Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: YRudps3uBVk0NwFQ72w+S49UGAy/Y9w7NPyzO2P9KsM=
Subject key identifier: B2:30:25:28:C5:F2:06:50:C6:64:2A:B3:4D:E7:7F:DD:CA:92:2B:4E
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 01976997E0D7027B7257E4DE3CEF0461BB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0B5B
Signing time: Fri 13 Jun 2025 14:00:50 +0000
Manifest this update: Fri 13 Jun 2025 14:00:50 +0000
Manifest next update: Sat 14 Jun 2025 14:00:50 +0000
Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: zSlbIVtK4w+zLkGYs8vp8trL1i+8b535yM1h2secnWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e0:d7:02:7b:72:57:e4:de:3c:ef:04:61:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jun 13 14:00:50 2025 GMT
Not After : Jun 14 14:00:50 2025 GMT
Subject: CN=b2302528c5f20650c6642ab34de77fddca922b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:2a:98:dd:78:9f:b9:1b:7d:34:c7:32:b4:
ed:3e:48:47:62:10:56:af:6d:0a:4a:66:60:42:ad:
ff:a8:17:2d:d5:22:7a:2c:fa:c3:ae:01:50:60:bb:
97:df:c8:b9:40:a9:b6:bb:da:ed:48:9a:20:5e:7a:
36:f8:65:ba:7c:a3:6d:8e:3b:c8:e6:b0:62:ee:51:
2b:e7:34:87:79:fd:15:16:9c:10:06:c9:1c:b7:75:
57:98:95:8a:4d:6c:86:ea:1e:2f:bf:1c:4b:e6:67:
1b:31:70:9d:8c:92:46:5a:80:66:e6:84:59:78:da:
88:0a:57:5c:7b:f5:46:2b:44:a7:5a:5a:64:0d:5d:
50:d6:ad:f1:c8:3b:6d:ee:ec:b1:85:2a:3a:44:6f:
9f:30:8f:2c:95:55:0f:2d:3a:bc:78:6f:a1:a9:d5:
e6:fb:20:1f:26:90:84:82:4c:87:91:fd:96:c5:c1:
d8:07:c1:49:ea:f0:c6:37:6f:fd:08:b0:69:28:30:
4f:80:89:0e:b0:86:39:05:a7:57:81:f4:7a:af:a7:
56:47:7d:dd:29:53:aa:5f:a4:9f:3a:79:19:e9:ab:
76:32:84:9a:f4:47:7d:5c:fe:8d:d7:b9:af:54:d8:
26:1c:ad:86:37:59:36:47:81:b6:73:08:8e:ad:70:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:25:28:C5:F2:06:50:C6:64:2A:B3:4D:E7:7F:DD:CA:92:2B:4E
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d8:52:43:1a:5d:50:07:52:06:00:8a:c2:96:21:8b:e5:d3:
c8:a0:20:9b:19:4b:65:c3:17:d7:f0:f1:3d:8b:7d:94:bd:1f:
92:33:aa:47:0f:99:7f:f6:a2:8a:19:05:01:8f:a5:91:b0:a6:
62:33:24:93:a7:6a:50:a9:bc:62:02:b0:d5:8a:1e:d0:da:6e:
0e:1d:12:2e:a1:cc:3f:1f:a9:93:5f:10:18:ec:a5:48:09:0f:
1f:e2:83:30:0b:e5:92:cd:f4:99:2f:1f:f1:dc:07:f1:1d:e3:
f2:03:fa:67:54:4e:5c:7b:a7:8b:49:4d:83:aa:fc:24:65:54:
54:ad:f1:48:5f:23:c0:f8:37:08:f3:82:a5:0c:b6:ee:46:14:
4d:38:25:e5:17:13:54:2f:c0:05:1a:c7:0a:2c:22:d4:03:f5:
8f:58:de:fe:4a:5c:7c:ad:98:41:13:25:12:96:6b:a7:89:c6:
a2:5f:c9:82:5e:85:65:cd:ee:19:b5:4f:84:99:21:f7:99:09:
de:84:aa:36:22:37:66:df:ef:5b:ea:07:8e:c8:8c:74:f1:e7:
92:13:9a:11:8b:63:3c:53:fd:59:8c:c5:43:4b:1a:67:63:28:
16:b7:ec:78:57:66:9c:b6:45:cc:ac:5e:4f:7b:fb:b3:49:0f:
19:c4:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:59 2025 by rpki-client