Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: sAx6xyeKltd5hIl8u4+qIytwJiN72Zwx9uRui3kRvQM=
Subject key identifier: CA:78:5B:6B:A9:AF:19:08:5B:BE:4B:4B:8D:63:C3:AD:32:C3:FC:FE
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0198D705A023AF230409D2A4167B4C682E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0E0D
Signing time: Sat 23 Aug 2025 13:02:06 +0000
Manifest this update: Sat 23 Aug 2025 13:02:06 +0000
Manifest next update: Sun 24 Aug 2025 13:02:06 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: EE8lruOkOhpgTCLAWEn7kFAALdmpQYf/ZEZseDp7J1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a0:23:af:23:04:09:d2:a4:16:7b:4c:68:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Aug 23 13:02:06 2025 GMT
Not After : Aug 24 13:02:06 2025 GMT
Subject: CN=ca785b6ba9af19085bbe4b4b8d63c3ad32c3fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:40:37:d4:3a:d8:f7:0e:7c:d0:e9:0e:64:
1d:21:12:13:f5:cc:22:96:c5:11:28:27:66:38:0c:
4b:a8:c8:c8:c5:33:9a:53:b9:9c:88:4c:21:aa:44:
21:a9:6f:cc:a6:c3:9f:29:0d:c6:3f:9f:de:b2:42:
4f:39:17:1e:e0:f5:15:0e:0e:7f:18:c9:1e:e9:8c:
74:30:3a:99:86:93:65:eb:4b:bf:9d:c7:5c:9d:96:
30:29:4d:9e:4e:cd:1d:d5:47:a3:e5:b9:ce:5e:fe:
c0:73:a8:82:dd:bb:16:d3:f9:ed:5f:20:ca:46:13:
4f:ea:7f:c1:88:4b:2c:00:ca:08:11:08:c6:c0:20:
5f:12:31:a3:9d:d5:c1:27:3c:ea:c1:72:87:d1:1b:
d2:ee:2c:24:e3:bd:4c:57:ff:ba:ef:29:b2:13:8b:
1d:48:c2:c1:2f:75:9c:01:40:ac:50:d8:95:2e:78:
85:7a:b1:73:ae:5a:a6:1e:f4:87:95:90:14:1e:f6:
fb:12:7c:27:51:aa:1b:f7:1e:aa:10:9c:c3:84:80:
67:ec:c2:c1:74:d6:0a:63:82:8d:5c:3d:27:30:33:
2d:13:cc:92:8a:29:31:0c:ca:d9:34:81:ea:9e:ea:
60:7a:ff:f2:12:62:7f:63:3c:b8:78:57:5c:dc:48:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:5B:6B:A9:AF:19:08:5B:BE:4B:4B:8D:63:C3:AD:32:C3:FC:FE
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:e6:d6:bc:2f:0c:b2:1a:82:d5:98:50:42:ff:a0:67:d0:
a0:67:a1:46:ab:41:73:f3:cc:72:8b:b6:24:59:b5:f9:fc:0a:
6b:90:75:a9:fe:d5:64:6c:2f:ce:8c:88:18:74:8d:6b:21:87:
10:c7:29:c2:b6:fb:bf:2d:9c:54:d3:c0:5d:37:de:82:6f:03:
c1:a3:7c:b9:08:89:fb:3a:bb:5a:6c:80:ff:6f:b0:7b:78:1f:
3d:5c:53:00:d6:9d:f1:14:e2:4a:ad:1a:7c:1a:2b:9a:87:7b:
9b:e8:bf:4b:3e:ab:ce:b7:4d:42:fa:61:28:b2:c4:55:d8:85:
db:b7:f1:3d:21:da:11:e8:70:47:21:5d:31:4f:e1:59:1a:0a:
c8:63:45:e8:cb:da:50:d0:f1:04:7e:f0:75:63:5f:cc:87:be:
0a:cf:a9:6d:15:55:5e:d0:70:2b:c9:c5:87:f9:24:dd:f9:14:
35:5d:c5:f0:f0:87:68:13:69:75:68:49:76:16:16:f8:78:c3:
d0:00:c0:68:ad:2a:36:6a:ef:f2:44:f2:68:a5:69:bc:cb:a8:
7b:37:35:21:d9:bd:25:1b:e0:06:92:db:29:25:d5:8b:11:16:
c9:92:a3:d1:d6:47:19:e0:97:e9:d0:fa:84:fa:3f:25:c5:2b:
a0:03:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:15 2025 by rpki-client