Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: ee/84v7YT8rLRXkcSK2dGgCSrbj970XVaRlOdqkUe3o=
Subject key identifier: D7:65:87:A4:A9:10:0B:C8:70:70:26:E6:DE:DF:93:24:88:8A:1F:B2
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 01987562A7133944CD143914A9A165E006A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1359
Signing time: Mon 04 Aug 2025 14:00:56 +0000
Manifest this update: Mon 04 Aug 2025 14:00:56 +0000
Manifest next update: Tue 05 Aug 2025 14:00:56 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: 4sAlu2/UBOXi+kJvS5BZb6BeWd/j+6S3POY7lSIV0Og=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:a7:13:39:44:cd:14:39:14:a9:a1:65:e0:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Aug 4 14:00:56 2025 GMT
Not After : Aug 5 14:00:56 2025 GMT
Subject: CN=d76587a4a9100bc8707026e6dedf9324888a1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:d7:91:17:17:63:1f:c9:ef:33:63:cc:09:
d3:c3:0b:cb:47:d2:2a:4e:a3:b3:ab:58:b3:fd:85:
2a:db:66:df:b7:54:29:5e:ed:2b:e6:5e:98:73:5d:
21:2f:08:90:57:89:4b:b7:01:c9:fe:9f:2a:fe:80:
1a:15:53:c6:1c:13:02:c8:04:28:7a:d6:31:38:5c:
9f:e9:9d:06:f7:67:9b:74:b6:f2:62:2a:0e:cb:99:
a9:70:7c:10:e9:12:df:e4:7b:67:3e:86:e7:5e:32:
59:31:b4:44:18:a8:0f:86:4f:22:d5:59:7a:ad:e6:
03:f3:68:38:9c:d4:25:81:b9:6e:72:d0:00:17:9a:
fc:50:76:24:49:2a:db:5c:b1:ff:f5:9f:e8:da:20:
3b:fe:43:79:15:83:fb:af:1e:03:d7:88:b5:a0:3e:
02:b3:77:7b:48:ab:5d:06:e9:25:dc:37:5a:e1:c3:
6e:f1:68:96:00:a0:72:d4:b4:56:df:b8:08:2a:75:
26:2e:e4:49:19:33:08:fc:de:e7:e1:b7:6f:b1:a7:
f4:bf:55:d4:b9:23:54:9e:83:23:c4:08:0c:1e:6d:
81:97:53:fe:88:80:a3:7d:24:0e:b2:1b:6c:27:f4:
01:9b:68:bd:4e:a4:cd:e1:da:5e:f7:8b:8f:cb:4e:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:87:A4:A9:10:0B:C8:70:70:26:E6:DE:DF:93:24:88:8A:1F:B2
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d3:e6:cb:fa:ed:77:7a:80:cd:56:9f:be:99:15:49:77:bc:
02:9b:fa:d6:84:e0:f2:aa:aa:00:2a:54:2b:49:dd:77:47:85:
99:e0:0b:a1:49:e2:e6:47:8e:a2:3b:91:a5:74:9b:2e:2b:6c:
ff:f9:db:74:7b:b8:bb:fb:ed:21:d0:14:15:c2:2d:09:42:fc:
8e:7e:4f:11:f7:e0:40:15:82:b2:60:7d:59:f3:71:c1:00:5c:
6f:d8:db:3c:73:0b:15:6a:f2:d6:a6:5e:72:1e:3d:23:6b:ba:
96:c7:fc:15:5c:d2:ad:d7:eb:bb:82:d1:f0:54:3c:57:a5:52:
62:28:44:3b:8a:63:ad:e6:0f:f5:06:63:69:32:7c:7a:20:2b:
d2:30:95:2a:c9:28:48:76:6d:4c:35:71:6b:b7:d2:3b:aa:a5:
d6:e3:4a:e8:07:9a:e7:2b:b0:c5:bc:a5:8d:01:e0:57:7f:b8:
e4:48:c3:6a:c9:7a:34:a6:a0:d2:a1:10:f5:d6:4a:3b:40:44:
d8:30:de:9b:53:9e:a9:14:f1:0d:85:82:11:0a:2b:d2:e8:83:
65:48:3a:63:52:d8:12:5a:29:0f:35:ad:84:0b:29:42:bc:fb:
5d:bb:50:10:51:b1:11:62:d6:5c:09:9c:71:2d:ce:05:af:08:
b6:40:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:24 2025 by rpki-client