Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: hn0XkMEY0emj4Wnc70Jlua8yv1ZkIiWpx6LFc6lMkEU=
Subject key identifier: 9B:4D:A7:A7:5B:AB:4A:B0:87:A8:12:B9:B2:1B:B0:FC:B2:C7:72:04
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 0197B70E7FAF333BA38ACE517593E1E6BC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0414
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: y0T/6X7O/fzgHgRQrbKENbEbo1Si8dkFe265rnEtvrg=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7f:af:33:3b:a3:8a:ce:51:75:93:e1:e6:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=9b4da7a75bab4ab087a812b9b21bb0fcb2c77204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:aa:d5:df:b2:b7:98:0c:f4:28:fa:ea:3e:
1c:69:d7:5f:c2:5c:7d:5f:e8:d4:a5:e5:15:c5:94:
c2:32:7f:7f:5a:1d:bb:ce:51:26:6d:3c:89:05:f6:
a4:82:e3:9e:c0:fb:2e:60:83:c5:bd:00:98:21:7f:
68:d1:8f:f1:20:28:1c:85:a8:2a:9c:2d:2b:07:3d:
d9:7c:fd:31:d9:4b:8c:ad:28:1c:3e:92:f5:8d:97:
09:aa:b5:ed:d1:41:bc:be:f1:0b:8f:bd:91:bf:5f:
93:9b:93:ce:bd:33:47:c2:12:0f:78:5b:73:10:a6:
ee:b1:a8:c3:7a:01:ae:94:e2:c7:09:20:9e:f3:e8:
e3:42:50:a6:0e:07:38:0b:b9:2e:47:61:d6:6f:a9:
18:b8:8f:a4:ca:f0:df:b5:a2:61:81:14:53:9a:d6:
ad:26:5a:21:ea:23:1c:5c:a8:fd:d1:3f:82:06:c0:
c2:9b:d6:1f:7a:5c:50:15:7d:eb:6f:a0:d7:33:bd:
6b:66:06:7e:ce:17:39:5c:c3:27:61:f1:4e:1c:08:
70:33:e2:6b:d8:ea:a5:dd:b3:ef:5b:2e:f1:c8:45:
e9:ce:a6:ac:c5:3c:a4:d5:91:cb:b6:be:4b:39:ed:
a0:fc:49:26:cf:35:d6:93:de:83:1b:6e:0a:f1:98:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:A7:A7:5B:AB:4A:B0:87:A8:12:B9:B2:1B:B0:FC:B2:C7:72:04
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:02:dc:71:0c:08:33:e7:66:21:73:34:41:21:cc:15:01:
48:d4:f5:b6:ea:90:f6:54:55:00:71:f1:24:47:61:54:f8:67:
09:8e:43:fb:4b:a8:e4:01:07:29:56:3e:98:f7:8f:ad:79:cd:
54:bc:ce:88:ae:e8:63:9a:1b:e5:d0:74:87:8e:30:72:77:7c:
f8:e5:8e:fd:c8:b8:ac:b2:2e:1c:38:51:0e:b7:7c:29:cc:da:
59:90:a6:65:02:6e:db:b1:99:c3:50:67:a0:42:ff:a0:65:42:
0c:cd:ad:ad:49:90:12:36:f2:a8:8d:31:1e:6a:05:eb:e9:9c:
b4:b8:6f:46:5d:95:7f:42:23:e9:8d:36:88:fb:5c:df:26:ab:
d0:08:ee:89:da:ee:64:5a:d3:9a:d5:12:d4:54:77:1b:6b:fa:
28:cb:ad:e2:e1:3c:5e:28:c9:75:69:73:37:89:05:6a:cf:29:
e5:2f:1b:81:ab:3d:f3:64:87:54:00:c4:09:4a:df:0e:e8:3b:
08:a2:b6:17:df:aa:3a:be:27:3d:84:9e:8f:fb:d2:13:7a:b8:
64:63:66:2e:22:ac:68:d1:58:b1:51:3c:43:7c:b8:0f:64:5f:
ca:82:bb:64:29:39:9b:ee:47:73:5b:6d:1d:d6:ed:72:1c:a5:
37:6c:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:08 2025 by rpki-client