Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: Q35eMAimw89m2TGoiEqjgFPcwMblJd/XGbnv0MaFpEo=
Subject key identifier: 2A:3C:60:2B:B0:AD:BC:60:34:82:B7:C7:C2:48:40:83:2D:13:02:BB
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0199FB7CD08393D1ACED1D447D16EE4E8ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1423
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: /khxX+geYI8Rrh2gVT1Xu6yZDMRf/0KDem8gv7946RE=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d0:83:93:d1:ac:ed:1d:44:7d:16:ee:4e:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=2a3c602bb0adbc603482b7c7c24840832d1302bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:a2:f0:99:ff:78:3e:f9:74:85:37:ff:0c:
36:5c:63:05:64:af:b3:fc:80:1b:dc:b7:af:01:f5:
fd:41:72:dc:8a:33:89:4e:3e:89:ba:29:cf:18:c8:
53:8d:36:8d:ce:69:04:93:51:e0:f9:6e:38:1e:2a:
70:02:a5:ac:aa:31:fc:b5:54:ae:f8:b9:2c:22:1c:
7f:63:8e:45:ed:eb:ad:fb:85:d2:ea:e5:ae:c3:3b:
96:e4:c7:68:30:76:f0:e3:28:a8:fa:35:1c:c2:0e:
e7:91:fe:11:5d:75:68:fa:a8:f2:8f:4c:39:72:08:
fc:53:0b:4b:ea:24:3e:c8:d6:60:fa:49:cd:23:64:
4d:02:71:bc:8a:43:95:a1:38:b7:41:e2:35:58:7e:
67:87:5c:bf:d3:86:42:50:ea:1f:7b:85:47:70:89:
d7:73:3a:ef:da:82:d8:1f:70:0f:23:be:93:90:48:
1d:d3:2c:40:99:54:a5:d9:d8:63:0b:66:32:f0:ce:
c5:2c:88:e3:76:29:ae:5f:2a:35:2c:b3:af:53:49:
f1:f6:a0:f8:95:a3:2f:a3:88:8f:6c:27:2f:fd:a3:
1f:d6:6f:15:92:d5:ec:2c:ab:1d:3f:8a:49:d9:d5:
a6:c7:78:af:35:82:84:9c:74:49:e0:4c:f1:f7:fc:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:60:2B:B0:AD:BC:60:34:82:B7:C7:C2:48:40:83:2D:13:02:BB
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:ad:c8:ee:b0:25:53:f5:12:81:f9:e2:a7:19:55:62:8f:
cd:ca:0a:a6:a9:bd:73:58:6a:a0:13:ef:e2:48:38:df:3c:72:
d5:32:83:bd:99:2e:ad:58:9e:9b:bf:e4:47:a7:4c:02:ad:8a:
3a:19:fd:07:f4:13:a9:0f:74:11:ef:7d:87:3a:c4:d0:c4:f7:
ed:0e:b2:90:0f:b8:99:95:44:2d:11:34:e9:b9:07:a6:5e:11:
e2:1f:ca:7f:ba:c5:73:d1:d4:53:8b:01:95:3c:eb:53:15:eb:
26:e0:e7:37:db:c2:eb:4b:9c:b3:a1:90:de:66:69:fd:6d:5b:
a9:02:39:6e:0e:b6:9c:db:6d:07:89:fc:77:46:42:14:4d:2a:
49:ab:a4:8b:50:ed:d2:f1:4b:d0:de:3a:3f:bc:89:8f:5e:66:
fb:89:80:e8:0a:e1:45:02:97:16:c9:0f:36:4c:34:52:6a:4a:
53:a2:98:6f:a1:1f:fa:84:3d:42:73:07:ed:57:ae:01:de:d9:
e2:ec:22:10:55:d2:20:fd:d9:2c:4a:bc:30:66:13:40:8b:d5:
69:08:12:74:96:3a:18:c9:ae:a7:e7:18:34:5d:2e:75:f4:fe:
11:f1:13:71:20:63:50:9e:c1:52:42:c6:62:17:f0:aa:09:db:
e2:e0:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:21 2025 by rpki-client