Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: zc6FIlRdnbx152mZAO8aGAv3r5hMKQFszLwv/EeYIAs=
Subject key identifier: 3F:89:4E:00:2A:F2:4E:8B:E9:79:05:18:2B:50:DC:DB:AC:61:AC:14
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 0197741BA19EDBEAB6AEE45AECF36BFC28B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 01B5
Signing time: Sun 15 Jun 2025 15:00:57 +0000
Manifest this update: Sun 15 Jun 2025 15:00:57 +0000
Manifest next update: Mon 16 Jun 2025 15:00:57 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: UXjmHcSrCNkOVSrMuRlYpq+qXt35zqNF2ArtAlNTnSI=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:a1:9e:db:ea:b6:ae:e4:5a:ec:f3:6b:fc:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Jun 15 15:00:57 2025 GMT
Not After : Jun 16 15:00:57 2025 GMT
Subject: CN=3f894e002af24e8be97905182b50dcdbac61ac14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:78:7b:24:b3:79:6f:cc:65:e4:f1:8a:7e:
75:d5:00:b9:db:5d:6e:6a:e4:98:28:e1:ae:4b:0e:
6f:b4:a4:f2:c0:72:5d:82:4e:dc:87:c1:14:94:a1:
46:e0:cb:3e:b7:87:ac:fb:e8:a3:93:32:44:59:c3:
4b:5f:c9:28:8a:a2:09:71:65:3f:a4:b3:3f:a2:d2:
a2:38:81:65:c4:c7:d6:7f:b9:cb:5d:e6:5e:fa:73:
2f:e3:d3:ae:1e:5c:c1:96:52:c6:2d:24:9a:b2:23:
f3:61:9e:92:6d:56:33:67:19:52:13:bc:28:0f:39:
c8:d7:0b:5b:b7:c4:61:27:e7:70:9a:6c:64:74:06:
72:16:ab:6c:e4:10:bd:db:37:56:70:fe:5d:33:f7:
30:ee:a3:47:5f:55:5b:cc:29:5b:01:89:f0:6b:4b:
9b:eb:ef:c2:e2:19:0e:8b:e5:91:b4:48:03:14:ed:
58:4a:6b:d5:de:de:53:78:6c:ca:5c:21:68:91:a5:
fd:46:b4:be:2e:df:38:59:aa:c5:ed:31:81:91:a8:
0c:98:b2:5f:a5:dd:0a:46:37:b3:d1:c5:c5:c4:e9:
e7:b9:3d:e8:14:f5:ba:38:49:56:c3:82:73:db:c8:
be:ac:3e:bc:86:e9:0b:ec:f5:e6:51:f9:56:67:64:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:4E:00:2A:F2:4E:8B:E9:79:05:18:2B:50:DC:DB:AC:61:AC:14
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0a:45:c6:81:9c:bc:54:dd:49:1e:82:ee:da:ea:e0:34:5c:
8e:cf:b7:08:30:c9:03:0b:65:5b:be:81:f3:8f:40:5d:78:45:
96:6a:c2:fe:f5:24:0b:36:17:93:cf:71:ef:66:d5:14:3a:d0:
9b:03:dc:dd:cc:05:69:6d:77:e3:00:50:be:6f:bf:78:bb:6a:
0c:16:53:e0:fc:b1:df:f2:23:b9:9a:f2:42:82:ad:c4:42:4f:
2e:92:73:b8:11:2c:a1:f2:ae:01:d8:56:76:92:00:80:98:d3:
29:6d:71:ba:3e:8d:ff:9e:ce:3e:33:e2:93:39:fb:7f:bc:7e:
eb:a3:5a:55:7c:78:84:63:5e:44:2b:55:ae:f2:c1:53:08:3e:
d8:28:cc:83:74:bd:d8:cb:61:68:65:53:31:3d:ff:6e:b5:f0:
82:e7:26:64:3f:5f:42:88:69:02:9e:f8:83:4a:25:6d:4a:32:
35:ed:52:b5:c7:49:4f:cb:05:67:f4:a3:6c:ee:0a:57:45:31:
1c:91:5b:7e:04:69:d7:38:68:5c:ec:b0:f1:a0:39:7d:47:fd:
a2:68:75:3a:79:69:92:d0:10:db:1e:c7:16:d4:23:d5:c3:7f:
33:37:83:ee:dd:27:33:b4:33:8a:81:ba:29:14:a5:2e:48:f8:
50:b9:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:42:03 2025 by rpki-client