
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: gPMhCPnE1uBGYiDA8J4/lhVRE+O1waJsk3AAYJI+64A=
Subject key identifier: 43:56:35:F2:82:87:1E:FF:71:08:0B:56:58:D2:BA:27:66:9D:7A:22
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0198744FBB4B987614083AB32F1CB0851FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0865
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: DNBLqsAyox/LlWyjsRKpOjl6jwlDGKGQoEctvt+xcUQ=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:bb:4b:98:76:14:08:3a:b3:2f:1c:b0:85:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=435635f282871eff71080b5658d2ba27669d7a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:ad:f3:6a:02:d3:37:59:6c:9b:63:35:36:
ed:46:45:f5:c9:99:7f:6a:4a:65:ea:eb:b0:66:7d:
99:ff:28:97:4b:6d:da:e1:fe:b5:e9:8e:d3:15:e9:
f1:e1:43:12:49:e5:30:06:d9:d3:bb:f2:fb:77:84:
cf:a3:02:17:e3:a2:9d:c7:74:6b:a8:73:e3:8f:01:
f7:d0:54:74:d4:eb:31:36:ce:98:1d:fa:00:43:c8:
f2:1a:46:82:92:4b:38:2f:29:ce:34:ce:71:a0:50:
f4:1b:c9:1e:19:8a:f7:b1:7e:9b:ad:09:a4:f0:03:
58:41:c0:c7:99:0b:b5:47:63:ce:93:e0:a9:35:b0:
52:d7:3f:86:9b:f3:ac:31:49:9d:d0:95:75:86:2b:
23:d2:6a:a1:1c:81:de:9d:68:06:0b:f4:2b:5e:4c:
4e:82:5d:b6:85:30:e6:bc:e1:43:6b:89:ab:9d:73:
39:95:b7:b8:b3:76:39:55:ea:b4:3a:52:48:8e:fb:
1a:35:e3:cb:e2:74:f4:ae:31:f6:cc:cf:fa:df:c5:
5d:3f:ba:c6:f5:6a:01:12:2c:7e:f3:1d:a3:94:b8:
92:f5:3e:17:18:51:49:fe:37:17:6f:2f:f7:d1:0e:
84:08:96:b9:3d:b8:1d:e7:e7:bf:01:fe:d3:91:66:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:35:F2:82:87:1E:FF:71:08:0B:56:58:D2:BA:27:66:9D:7A:22
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f7:fa:3e:c5:76:3f:79:b4:10:0a:a6:3f:99:dd:24:16:41:
9f:e2:87:31:df:21:8e:4f:3d:b4:a8:2d:5c:3a:c3:66:50:2b:
c9:3b:8b:12:1c:c2:03:0c:75:be:ac:0b:db:bf:aa:80:c2:ed:
84:5e:4b:15:5f:f1:99:b6:9d:2a:40:35:49:c3:ca:df:76:45:
a4:c4:e8:0a:bf:0b:64:27:85:8e:bf:1f:57:08:e9:6a:59:f6:
6c:d8:cb:24:f9:1f:09:13:e9:03:84:70:28:eb:8d:88:73:33:
18:74:65:96:fb:4f:32:a2:d5:7e:10:1f:81:f2:d0:80:a0:ed:
81:63:82:8d:74:47:f2:35:f2:43:95:65:4f:3e:a9:7c:4c:32:
ab:32:3f:30:e9:77:8a:8b:f0:26:6e:02:59:f5:50:85:04:0b:
0a:6e:cc:14:32:ae:4a:b8:ce:b0:1c:70:4b:a0:9f:d5:b7:a9:
e8:7d:c7:81:6d:bc:3c:a2:98:a9:06:2a:67:61:b6:02:da:9d:
e6:49:ed:1f:21:cf:3f:c7:1f:e2:3c:36:f2:ca:28:00:6c:25:
f5:9a:14:cf:b2:5e:f8:e3:88:d2:43:26:d4:de:87:06:f9:55:
b9:7c:4d:d4:f5:54:d8:55:6a:a6:2c:91:c7:56:2d:3d:42:b6:
ed:c6:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:49 2025 by rpki-client