Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: LDFaouKhVetn1w90xUpnIsdRh0nw7gBiybE/ebz/prU=
Subject key identifier: C8:02:05:B6:90:54:7D:32:52:33:34:47:B6:75:C2:93:47:3A:2C:02
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 0197C237ED3C8E85FC4F7E4D3364017E9DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 0486
Signing time: Mon 30 Jun 2025 19:02:14 +0000
Manifest this update: Mon 30 Jun 2025 19:02:14 +0000
Manifest next update: Tue 01 Jul 2025 19:02:14 +0000
Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: VTl4LNsDVCyqzgmkDFjPximPFxGQ+5mjSjs61ICPV50=)
2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:ed:3c:8e:85:fc:4f:7e:4d:33:64:01:7e:9d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Jun 30 19:02:14 2025 GMT
Not After : Jul 1 19:02:14 2025 GMT
Subject: CN=c80205b690547d3252333447b675c293473a2c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:ee:15:03:30:e9:93:d8:aa:11:13:fc:1d:
74:72:eb:7b:83:23:c9:43:65:1f:fe:e1:6e:6a:c1:
94:0c:1b:b1:fa:29:16:01:04:c5:58:98:49:5f:13:
2d:51:23:b5:0c:41:8d:5e:e2:89:05:22:50:4c:cc:
ef:fb:98:07:9d:48:64:3f:66:38:fa:e5:24:6e:66:
2d:84:2a:95:31:74:77:82:15:ff:17:64:e2:b0:6f:
64:b2:9a:1a:a7:d6:ca:80:68:70:75:40:3a:e6:b2:
ef:69:e9:41:46:a0:07:17:c9:f3:f6:ca:53:c7:7b:
83:77:4c:0d:6f:d0:20:4f:59:89:0a:44:54:f1:af:
b9:b2:2e:54:cb:0c:13:da:fb:49:f2:2e:94:f4:40:
4b:c1:3d:cb:8e:36:41:11:f2:61:3f:81:f3:7a:4f:
ae:c0:ab:18:c4:8f:41:8e:18:cd:d8:ad:c1:37:7f:
60:3d:17:c8:bb:eb:2d:33:cc:c5:01:6e:bd:3b:fb:
06:4a:f4:7c:37:f6:d4:04:f2:5f:ae:c1:53:f1:31:
ec:b5:f0:28:ce:46:88:e2:97:e7:36:64:b9:c3:25:
53:d1:8d:63:a8:01:65:fc:66:49:6c:b4:4e:e3:e1:
4d:d1:5b:f4:b4:99:7d:1d:7d:f8:5f:2e:5a:f6:cf:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:05:B6:90:54:7D:32:52:33:34:47:B6:75:C2:93:47:3A:2C:02
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:da:0f:c0:8e:2c:e2:c6:17:cb:8b:e7:13:c8:bf:90:6c:28:
3b:3d:6b:ee:84:c0:fb:b6:07:c2:4b:ed:98:62:13:cd:3c:e8:
0d:fc:b3:41:5f:e2:ef:38:2c:08:12:06:26:39:10:44:0d:4d:
62:75:c4:f4:de:23:65:4b:df:7f:da:6f:28:7f:7b:6c:ba:8f:
bf:e2:9b:2b:49:36:70:e6:f9:3d:c7:b9:ae:2f:c6:b8:e3:84:
0e:de:d7:d2:f2:27:13:54:e9:85:4b:c4:50:97:84:b6:7d:ee:
5c:0d:0e:a8:a6:b6:b1:6e:93:3a:70:37:80:a2:e3:46:39:0c:
0a:2f:d5:a0:b3:e0:a4:a1:07:73:84:59:65:f6:70:bc:15:cb:
b0:0f:9a:df:57:9f:42:ca:74:7f:a4:f8:95:6c:6b:0a:21:7d:
2a:6a:ef:ee:33:5f:f6:fc:c4:9d:59:2d:77:3b:b4:73:74:79:
ab:5c:b4:ca:89:9e:e2:83:66:2a:a9:eb:aa:1f:35:99:cd:28:
a6:9b:4a:34:35:78:88:a4:7f:94:86:01:56:ac:40:81:a0:ef:
80:89:2f:10:1b:30:4f:13:4d:7c:1c:5c:e7:f7:a4:97:17:58:
f4:f6:a1:3f:59:fa:27:ea:3b:5d:22:11:21:83:3f:97:e9:3b:
bf:28:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:24:37 2025 by rpki-client