Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: TpYE8uYf+tcMoGNgwJqJ+t0912z/U7OZOJRAhtCoN+s=
Subject key identifier: B3:13:A4:CB:E8:11:FF:8C:C0:60:DA:5D:66:0A:49:04:18:6D:4F:1F
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 01977AF9453EB3ACB688BC33F5D0B6303DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: 0126
Signing time: Mon 16 Jun 2025 23:00:45 +0000
Manifest this update: Mon 16 Jun 2025 23:00:45 +0000
Manifest next update: Tue 17 Jun 2025 23:00:45 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: jn9vWbz7PADFd2ZL5qmwAzfyTKdcYSK72NIB9CGvE1Q=)
2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:45:3e:b3:ac:b6:88:bc:33:f5:d0:b6:30:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Jun 16 23:00:45 2025 GMT
Not After : Jun 17 23:00:45 2025 GMT
Subject: CN=b313a4cbe811ff8cc060da5d660a4904186d4f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:cd:bf:c2:fe:52:e2:92:39:a9:04:73:b2:
61:97:32:f3:0a:52:77:81:56:19:11:06:65:71:9b:
7c:12:80:4e:0d:6f:ba:c5:93:a4:66:aa:d1:99:44:
7a:1e:30:4e:11:54:33:0a:5c:c6:51:d3:9c:4e:53:
4d:24:e0:7c:e7:c4:1b:d7:76:a1:bd:ae:ae:a3:2f:
79:e7:80:50:7c:8a:6e:4b:40:09:02:dc:f7:1b:65:
e0:28:f9:a8:63:43:bc:4a:dd:1d:0e:a8:e1:b2:4e:
f9:94:10:52:90:95:c0:8b:c8:64:23:01:1d:dd:80:
20:2e:a1:5a:3a:d0:95:f1:a7:35:03:07:ad:06:a4:
84:42:c9:cb:7f:5d:4c:3f:60:68:f7:2f:08:49:87:
a0:84:0f:c0:01:18:73:40:b0:d6:8e:c9:12:cc:e9:
01:b0:3e:bc:5d:ea:b7:3d:43:09:a0:78:cb:79:b6:
e0:66:0c:f1:74:b6:d2:4e:52:48:6c:9f:ec:e9:c1:
1e:2e:49:ec:be:1a:fc:38:fa:82:ef:e9:aa:27:28:
27:4e:2e:f1:6a:fb:98:a8:09:3b:a2:8d:dd:3b:10:
2f:09:99:cd:c2:29:5b:64:3b:ab:c2:65:37:df:27:
cd:bb:24:5e:a5:83:12:ec:ea:81:60:ac:bd:14:3f:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:A4:CB:E8:11:FF:8C:C0:60:DA:5D:66:0A:49:04:18:6D:4F:1F
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b0:08:6c:8f:63:35:f6:8e:c6:68:87:ec:86:71:15:72:d2:
1a:9c:1a:f6:04:cc:1f:77:8b:e4:5e:c4:b9:d4:24:0c:fa:4e:
69:2f:f9:6d:9c:92:91:52:0c:28:6b:8c:de:b7:35:6c:f2:09:
0f:84:e3:df:89:26:a0:8c:3f:a2:c3:42:33:e4:02:d9:5c:ed:
ce:57:21:c1:61:ff:c6:36:81:f2:d7:3a:7b:17:5c:a5:b8:bd:
d7:99:85:d9:79:e0:b9:ae:ac:e2:6e:35:91:85:24:f8:76:c7:
a7:5d:cf:3d:ff:20:00:36:a9:44:bb:49:99:ac:08:37:aa:c3:
72:90:9a:bb:85:f0:c5:0c:21:1a:ad:62:c0:47:d0:51:a5:fc:
40:04:40:c9:cb:40:ff:c1:ea:f6:42:d5:07:e8:05:10:ff:1d:
0f:28:04:09:49:42:ad:b0:50:62:a4:48:4c:78:c9:42:48:fe:
59:cf:ca:12:57:8f:72:c4:3f:10:c4:e8:95:06:34:2c:87:a2:
d2:2d:09:c0:39:4e:0d:3e:9c:ec:bf:a3:5a:7e:9a:3c:20:41:
6c:a5:96:91:a4:49:db:4f:9d:42:df:19:2f:65:48:fd:43:5a:
59:7b:43:e8:fa:52:14:95:79:a0:b3:1d:5e:90:84:48:58:60:
e4:67:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:49:09 2025 by rpki-client