Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
File: HY-s3UFcS7p4J3uj57D-I9Klobg.mft (raw, json)
Hash identifier: a41cdjbqJ+mzAEa1EjW4B81LSELCN9Nl02EXnjbKiW0=
Subject key identifier: B7:DC:92:71:0B:3F:CF:5C:A9:20:7A:7B:B5:A1:86:9C:93:FF:12:A6
Authority key identifier: 1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8
Certificate issuer: /CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8
Certificate serial: 0198D54E05243A19AA5BEA2844A638CB3063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
Manifest number: 01E8
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: HY-s3UFcS7p4J3uj57D-I9Klobg.crl (hash: zfOivNiWh7D8ejPFBRwQCCfKycZyangwizx+GIce4Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:05:24:3a:19:aa:5b:ea:28:44:a6:38:cb:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=b7dc92710b3fcf5ca9207a7bb5a1869c93ff12a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:1a:de:3e:23:2d:60:81:0b:ae:0d:d5:d0:
8a:5f:67:7a:95:4e:54:74:03:5a:b8:55:a4:bd:25:
a5:c0:b0:1e:46:c3:e2:91:8e:95:16:f6:62:d7:45:
b8:45:79:5f:c5:38:5d:75:39:5e:42:91:1b:82:41:
38:21:57:e8:a4:9d:ff:9b:78:aa:a3:c9:55:90:56:
ed:63:38:c0:44:6f:a5:3f:a2:a3:24:1b:f3:e4:e1:
4b:b7:72:21:b2:2f:e4:93:af:d4:22:85:fd:d6:04:
79:3d:21:eb:f1:c1:30:92:a6:82:09:10:02:96:4d:
80:d2:04:ce:c5:88:15:40:1e:c5:26:b5:5b:03:8b:
63:ed:77:b2:e3:4a:7c:3d:a9:97:8f:9e:45:25:8c:
3a:17:c4:08:73:01:dd:6e:33:ef:c2:3a:8b:c2:6e:
cd:a6:bd:6f:24:bf:9a:45:aa:61:45:e1:80:d4:22:
86:b6:8f:f9:0c:3b:ce:63:fc:55:49:de:d3:e5:d6:
6a:c7:e6:13:80:0e:99:31:40:6c:56:aa:7f:c4:3e:
ac:aa:c7:4c:a1:3f:25:a3:05:be:f6:8f:db:eb:2e:
90:6d:0d:6a:4f:4d:ed:47:cd:53:e2:8c:2c:77:8a:
c5:42:ef:c9:5a:0d:70:40:a9:75:95:23:e9:e7:31:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:92:71:0B:3F:CF:5C:A9:20:7A:7B:B5:A1:86:9C:93:FF:12:A6
X509v3 Authority Key Identifier:
keyid:1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ad:64:84:3c:62:bd:9e:20:ac:e1:76:6d:55:de:56:a1:0d:
4a:dc:eb:08:29:5e:c7:09:de:b1:9a:33:bb:d0:0f:00:cb:c5:
e9:de:5d:85:4d:a8:b1:41:37:95:39:19:2d:9d:83:99:38:bc:
12:dd:c6:04:9f:85:19:54:8f:0b:3c:7d:89:0d:02:5f:86:16:
ad:5b:38:e2:15:66:18:b7:f7:97:fe:e8:79:e6:76:f2:e3:48:
a3:f0:95:9f:29:4b:ca:da:2d:13:ad:e6:bc:74:2b:8d:50:ee:
27:63:9d:40:c9:70:92:c5:44:b3:70:4b:5f:78:8f:aa:b1:bd:
28:57:60:55:2c:6d:da:91:8a:9a:e3:5a:06:04:f7:51:58:b6:
60:36:84:74:d0:83:3c:54:69:61:6a:f8:84:1d:58:e3:56:75:
ba:38:3c:d9:5b:27:14:75:7c:95:ad:65:fd:d2:28:fd:42:3f:
b2:c9:9a:f7:d3:2d:44:a2:95:24:73:81:54:d7:6c:ba:67:96:
ce:c4:02:73:bc:9e:e7:cd:18:67:9b:8a:02:cd:2c:d6:77:78:
5c:08:c6:d4:47:58:42:be:f2:cb:12:57:50:bd:0c:90:e0:93:
e6:7e:15:c3:e9:f4:f1:92:4f:58:32:af:5c:dd:c8:a2:28:ad:
f3:1e:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:42 2025 by rpki-client