Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: 1WgejWQccadJoDANQwhGmDvHVJ7xRyCJO4hVX7+Ma4c=
Subject key identifier: 05:33:B6:35:D7:85:3C:82:A4:CE:38:48:43:B4:D8:1E:51:CC:A5:EE
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 019887D6D59AC3256B41CF92A61E3618F9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 130D
Signing time: Fri 08 Aug 2025 04:01:00 +0000
Manifest this update: Fri 08 Aug 2025 04:01:00 +0000
Manifest next update: Sat 09 Aug 2025 04:01:00 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: J9wSH9grxIxVyqi49Wo7meHOWvS371pIt9a0vR0sIog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:d5:9a:c3:25:6b:41:cf:92:a6:1e:36:18:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Aug 8 04:01:00 2025 GMT
Not After : Aug 9 04:01:00 2025 GMT
Subject: CN=0533b635d7853c82a4ce384843b4d81e51cca5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:cf:e1:18:45:22:ea:b6:16:eb:dc:7c:d2:
72:f3:b9:aa:dd:91:82:08:1f:9d:82:e7:3a:f2:ba:
ef:e2:bf:a1:3b:81:31:9b:6f:b0:b8:39:ef:c1:6f:
c8:b5:93:31:7b:99:b1:f1:0b:b0:52:f4:39:a7:c1:
4e:30:e2:97:39:4f:3c:9f:cc:db:0c:0e:66:72:d4:
1e:de:11:15:48:2d:59:ec:74:52:90:83:ba:5b:e0:
aa:b4:e5:55:88:93:d4:90:36:6d:33:4b:44:e3:df:
be:00:9a:ce:11:c0:d5:94:fe:ca:3a:d5:f2:2a:86:
e8:8f:a7:30:5f:e0:8f:95:89:ab:ff:38:c9:1c:7b:
5b:45:0e:70:82:86:2c:b0:c1:3a:2d:e2:83:c6:47:
08:92:47:aa:64:bc:7c:9d:dd:8e:6e:b8:a4:0f:21:
0d:78:4f:fc:df:0a:54:15:a1:9e:6b:b5:ed:31:21:
20:54:7e:99:95:fe:f5:3c:ad:0f:40:9b:8d:41:fd:
e6:6e:c9:66:b8:c4:e9:8e:79:7a:50:a8:1e:86:a0:
23:85:3f:3b:a6:90:db:bf:ce:80:c0:58:ca:b0:78:
6f:da:b8:8f:08:05:fa:72:b1:0c:3e:9f:ea:d1:1c:
4d:ac:13:14:08:e1:56:5c:7e:4f:3d:e9:46:ee:be:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:B6:35:D7:85:3C:82:A4:CE:38:48:43:B4:D8:1E:51:CC:A5:EE
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:74:80:96:87:b2:3a:9a:de:c6:29:3a:c8:3e:53:ca:f5:
55:2c:32:07:7e:85:01:26:65:0a:33:f1:20:9a:65:36:64:26:
27:04:7b:62:8f:54:7b:30:c3:72:3a:b3:e6:0e:4a:62:5d:11:
8a:c3:b1:8f:b4:f8:68:8e:69:9c:27:e9:95:04:f6:e7:9f:8a:
ec:78:c4:53:2f:5c:20:ab:e2:b2:45:d1:cd:53:39:2c:e0:2c:
2a:86:89:fe:5c:f7:9c:e5:ad:34:48:d9:fe:67:48:a3:46:6b:
1a:0a:87:31:58:62:7e:4a:23:8f:fb:f9:1a:a1:af:ac:9a:54:
07:06:99:0b:3f:56:21:69:c3:5e:a0:84:63:e9:09:2e:f8:5e:
6f:ef:ce:c6:92:35:f6:32:09:13:dd:4e:df:6b:93:cb:6b:d2:
9f:fe:68:76:e8:89:74:1a:2a:e0:1d:97:e6:22:b7:ac:fa:0d:
ae:3f:8d:fb:0e:8d:49:60:e6:59:7c:45:15:3b:89:c6:25:57:
70:9b:d4:3a:c2:6b:12:fd:22:d1:55:8f:55:5d:17:d9:a9:66:
8b:f7:35:34:d1:3d:92:29:f5:39:94:b6:6f:05:a5:9e:0d:fa:
3e:59:d7:e3:3d:29:e7:13:03:dd:d0:ad:71:ea:82:77:8b:77:
f0:b3:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:25 2025 by rpki-client