Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: jCL2BVnwOAYfW26oWJHlnbaDah0QFUeRrHfw56cHeho=
Subject key identifier: AE:93:C4:3E:7F:81:C9:18:84:B5:BA:4A:FC:50:8C:2A:5B:92:17:69
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01987CAE70F9C83024E5BEA64CFA12265421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 023E
Signing time: Wed 06 Aug 2025 00:01:03 +0000
Manifest this update: Wed 06 Aug 2025 00:01:03 +0000
Manifest next update: Thu 07 Aug 2025 00:01:03 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: 7CNfBJ3J8oB3OR6OvrlsWa4ZtoAAKMzC3MztXQi7T0Y=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:70:f9:c8:30:24:e5:be:a6:4c:fa:12:26:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Aug 6 00:01:03 2025 GMT
Not After : Aug 7 00:01:03 2025 GMT
Subject: CN=ae93c43e7f81c91884b5ba4afc508c2a5b921769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:5b:d1:58:b1:1c:84:7d:a8:32:2d:c8:ef:
39:2e:e9:e6:cc:77:98:11:df:19:cc:f0:25:48:2b:
60:96:a0:a1:2e:82:10:d3:c3:cd:a4:9a:80:b8:01:
8f:0c:44:2c:3b:88:53:30:7c:50:54:f4:bf:b9:56:
72:e3:9f:86:f4:af:7b:b4:80:0c:57:d2:ae:2d:20:
35:83:bd:ec:66:a6:7e:eb:8b:3b:65:20:4c:90:a7:
d4:96:f4:ca:2d:5e:72:11:41:80:54:1e:c7:ce:32:
5c:d1:b3:52:4f:a1:96:8b:c8:92:93:ee:cc:d8:1c:
b5:e1:8a:60:eb:c9:fd:39:59:23:b1:03:99:93:e2:
3b:77:84:1c:af:48:b8:df:65:ce:24:3a:ba:b0:ce:
0b:88:ab:95:db:dc:d0:0f:fc:07:8d:f7:a3:f7:4d:
b1:6b:a1:52:f4:1b:ef:5d:03:94:b3:46:3c:b8:ef:
f0:6e:6f:88:91:b2:32:b4:9e:53:0c:d1:30:57:08:
6a:7b:8f:8e:2d:f8:5f:68:4d:0c:c8:1b:08:80:0d:
28:79:60:e9:a9:19:32:5c:ac:f7:df:52:65:1b:a5:
0b:2c:94:3b:77:bf:b5:a3:d4:bc:b8:85:50:ad:54:
19:d4:f6:82:7e:37:a2:4f:e4:07:b2:ee:50:5d:dc:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:93:C4:3E:7F:81:C9:18:84:B5:BA:4A:FC:50:8C:2A:5B:92:17:69
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f4:c9:f9:c5:b0:3e:b6:1a:f6:8c:f0:93:dc:8b:74:1f:2f:
b3:45:30:89:8b:a4:53:7e:39:c7:29:cd:3a:cc:db:66:50:37:
e3:28:c7:0c:d5:a8:1d:33:5a:46:1c:8d:56:32:cc:c8:52:e5:
11:3f:19:6b:39:c7:89:aa:54:df:4b:99:0c:89:d5:c1:98:39:
4d:5d:de:bc:34:4f:b2:53:12:b7:2f:ba:09:12:b4:11:4e:aa:
a1:4b:70:e1:e6:9a:d3:62:f0:57:03:84:a0:9e:6c:48:57:3f:
57:75:52:d7:ed:f5:ef:70:db:af:9e:a4:fb:72:c3:b0:18:42:
71:e8:8b:07:ce:81:09:bc:f9:df:16:da:7d:37:e7:3c:d1:16:
14:44:11:26:42:ab:43:7b:9d:5f:b7:fb:a5:43:73:84:db:4e:
b7:cb:1e:6a:8d:cc:28:a8:13:15:3c:03:51:40:c8:fd:a1:de:
df:80:1b:cc:e4:b2:51:e3:38:5e:61:38:51:a4:19:d0:06:a6:
57:0f:d2:ec:e3:14:92:e7:e0:f1:6d:0a:0a:5f:f3:e9:ae:e4:
21:db:9c:db:72:c5:6a:1c:da:26:e0:30:50:ff:06:a9:a0:d6:
1d:07:5e:b3:fd:6e:b3:1b:78:e6:dd:43:d9:6b:94:4d:32:b8:
f0:c9:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:00 2025 by rpki-client