Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: +RO11xmipXVJ9JPYYD4gBg04qvegzsSnkT+HyqzMoic=
Subject key identifier: C0:F1:1A:C5:37:EF:80:B4:25:B0:5E:B3:B8:8B:5B:4C:D2:C3:C9:D3
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 0197C64A43FEE25A15DC204588638A7BFC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: 014D
Signing time: Tue 01 Jul 2025 14:00:45 +0000
Manifest this update: Tue 01 Jul 2025 14:00:45 +0000
Manifest next update: Wed 02 Jul 2025 14:00:45 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: bTXvnxmwVzCmOvIe9jQNQlSIQ3rDqMpKWbjGwF3M97U=)
2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:43:fe:e2:5a:15:dc:20:45:88:63:8a:7b:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Jul 1 14:00:45 2025 GMT
Not After : Jul 2 14:00:45 2025 GMT
Subject: CN=c0f11ac537ef80b425b05eb3b88b5b4cd2c3c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:36:d1:87:2d:8c:2c:73:aa:55:b9:f9:ee:
a4:a1:7b:28:ae:c4:d5:d3:2c:ff:24:31:e4:13:57:
98:ce:d4:76:7e:af:af:9d:00:5a:f7:1d:45:c9:c1:
7c:1b:72:53:6a:99:c0:15:79:5b:ef:5a:41:14:b6:
75:a2:c5:ed:68:3f:8f:cc:b1:fc:14:40:81:19:d9:
c0:66:a7:aa:73:bb:1b:97:9d:ad:2c:02:32:c2:71:
25:87:f5:c4:09:0f:ef:f4:a8:00:7a:d2:20:38:ab:
b5:f7:05:04:77:a4:d4:ec:7e:04:d2:2a:7c:38:64:
75:2c:65:ce:79:44:75:c6:21:95:85:9b:30:44:17:
45:04:8b:b1:c4:4a:31:10:d6:db:45:37:4c:93:d7:
f8:ba:67:d3:60:31:b5:6c:c2:55:c5:81:89:f4:c4:
d2:66:8d:da:b3:12:14:7d:75:02:3b:35:99:f9:9f:
cf:ac:0c:0c:c3:cd:c1:ef:d9:6c:19:f5:8b:93:01:
d1:95:dc:0f:b2:43:1c:ad:e0:88:e4:33:4e:fa:b0:
85:29:4a:4a:cb:ca:ce:62:c8:77:99:5a:0b:5f:33:
6a:12:05:55:38:17:c7:4d:a4:8e:fa:69:2e:da:51:
90:7a:02:64:5a:4c:50:9e:77:43:7c:2e:c1:bb:24:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:1A:C5:37:EF:80:B4:25:B0:5E:B3:B8:8B:5B:4C:D2:C3:C9:D3
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:97:60:c9:d8:04:95:13:b6:2f:ad:aa:df:a0:df:6f:13:
f2:9f:b0:40:27:1b:d2:f7:fe:c5:2c:e6:78:b1:62:9f:be:ac:
0c:16:3d:f7:af:21:9a:4a:45:13:c5:7b:e6:7a:f4:5e:7c:d9:
7e:48:91:8c:36:df:e6:cd:12:df:14:d4:20:81:2a:8d:6a:3d:
85:7e:c5:31:a6:57:c0:2b:6c:37:bb:03:8d:af:46:05:ae:60:
2b:df:6c:b1:28:ac:bb:77:2c:9a:5b:df:e8:2b:22:de:47:8e:
15:1a:c3:38:f3:93:99:ee:43:cd:fb:d9:cd:f8:89:44:c9:cc:
f7:04:b0:07:d8:d9:fd:45:5b:d9:7c:6b:a1:47:23:9b:d6:9b:
68:58:cc:24:6e:9e:2a:d2:0c:9b:54:70:43:98:d4:a2:77:a5:
30:9f:fc:a6:66:88:32:1d:05:41:7e:46:1d:a4:8d:85:ea:f1:
ed:aa:20:b8:70:5f:1c:8f:26:fa:b0:52:77:e1:fd:0c:8a:47:
fa:da:c9:5c:8c:97:1c:de:43:a9:20:6c:57:e0:3d:b6:29:2c:
f5:72:bf:1d:0a:bc:e8:d0:a5:dc:b0:01:74:fe:a0:1e:cd:a7:
4e:8f:f0:18:f6:77:f1:20:a2:cc:b4:75:a8:73:43:7a:ce:f5:
48:9f:08:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:44 2025 by rpki-client