3:e8:57:90:52:45:3b:
21:35:98:ed:bf:4c:5f:69:bb:5f:e6:dd:ab:27:a4:15:ec:c0:
f8:21:de:99:d7:53:73:08:46:72:7c:55:29:a2:da:be:e8:8c:
77:57:2c:89:91:82:66:fa:7e:45:de:b3:9f:9c:10:31:0f:ba:
b8:84:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:26 2025 by rpki-client