Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: +KduNYH07YP6ue+S+nhfdB3b7MoKnMhp0QAjI3bUpls=
Subject key identifier: 36:4E:9F:3C:43:42:32:59:C3:5F:11:D1:46:49:F0:51:02:7D:36:5E
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 0197B7EAAD755FC0EE971CDDBCF5CCEC43F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 016A
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: B9ubCxq7z3haDW2yNFlKSU93o+OOU2HohIaEShkHAoQ=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ad:75:5f:c0:ee:97:1c:dd:bc:f5:cc:ec:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=364e9f3c43423259c35f11d14649f051027d365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:27:a2:c8:16:a7:2b:c9:78:b8:b7:66:dc:
3e:d7:68:24:96:1b:72:e4:24:b4:42:d9:8c:df:19:
47:1e:81:ee:31:23:97:a4:d6:cb:c4:35:24:9a:54:
4b:d5:5f:c3:83:f6:91:f6:34:c6:ff:df:c3:9f:28:
af:33:c6:87:5c:0d:76:2b:40:84:42:63:d8:76:12:
78:93:cd:86:eb:23:96:18:ff:d1:37:e7:6a:6f:00:
96:77:45:d2:7c:1d:86:c4:e9:a9:8d:69:99:c7:29:
2a:bd:34:95:17:bb:61:28:af:30:09:d0:7b:2e:74:
a0:59:ec:ad:3f:9a:13:db:65:70:39:61:9e:7c:0a:
a7:5b:03:12:41:03:e2:a8:41:70:17:0d:af:36:95:
db:fb:47:22:04:88:03:f5:df:aa:f2:d5:90:d9:bd:
cf:1d:28:dc:82:c6:6e:df:83:cd:b8:4b:7f:67:ea:
20:8a:57:d0:f2:51:2b:4d:b4:41:7b:7a:db:dd:0b:
8e:59:20:01:fd:2d:29:c4:5e:81:90:72:66:af:ba:
ed:23:1e:22:b0:6d:a1:e1:a1:94:e7:ec:6f:f4:88:
6f:29:d8:ff:23:de:2a:c9:06:34:dc:db:e3:a8:8a:
1e:42:de:43:a1:94:40:fc:68:1a:3b:8e:55:32:42:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4E:9F:3C:43:42:32:59:C3:5F:11:D1:46:49:F0:51:02:7D:36:5E
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:41:57:69:5a:66:17:ff:7d:81:b2:ad:96:20:1b:4d:83:4e:
c8:d3:6d:f5:56:14:f1:1e:1e:f2:dc:d3:e9:bf:a5:6c:31:ca:
53:e7:6c:f3:c7:5d:f3:c0:be:21:c4:58:e8:17:3f:23:9e:85:
c7:3b:e3:49:e2:59:fb:07:4c:36:f7:7a:7c:4c:c8:ac:96:24:
26:0c:21:9d:f3:c8:65:19:39:92:61:04:4b:1c:05:0d:4f:fe:
67:96:5c:0e:2f:66:f3:cd:6b:f7:40:03:df:87:91:e8:ef:73:
e0:72:2b:1e:e8:d7:9b:08:98:8d:7b:0d:08:aa:08:ac:c3:ab:
ac:8a:0c:be:e4:8d:1d:69:2a:89:06:79:3a:d6:ed:a4:9d:6b:
7c:9f:bc:53:b8:4b:a9:03:99:53:99:18:f0:37:e7:00:db:6b:
37:a9:a4:70:67:1c:3f:f4:47:e5:9b:e0:41:f3:1b:e9:a8:11:
15:d2:38:c2:36:9d:35:ee:01:4f:70:9e:d1:43:5f:c4:5d:33:
e1:d4:b2:01:84:b2:37:d3:e3:db:32:88:48:5c:2f:89:1b:8c:
02:d2:1d:38:55:a1:23:06:5f:1f:13:d6:48:c6:91:95:95:93:
54:ce:f1:73:ec:f1:b6:b9:84:cc:06:56:56:30:6f:80:e6:34:
b2:06:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:57 2025 by rpki-client