Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: ncVHpQNVWYzat73mC2l2vNFGtX1kiHZSrSBC1DH0PQI=
Subject key identifier: 0C:64:01:BB:67:33:06:15:B4:56:A6:45:70:65:DE:A3:CC:4F:E4:0C
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 0198D4E0EE6E7816DD20FA2830059AC04D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 04A8
Signing time: Sat 23 Aug 2025 03:02:47 +0000
Manifest this update: Sat 23 Aug 2025 03:02:47 +0000
Manifest next update: Sun 24 Aug 2025 03:02:47 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: IiFmvUDYnYx0FRmJ42V4MJ60UyBtszRp0UbleU5G5vA=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ee:6e:78:16:dd:20:fa:28:30:05:9a:c0:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Aug 23 03:02:47 2025 GMT
Not After : Aug 24 03:02:47 2025 GMT
Subject: CN=0c6401bb67330615b456a6457065dea3cc4fe40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:3d:53:3b:18:b3:07:ad:cf:1b:c6:56:b0:
a1:3c:41:dd:40:a2:01:7d:6c:7d:fb:ff:4f:47:ac:
66:da:c6:dd:cd:f7:96:0d:45:7c:aa:93:2a:1a:54:
aa:e8:bd:63:af:4a:f4:e8:a5:25:54:6a:e6:a7:6e:
8f:19:52:b3:10:d6:1f:bf:f8:2f:56:3c:f9:8c:ea:
96:83:67:df:31:e5:1b:6b:ba:36:a0:47:85:f2:3a:
40:3e:a1:05:b7:63:ae:80:98:14:4b:b3:6d:c4:31:
d7:25:b9:2f:67:26:68:4c:ad:d3:ef:de:94:dc:17:
46:b2:9b:94:dc:79:4b:59:ee:ab:c6:cf:57:b4:89:
9e:d0:16:5e:c5:c1:c9:21:c0:c6:64:f6:2c:c8:46:
30:5e:3a:be:fb:d6:c6:7d:c7:c3:9e:a7:3f:41:7f:
1d:20:1c:c0:22:d6:d6:cd:58:16:38:71:22:29:7c:
0c:00:5d:a8:e5:d1:28:0e:2a:46:e4:24:e2:fa:02:
d7:b4:a9:7f:b3:63:97:38:19:ba:43:7f:12:30:7b:
fd:9f:03:3e:20:85:7b:74:a8:1d:fb:c6:35:f8:0e:
ad:11:8f:1c:6e:0a:7c:f8:3c:06:f4:7b:ca:23:e0:
5a:76:74:76:27:84:65:ef:0e:fb:58:c0:fc:5b:ad:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:01:BB:67:33:06:15:B4:56:A6:45:70:65:DE:A3:CC:4F:E4:0C
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:4a:8c:7c:c0:69:de:16:de:a0:b1:0a:e2:38:d1:fe:44:
92:df:47:42:eb:b5:88:1d:a7:dc:f3:df:e3:38:94:48:bb:98:
c1:96:c2:32:08:59:e8:72:16:79:ae:5f:0c:ec:1f:f3:c2:03:
a2:ec:6f:43:f9:dc:67:c1:c2:6f:2c:04:75:bf:6b:1e:73:fd:
22:1c:e6:c0:0e:cf:28:91:a5:94:49:c1:cf:bd:9f:47:99:52:
cf:bc:41:9d:4c:18:f5:0d:1b:ce:28:ed:f9:7c:74:19:67:1b:
b0:ba:e9:42:01:2c:92:c1:87:88:44:a4:27:2f:98:0f:a1:96:
5e:1b:74:c0:77:2c:80:28:e8:7f:cf:0c:4f:45:c7:67:81:ab:
b6:21:25:53:42:59:28:2f:f8:8b:8e:90:1c:cc:8a:09:a6:b7:
1d:5e:7f:a9:d8:36:45:2e:4b:74:7a:90:11:fa:2f:c0:72:7a:
a1:86:6a:04:11:20:92:57:0a:35:4c:a9:8b:42:79:f9:0a:ee:
fe:20:7e:e2:c7:74:d8:d6:6d:b3:c4:3a:d6:c3:f8:9f:de:83:
2e:dd:45:35:bf:95:c6:83:e6:92:9d:fc:6e:f6:16:7f:b0:7b:
13:e2:e5:ea:98:d9:bb:f7:4a:ae:d4:3d:69:d1:56:86:60:b5:
a8:96:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:00 2025 by rpki-client