Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: t5MNdSuuTwZMZ5oGRmDx+1IsoS9CcOjBIffIROtHFg0=
Subject key identifier: 80:46:DC:3F:62:3C:19:EA:67:E5:5D:03:8B:A8:46:A8:2A:EB:97:A5
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 0197CCBA4F8F81C9090C9C51D9D07BAA8C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0BEF
Signing time: Wed 02 Jul 2025 20:00:51 +0000
Manifest this update: Wed 02 Jul 2025 20:00:51 +0000
Manifest next update: Thu 03 Jul 2025 20:00:51 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: zLXYRQ4ojyIi4gLOU2XvUzRiiwG64h+41juGbYaVF7c=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:4f:8f:81:c9:09:0c:9c:51:d9:d0:7b:aa:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jul 2 20:00:51 2025 GMT
Not After : Jul 3 20:00:51 2025 GMT
Subject: CN=8046dc3f623c19ea67e55d038ba846a82aeb97a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:46:54:8f:35:c1:80:65:b4:c1:2d:ae:06:
33:4c:21:50:8c:c9:38:03:cb:d8:72:df:02:2a:40:
a9:b2:ac:8f:15:04:48:3e:5e:4e:20:fd:ed:f0:e2:
a4:43:f0:e7:ca:67:17:e6:20:86:18:3e:c6:e7:62:
19:ca:0a:b1:cd:e8:39:0b:62:be:56:f2:f0:87:5f:
b5:22:d9:46:33:82:01:8e:18:63:24:9d:bd:d5:e3:
c7:4e:8c:27:fe:76:49:6e:91:65:7d:ff:02:28:48:
09:8f:f0:dd:d2:67:e7:f6:d3:55:aa:8d:31:a1:d5:
3a:55:c3:6b:26:35:21:fd:47:13:bb:00:d4:58:2b:
d8:a2:72:e5:26:46:ae:ca:82:2c:3c:ec:47:33:74:
59:8b:8a:c5:f1:5a:82:0c:3c:e2:51:61:bc:97:0b:
08:9e:56:eb:d3:ff:97:52:73:0a:61:f2:b2:81:48:
8f:bc:14:23:89:6f:d7:9b:5e:f4:14:c4:ba:b2:05:
f8:11:54:62:c9:a8:42:39:0c:d9:4c:48:8a:f5:c6:
c8:09:e0:56:61:aa:7d:0c:e6:94:63:07:e3:15:b2:
6e:67:0a:9c:10:84:a1:67:cb:1e:e8:e0:37:41:e3:
07:84:be:ee:a1:a4:15:90:58:6e:8e:10:ae:a8:52:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:DC:3F:62:3C:19:EA:67:E5:5D:03:8B:A8:46:A8:2A:EB:97:A5
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c3:f0:42:49:8d:9c:8b:ed:4d:46:30:7c:b7:c4:fa:fa:57:
29:54:af:b4:8d:9d:58:56:c2:fc:57:49:05:47:0d:e3:4d:66:
56:f9:0f:be:3c:41:5b:07:56:68:87:6d:9c:8b:1c:49:c0:c8:
77:07:ff:23:c0:0f:9d:de:65:60:6d:11:50:60:31:36:f1:e4:
06:3e:33:48:2a:85:48:b5:b1:30:fc:24:a0:0f:b9:f7:16:37:
20:6b:e9:ea:86:dd:43:48:d4:88:f1:61:52:08:cf:9c:3c:65:
35:23:fc:7d:7f:2b:26:7a:77:0d:16:16:0f:80:ce:9d:a7:a0:
30:7c:a2:e6:e2:e9:e8:ee:15:0d:12:1d:35:a8:31:e3:04:52:
fa:79:90:7d:6f:cf:9a:5b:2c:67:ee:10:45:43:fd:fc:02:00:
3f:d8:7c:60:79:1c:71:84:d9:01:a6:15:1d:ea:ea:73:4c:2a:
54:96:f4:75:9a:18:85:43:1b:40:77:94:3d:0a:16:29:a6:8a:
ee:00:e6:7a:9d:4c:03:93:ab:5d:b5:e1:a9:8c:c9:83:4d:2f:
d1:bf:0d:37:35:70:cf:af:89:ba:cb:af:45:09:24:e6:5c:98:
dd:1e:32:1b:a2:21:8e:1b:48:f0:ab:14:78:19:81:02:c1:56:
bb:12:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:42:12 2025 by rpki-client