Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: RQR+MjGZISLEk/fUptujz3V/wuqONGf+Fq3CYggVpD0=
Subject key identifier: C0:15:6B:0A:CA:31:E8:BB:CB:C0:EF:4A:EE:11:ED:51:6C:97:6F:8E
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 0198D5F11E5A2956C21F431B37A45C0F51AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: gwU4/npZ3kgkzCQYHQZ0Algqgx3HskwiVsZ7mg+hqXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1e:5a:29:56:c2:1f:43:1b:37:a4:5c:0f:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=c0156b0aca31e8bbcbc0ef4aee11ed516c976f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:61:26:67:c9:9b:7c:63:3b:56:2f:e3:4a:
bd:ed:46:ba:5b:84:6b:91:4f:bc:90:d9:97:8e:9b:
79:61:ba:90:01:f9:d0:9c:c9:74:f8:4d:68:4a:6d:
6c:c8:f3:5e:49:23:73:66:22:fb:6f:2f:ef:92:5f:
7b:22:7e:02:a6:6d:28:c1:a3:14:7c:fc:a9:7d:2a:
ec:c3:1b:07:cb:43:05:14:3d:b1:50:dd:69:d2:77:
24:fc:e9:3e:79:9d:dd:72:52:c4:e3:96:4a:c5:ae:
72:d0:e6:4e:25:a6:58:e2:16:86:77:28:98:3c:15:
13:7c:1c:44:a0:4d:af:cd:9e:6c:65:59:d2:5d:10:
14:ed:57:d6:69:75:1a:e2:b8:03:52:a9:cd:c3:88:
72:6b:48:88:b4:6b:66:28:90:07:1a:ae:9b:b3:27:
74:dd:6b:e9:6a:05:0e:9a:af:22:ef:ca:33:7f:79:
ee:26:d5:73:25:5b:30:ab:6e:55:ce:e4:3f:fd:dc:
84:9f:57:0c:fc:a9:1c:d2:d2:5f:67:a0:69:f0:03:
d5:92:d6:1f:89:9c:9b:ee:a8:d1:30:f5:91:d9:e3:
5b:cd:f3:db:50:d2:df:07:53:6f:5c:07:b4:56:1c:
71:70:10:4b:74:89:17:5a:52:09:48:cd:ca:d9:92:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:6B:0A:CA:31:E8:BB:CB:C0:EF:4A:EE:11:ED:51:6C:97:6F:8E
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:42:51:ec:ea:4e:ca:86:73:2c:25:89:14:e8:f8:e8:fb:
de:9c:45:94:cc:c5:ea:49:b1:28:a8:7e:e6:ea:46:5e:3e:ce:
76:d6:29:68:99:09:6b:0b:35:ab:3e:38:7e:1f:03:2d:9e:a7:
8a:5c:08:d2:31:e8:cb:2e:f4:66:5f:a5:49:29:45:25:c1:96:
b8:8b:37:40:45:af:94:91:24:bb:11:20:ba:b4:d7:c6:d6:62:
59:29:e8:c2:2b:6b:90:de:45:4a:ce:ec:d4:be:13:c6:0b:c6:
79:be:a8:1c:c3:c7:8e:af:24:1b:c7:21:7c:0e:53:8f:be:cf:
ae:51:c8:69:af:24:fd:ec:7d:b6:79:76:05:14:7b:b7:6f:b4:
79:4d:41:bd:af:77:50:c4:bd:03:10:5a:49:04:b8:c3:2a:8f:
fc:27:de:39:99:34:b1:1b:c4:90:3c:5f:85:1d:86:c9:13:68:
13:eb:ee:3f:8e:b4:e7:b7:bd:83:62:77:45:e7:28:d5:2f:8c:
4b:16:f9:28:33:03:00:a4:38:cf:b4:58:31:f9:a0:fe:ae:da:
e3:3b:7d:54:fa:2d:44:72:c1:e0:bc:f2:0b:b3:2e:60:a8:7f:
61:6d:2b:c2:82:bc:26:54:b5:92:de:ac:b7:c4:97:df:14:f0:
e0:36:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:16 2025 by rpki-client