Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: /ZR28HgWQhXXZXiO8hplkM0dUK69Ia7GGTpBcYuozYI=
Subject key identifier: F8:D8:5D:6E:EE:16:87:8D:65:76:6D:7D:8B:24:6A:48:EC:70:59:A7
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 0197B77C88D14D820FCD4F3B80E51C796E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: NMB9r8u5N9X5jX5GcJsbBZFZpF0cw96CZtFaq5wFWxI=)
2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:88:d1:4d:82:0f:cd:4f:3b:80:e5:1c:79:6e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=f8d85d6eee16878d65766d7d8b246a48ec7059a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:f0:3c:9b:9a:58:f0:2a:ca:ad:d3:a9:33:
c4:e1:99:1d:86:6e:10:f7:35:a1:e9:0b:9b:c4:f6:
c4:a5:38:a2:4b:e9:9c:54:a7:7f:86:42:ba:f6:07:
60:f4:91:c7:3c:10:25:c0:72:1a:fe:71:4b:1b:a3:
e1:8f:01:d5:26:74:15:a8:7e:25:bc:2d:ae:45:ea:
19:56:86:be:f0:d5:5e:72:9f:f8:ea:78:24:50:34:
61:aa:07:54:e7:bd:7b:c4:f8:ce:b1:8a:b6:e8:d3:
e6:ba:06:64:0d:11:35:f1:06:57:32:8f:b1:0c:66:
de:57:49:2b:dd:22:c3:71:d7:a0:f5:fa:77:99:9c:
3d:f8:9f:39:b4:b2:d8:3d:ba:41:d8:6c:25:4e:7c:
19:e1:1d:45:30:3b:9e:94:7c:7d:39:d7:5d:16:44:
47:95:2e:4e:b7:d4:c9:e7:91:1c:8b:f7:97:00:37:
1f:70:e8:6b:47:6c:95:6b:de:77:44:2f:f1:c0:86:
3d:16:8c:68:b8:57:fb:32:59:6e:b0:89:9c:36:d0:
ec:e5:b0:ec:0c:ac:ba:7e:02:65:87:c7:7e:3c:8b:
ae:7b:4e:53:21:a7:eb:59:48:d2:f2:d3:8c:08:d1:
61:ed:af:10:be:62:f3:80:c3:3a:f4:94:ce:cf:3b:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:5D:6E:EE:16:87:8D:65:76:6D:7D:8B:24:6A:48:EC:70:59:A7
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a1:3f:ca:9b:00:55:3b:28:86:ca:97:2f:03:2b:54:d8:96:
d6:a5:4f:54:70:96:21:98:f7:4a:35:31:be:ab:0e:27:0a:00:
b5:f6:5f:9a:b0:8b:20:78:9e:13:77:02:17:52:b9:3d:4b:4c:
66:aa:1c:3f:58:78:66:eb:05:ed:d0:10:2e:c9:90:7a:28:a1:
48:6f:09:36:ab:f9:e5:c9:27:03:2b:fc:57:cf:48:83:d0:42:
7e:29:f6:a7:89:f7:e1:6f:82:f9:5f:3f:e3:ef:ce:3e:9d:d5:
24:de:2d:99:e5:27:b4:ef:0f:0b:98:aa:0f:c9:6a:ab:78:0b:
99:61:77:7a:97:ab:ef:69:87:f1:44:62:b3:a9:83:9b:89:c3:
39:23:11:e1:28:13:56:d1:e8:c2:8d:82:7a:79:7d:0d:3a:07:
1c:2e:75:f0:61:f3:69:5e:97:7f:d9:2b:1b:c9:e6:85:cd:81:
ef:20:4e:70:3b:79:a4:f9:48:df:58:ea:a7:1d:cc:d8:d2:04:
65:79:a8:7c:fc:69:77:b0:09:c3:9f:c1:2d:fa:21:bb:bc:d2:
21:1b:ff:6e:97:d2:59:05:a1:cc:e1:82:a8:89:bd:07:70:e4:
10:4c:8e:70:56:bf:40:6c:de:67:f6:6d:d1:d8:8b:83:73:9f:
c2:57:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:20 2025 by rpki-client