Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: KvJ1FeSw8/hkAtRusPue52vK5qqWOO+Oww3/zaFJk7Q=
Subject key identifier: 03:80:54:C3:B4:18:92:F6:6A:F1:F9:D0:F8:F9:F6:8C:A2:6D:B6:89
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0197BA0F8D9408B9894E0E72FE65616AC2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 12F8
Signing time: Sun 29 Jun 2025 05:01:10 +0000
Manifest this update: Sun 29 Jun 2025 05:01:10 +0000
Manifest next update: Mon 30 Jun 2025 05:01:10 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: Fv3RoJe3IuHSPHiMO4Z6xMYZvJNgof9erfIaLzIbczA=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:8d:94:08:b9:89:4e:0e:72:fe:65:61:6a:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jun 29 05:01:10 2025 GMT
Not After : Jun 30 05:01:10 2025 GMT
Subject: CN=038054c3b41892f66af1f9d0f8f9f68ca26db689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:5b:24:d7:7c:ea:50:44:b8:0a:ad:2b:81:
9c:ff:e0:4b:e7:55:04:e5:46:84:0c:e6:12:79:3f:
27:73:37:f6:3a:14:07:d5:b4:ce:0a:ef:20:c8:8d:
b7:dc:7d:18:25:08:6d:4e:ab:5b:ce:4b:d2:0d:7a:
bc:fc:ce:9e:3a:b3:57:df:42:e8:1a:87:81:b0:d0:
17:47:12:6c:c0:07:27:b5:9a:b5:cf:c9:99:f0:bb:
55:85:2e:cc:eb:50:72:ed:67:22:65:7b:44:3e:71:
af:4f:3b:87:22:c2:71:62:51:f8:8e:2b:6c:00:10:
b6:ef:2c:81:49:50:0a:c0:86:ec:93:8e:b0:66:cf:
e5:df:dd:c2:79:fc:14:8d:1d:7a:3c:ab:e4:67:38:
1a:34:64:ed:b6:21:f4:5e:d1:c2:77:da:31:24:4d:
5d:62:5d:e2:f0:e2:11:d4:17:06:43:be:82:88:72:
f8:20:89:91:22:55:ec:9d:14:b2:56:2f:a8:75:e9:
7e:3f:01:0b:ce:3a:5c:46:07:0e:8e:45:21:10:af:
52:67:a5:ee:2b:6c:32:fa:13:6f:fb:02:6b:e1:b0:
45:11:9b:f4:1e:20:a4:7a:21:26:fe:b5:ec:c3:7b:
ac:46:30:06:d6:fb:ea:71:e9:b3:77:6c:e7:96:12:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:54:C3:B4:18:92:F6:6A:F1:F9:D0:F8:F9:F6:8C:A2:6D:B6:89
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:71:9e:7b:03:e1:3f:d1:f8:26:ae:34:ff:c0:15:0c:35:
ef:12:03:ce:3b:c6:dd:93:fb:41:0a:a5:e8:72:dc:b4:1f:07:
c1:df:a5:d9:4b:64:b1:41:ae:df:96:90:f1:93:6f:dd:c8:3d:
be:b7:96:5d:c9:3d:1b:4b:c4:4a:d1:1b:7b:0a:41:75:b3:cc:
e9:25:97:bb:10:6e:d3:c9:2c:42:d8:56:91:c3:37:27:de:99:
71:55:6b:99:c7:46:77:8d:1e:a0:a0:af:93:3e:89:ec:7f:6c:
7a:94:31:40:8f:75:ca:fc:30:83:f0:e3:d6:db:3f:ba:2f:a0:
d0:74:b5:db:ce:ca:39:b9:d5:41:46:de:d7:df:4c:c1:91:38:
c1:a2:a8:ec:35:31:d2:e4:c0:08:f8:e7:8b:7d:6e:50:cb:94:
ab:d9:cc:00:9d:c0:b7:46:9e:c5:72:a6:2b:a4:6b:d8:e5:20:
1a:24:cf:a0:7f:b8:56:52:3d:b2:dd:fd:3a:8d:b9:45:03:75:
61:da:0f:36:61:a7:77:08:36:7f:ea:1b:98:f1:38:2b:36:fc:
77:df:b6:4b:0d:95:8d:61:54:c7:3a:99:19:79:04:5a:b0:02:
d7:99:5a:4a:97:ed:39:14:93:f9:33:04:f8:ba:4e:61:18:46:
cb:37:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:52 2025 by rpki-client