Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: iUXPUnVfdK/YzDgu5tKql/3l+yJvj3KGbhhdWBmeoZk=
Subject key identifier: A9:70:6B:3A:73:28:6A:96:91:DD:59:A8:23:BF:BB:B2:62:F2:DA:42
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0197B7459D932F24AC7D145C283C76FE0317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0D78
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: XKjzuXHWv9U2vS/JO1Uog9ryrK7isg99bvgbJ2zT9lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9d:93:2f:24:ac:7d:14:5c:28:3c:76:fe:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=a9706b3a73286a9691dd59a823bfbbb262f2da42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:47:7c:5b:77:c6:ed:24:a3:44:c5:7b:bf:
54:b5:08:76:72:97:f3:c7:96:db:1f:d3:0a:28:b1:
d1:07:ab:44:1f:30:ab:7d:08:51:ba:83:6f:c7:55:
9c:68:d4:0f:1e:bc:e8:de:56:48:be:45:fa:7f:ac:
1f:a3:4e:88:06:1c:ae:d4:7f:fb:51:1d:10:5a:a9:
dc:18:a5:c4:4b:f6:9d:8f:90:55:a3:97:ff:da:46:
31:4b:5f:ab:ae:99:53:d5:64:69:11:1e:59:14:3a:
88:96:98:1c:83:6d:46:92:f5:e7:2b:5f:03:c1:4f:
78:39:9d:66:b0:4e:9b:66:f7:14:5f:50:84:01:14:
5e:ee:c0:85:62:0d:2c:da:f7:81:c6:12:e4:ee:a9:
07:4f:14:97:50:78:4a:fd:bb:78:22:23:df:3d:05:
6b:2c:13:f9:25:7b:d0:92:10:aa:bb:fd:61:01:f5:
78:58:6f:34:66:cf:f6:b9:af:2c:b5:d1:49:fe:7f:
6e:2c:fb:fe:a2:b0:e2:53:f1:a8:d0:89:bf:6a:ea:
d5:c6:49:90:49:1f:a9:68:30:a9:40:f2:73:af:0f:
1d:6a:75:bf:50:37:7e:d5:8c:ac:b0:b3:37:ef:95:
0a:6d:5f:b5:52:52:cd:55:de:70:77:92:25:6b:86:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:70:6B:3A:73:28:6A:96:91:DD:59:A8:23:BF:BB:B2:62:F2:DA:42
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:be:c7:7b:98:91:d9:d7:47:a6:b0:75:a6:56:73:30:96:
14:4c:24:93:87:89:90:25:54:db:13:e2:3d:d5:0f:5f:0e:00:
b8:02:13:43:5b:44:da:bf:ed:ee:dc:0d:14:f9:f4:22:05:c8:
73:c1:35:9a:20:1e:41:a2:4b:8a:f3:97:3a:f0:a9:eb:7e:24:
a8:ac:26:5d:29:b3:de:c6:29:5b:5d:74:ab:63:ee:7a:b3:27:
88:bb:9f:0b:9b:31:96:f7:4d:65:59:af:bf:9f:4a:90:2e:d4:
a3:f0:f1:2e:74:6d:10:03:68:83:f0:3e:79:fe:69:57:13:f9:
34:73:cb:6d:81:db:4f:f2:0d:67:50:69:2e:e3:6a:28:db:6d:
c9:db:eb:7c:d0:56:3a:af:46:63:35:e3:2e:d0:2f:a2:d6:08:
80:b0:9f:71:ca:d1:b0:65:ef:29:24:e6:df:51:6d:e2:93:d8:
d7:7f:ca:20:5e:e9:90:68:ad:cf:d0:0b:00:d6:f1:8d:73:e2:
d2:9e:36:48:ea:fe:29:c2:37:a2:63:0a:17:29:8e:fc:37:7b:
72:8f:a6:9b:ae:3a:77:f9:7c:cf:4f:d4:35:9a:c5:cf:d7:27:
15:bb:a3:66:79:01:19:43:03:8b:f8:d2:8e:2f:11:fd:2b:56:
6b:24:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:30 2025 by rpki-client