Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: ajxGAzIanQ889C4ph/rMighrsXvnBi2HusLyjsOj1/w=
Subject key identifier: 46:8A:7C:2B:88:79:51:3B:16:D1:11:D9:5E:A0:25:03:80:AA:A4:49
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 0197C5A5743FF768193DCD0709EC243EB59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 11:00:44 +0000
Manifest this update: Tue 01 Jul 2025 11:00:44 +0000
Manifest next update: Wed 02 Jul 2025 11:00:44 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: IAzxoOOhKVpnhscH914SDOhhi73i4VFJAENxhov1jeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:74:3f:f7:68:19:3d:cd:07:09:ec:24:3e:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Jul 1 11:00:44 2025 GMT
Not After : Jul 2 11:00:44 2025 GMT
Subject: CN=468a7c2b8879513b16d111d95ea0250380aaa449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:08:06:3c:56:57:d9:da:1a:f6:d3:95:86:
61:2b:46:bb:80:79:12:77:54:4b:d2:7c:29:88:34:
37:92:a7:84:35:d8:70:46:fa:d8:e0:d8:7e:50:ac:
37:e6:a0:7d:4f:a6:ad:5c:29:43:f4:7d:66:2f:c2:
f9:e0:bd:c5:87:3c:33:24:bf:cc:4b:38:64:5b:b5:
e7:e1:4f:f5:4e:fc:e0:9b:de:e5:eb:8e:0a:a7:97:
91:4c:79:56:2e:29:1f:43:f1:ba:2a:e6:ae:0f:b3:
27:a1:20:0e:a9:2d:e3:28:82:31:60:35:20:e4:7c:
a6:e5:9d:12:65:96:96:b6:63:3e:e5:f3:f1:53:7d:
fd:de:30:a6:9f:c8:01:4b:8b:da:0d:01:39:f9:8b:
ce:27:84:77:57:2e:ef:15:f6:e6:db:90:c6:3d:6f:
80:db:27:0b:27:52:f8:8b:df:4d:be:fc:58:b9:9b:
4b:c6:d9:71:c6:a9:a8:1f:de:38:88:58:a7:26:66:
b6:8f:e4:e4:4f:ca:4b:6f:7d:2b:f3:ec:26:ed:eb:
0b:0b:ca:01:c2:5f:68:d3:05:7b:91:79:4b:03:6b:
72:c4:fa:51:e2:38:22:af:4a:06:fc:5d:00:84:70:
a1:2e:d2:e1:4b:75:03:d4:18:d1:0d:3c:60:ca:e1:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:7C:2B:88:79:51:3B:16:D1:11:D9:5E:A0:25:03:80:AA:A4:49
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2e:54:10:f0:46:b1:39:e0:16:b8:bb:1d:f5:9e:8e:2a:37:
92:d6:64:8b:86:9f:a1:49:8e:1d:18:71:51:a5:97:25:e0:52:
07:60:a3:57:2c:bc:50:ec:cb:c9:90:75:b8:0a:b8:69:1c:c1:
3c:6c:de:5f:90:cb:d5:a5:5e:5f:0d:7d:e4:15:8d:77:df:a9:
8e:7c:94:91:ff:b8:f6:ba:b4:61:57:4f:dd:3a:28:b5:61:25:
4e:13:06:68:64:95:42:3d:14:93:95:17:ed:3e:ea:f1:92:f8:
20:b8:8e:a6:0f:4a:d7:96:46:12:2f:a9:7f:7d:b5:58:57:1a:
50:90:a5:8a:2d:20:d5:38:39:70:a1:5f:12:49:8c:33:1b:5a:
d5:91:40:4d:7b:23:e2:ea:14:bf:1c:78:e9:86:f0:5b:2c:be:
e9:b1:2b:d0:81:b3:46:19:74:cc:41:fa:d3:47:64:48:e4:16:
25:c5:40:34:7a:38:a2:8a:cc:0a:c2:e8:3e:f3:71:fc:d5:f8:
f1:cb:b2:4d:46:8f:20:cf:3c:2f:49:77:d9:c7:3f:eb:48:2a:
05:b1:25:05:4e:b0:3f:12:5e:d7:14:1e:9f:f8:ad:9a:86:59:
8e:85:c6:ad:31:65:91:60:3c:31:ed:f7:f7:5f:ff:c8:c8:88:
79:48:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:26:29 2025 by rpki-client