Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
File: HY-s3UFcS7p4J3uj57D-I9Klobg.mft (raw, json)
Hash identifier: Gt4YxO6pECAYYly6INmb3xwKi8aMNceyrIW+VbCig4c=
Subject key identifier: EA:81:93:BE:EB:6B:6B:C0:61:0B:8B:AD:7A:17:FA:84:31:F3:A3:B5
Authority key identifier: 1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8
Certificate issuer: /CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8
Certificate serial: 0199FAD81A68E15BE62C456F134BF8CA6D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
Manifest number: 0280
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: HY-s3UFcS7p4J3uj57D-I9Klobg.crl (hash: c4EjJCrxUFVqfto0+Wu7+TfrP2B3sRWJg4TxXbOMzt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:1a:68:e1:5b:e6:2c:45:6f:13:4b:f8:ca:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=ea8193beeb6b6bc0610b8bad7a17fa8431f3a3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:0d:13:32:04:83:b0:87:9d:9d:35:1e:22:
93:e0:7a:ea:67:47:1d:c5:04:d9:ac:fc:94:93:cf:
91:e0:8e:7a:7b:b2:cf:07:31:d4:df:7a:e0:a8:10:
ea:41:6f:54:e4:c4:6b:8d:3e:35:31:6a:1b:b4:40:
1b:7e:69:f4:22:47:89:31:b8:e8:5c:98:eb:73:2e:
6f:3b:c6:0e:05:4c:a8:6b:b5:66:a9:37:64:dc:ea:
ee:ff:02:49:a7:7f:59:10:f5:e5:5f:98:7f:cd:54:
7d:27:58:88:0f:dc:11:8c:0c:e8:d5:05:3b:d1:4f:
29:73:8f:de:47:45:82:47:27:26:ec:bc:da:b1:a7:
64:12:72:78:79:ee:50:ca:08:b4:da:be:b1:08:68:
37:d2:81:8b:85:eb:bf:16:f8:7f:00:dd:c3:5f:5c:
3f:97:d1:ff:01:00:13:7c:d6:31:42:4b:2c:b8:a5:
92:83:35:f0:19:50:c1:79:19:22:d9:50:cb:84:83:
24:1e:2c:40:9b:86:f2:c9:f5:72:39:dc:0d:ec:de:
94:6c:d8:72:99:e4:9b:3c:de:30:0c:10:53:a8:28:
91:b8:a4:4a:0c:0e:a7:3a:5c:8b:62:c7:d3:52:e8:
49:0b:5f:ef:14:72:d0:f2:f1:f7:cb:aa:4d:dd:d9:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:93:BE:EB:6B:6B:C0:61:0B:8B:AD:7A:17:FA:84:31:F3:A3:B5
X509v3 Authority Key Identifier:
keyid:1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:79:0e:e4:72:ec:ea:03:e9:6e:11:6b:c9:84:53:9b:39:
90:a2:d8:c5:fd:1a:97:99:fa:c4:a7:20:8b:5f:bb:cb:7a:b8:
33:0e:b1:ab:97:13:e2:a5:b8:b8:ac:66:52:84:91:2b:ed:8f:
a8:aa:35:78:89:05:27:5a:dd:fb:57:34:87:76:05:d8:68:5d:
d4:04:a8:03:e4:27:65:49:2d:d2:8c:81:46:9e:4a:c3:3e:cd:
32:36:48:96:6f:4f:4c:25:14:e6:f5:0e:d4:81:b9:b7:91:04:
24:ba:09:59:09:74:12:b5:30:84:c5:aa:db:26:71:90:b3:29:
c0:06:0f:1e:fa:28:c1:3b:74:db:27:46:f8:db:da:39:e9:be:
ef:33:5b:8b:28:bd:50:db:4e:68:5c:b9:82:99:29:6e:c7:55:
f2:95:0b:a0:ce:f6:2f:2c:16:e6:ad:55:93:10:4d:5f:fc:be:
05:23:ba:43:a7:d8:b2:44:e8:eb:c0:80:84:52:c8:71:9d:ad:
95:ad:97:20:0d:7b:a4:c6:8f:84:8a:a7:3d:ac:37:22:c0:b5:
4b:02:fe:09:e7:d7:ec:f4:71:2d:3a:d6:72:3f:92:db:a7:67:
43:87:0a:ad:dd:cb:82:fa:8f:17:1e:24:82:2b:6d:a3:36:ab:
b8:80:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:42 2025 by rpki-client