Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: 1QXtYLCe5pv5q3ogJ9Xs+FEyCpdlYCJTTGgN5mE0toU=
Subject key identifier: 18:2F:72:EE:8C:E4:AC:4D:89:34:1D:72:7A:85:80:AA:3D:D1:28:4E
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01988EEB52436C95C2AB66A3FF6E89860BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 04F0
Signing time: Sat 09 Aug 2025 13:00:43 +0000
Manifest this update: Sat 09 Aug 2025 13:00:43 +0000
Manifest next update: Sun 10 Aug 2025 13:00:43 +0000
Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: KMEe3+FeHbWhR7c2TIf2UYWTLvFYt7KrRmv+laLzOSo=)
2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:52:43:6c:95:c2:ab:66:a3:ff:6e:89:86:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Aug 9 13:00:43 2025 GMT
Not After : Aug 10 13:00:43 2025 GMT
Subject: CN=182f72ee8ce4ac4d89341d727a8580aa3dd1284e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:07:4f:ae:6c:09:db:6b:4c:13:b4:77:99:
54:30:73:5a:03:3a:52:83:bb:d3:8a:fb:10:59:9d:
11:fc:8a:22:34:84:53:ad:17:5a:60:88:86:70:74:
42:2b:ad:27:f5:4e:98:1e:26:bd:87:e8:22:dc:fd:
7c:3f:0a:ad:37:f3:18:1a:86:68:4f:6f:e6:8b:98:
9b:c9:07:c2:c0:eb:1c:77:1d:1b:6e:57:64:76:ad:
8e:93:63:fb:d5:45:a6:71:af:e4:7f:7d:39:4a:68:
84:27:f9:a5:7e:12:87:a9:a4:b5:46:39:6f:df:ce:
bc:d8:21:7e:43:01:8e:b1:6c:96:ef:05:53:dc:d5:
30:16:be:a4:e6:04:ad:cf:20:54:39:6c:5e:f4:ad:
5c:33:28:12:6c:08:f6:86:e9:dd:85:92:ca:3b:fd:
ea:ea:0c:b9:29:22:15:c4:55:2e:c6:7e:18:1e:05:
a0:3c:6f:b6:e9:98:59:2b:cc:2f:44:d5:59:5f:6d:
58:84:e3:ae:ac:b9:8d:32:69:45:ef:c8:ee:bf:f6:
36:c6:86:9c:d3:38:d7:82:c4:6f:b3:7a:01:43:ca:
ae:ac:0a:4b:5e:3a:9e:d5:5a:e7:8f:1e:f5:6f:4a:
0d:d1:cd:49:a2:02:23:95:72:a7:99:4b:12:5c:03:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:72:EE:8C:E4:AC:4D:89:34:1D:72:7A:85:80:AA:3D:D1:28:4E
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:50:23:47:fc:7f:8d:f5:7c:36:9e:02:5c:98:09:6e:a7:5f:
2a:90:6b:0a:68:88:ee:42:30:e6:c5:f7:26:ec:02:65:cf:3b:
98:c5:f7:5f:ec:a6:22:6c:98:6f:d7:b8:12:e9:6c:69:1e:70:
0f:e9:a5:0d:8e:3a:2a:88:8c:e6:ad:8b:b4:32:e0:af:64:cb:
65:6c:9a:bc:84:0f:67:85:09:e1:90:ab:e3:8d:bd:0b:cc:4e:
bf:e4:7f:2a:d5:5c:81:f9:11:95:4f:5f:e5:bd:fc:a9:17:9f:
f7:24:26:a1:8c:fb:bc:9c:19:49:da:ae:73:4c:fe:32:92:5f:
35:21:b1:d1:3f:82:86:ab:6c:3d:0d:a4:e5:66:ab:2d:98:65:
77:1c:da:6f:b1:e6:d0:83:f6:51:dd:8b:8d:34:c9:01:5d:15:
3b:d2:36:6e:c4:ba:29:ba:a5:22:64:b9:9e:c8:68:06:af:01:
ab:84:8a:b0:84:cc:6f:b4:8a:b7:43:df:49:86:a0:ee:29:16:
2a:2e:53:59:75:e9:55:3c:ad:b0:ff:8f:cc:22:c0:f1:0c:b4:
b5:25:7f:03:fa:18:68:c2:e9:4a:7a:83:8b:85:0e:e6:d7:e7:
b0:bf:b4:66:c6:d4:52:8b:48:c4:5d:7c:f7:56:1b:a6:49:c7:
8d:c2:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:42 2025 by rpki-client