Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: WFNRMU3qF+VyITwR1rxm0UMlpgNzzzHTXSRZfjuTe1U=
Subject key identifier: 9B:9A:38:04:56:B8:C4:73:49:84:3D:93:90:10:3B:E8:DF:C6:F8:A5
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01988A6A432D82F44D64F62FD9B19BB94C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 01D7
Signing time: Fri 08 Aug 2025 16:01:16 +0000
Manifest this update: Fri 08 Aug 2025 16:01:16 +0000
Manifest next update: Sat 09 Aug 2025 16:01:16 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: 7GnYo+NUbkgYbWhkwauoMW0lP1XTTjvXDSniKDywaPM=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:43:2d:82:f4:4d:64:f6:2f:d9:b1:9b:b9:4c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Aug 8 16:01:16 2025 GMT
Not After : Aug 9 16:01:16 2025 GMT
Subject: CN=9b9a380456b8c47349843d9390103be8dfc6f8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:34:b5:81:cc:30:5e:02:42:87:88:e3:ff:
68:dc:f8:7f:2c:d2:41:24:42:52:f4:4e:15:1c:67:
20:71:68:57:16:81:9a:c6:86:c6:7a:c1:f4:75:45:
a5:17:49:28:33:11:ea:e0:e2:46:c3:e8:e7:bb:42:
c3:fd:35:e6:e6:8d:22:d6:98:54:c7:55:cb:e8:11:
a6:98:66:70:bb:fe:56:ef:39:47:21:4c:61:03:81:
c5:92:0e:a5:1d:64:60:ba:00:64:42:72:eb:7f:c5:
11:e2:45:f8:d8:6c:5e:67:0a:13:df:54:f4:5e:73:
79:c9:05:0d:53:72:09:c9:eb:7f:92:18:7d:a8:ad:
91:76:89:79:64:bf:b6:ba:34:b5:94:86:da:68:8d:
ff:c8:c3:77:94:82:1f:3d:6e:2a:e0:14:aa:e0:15:
a9:ec:e8:c5:31:e5:5f:e0:eb:24:64:d6:2a:b1:e0:
69:f6:c7:da:7c:63:dc:54:78:17:c7:3c:63:3c:bb:
4b:29:0c:d1:ab:e9:83:15:61:dd:6d:71:c0:c5:c9:
5d:d7:7b:c5:83:d2:dd:98:28:a3:2b:e8:0a:0b:82:
89:68:d4:eb:a3:57:20:c8:f2:65:c8:7a:da:13:82:
ab:02:aa:34:e4:5e:95:15:12:13:12:78:5d:2e:16:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:38:04:56:B8:C4:73:49:84:3D:93:90:10:3B:E8:DF:C6:F8:A5
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4a:9b:fb:dc:ac:a8:80:ed:ee:5a:34:e5:e6:ce:7f:5e:3f:
46:7d:c8:13:c4:c3:ed:f6:e5:92:9b:59:74:32:bf:fd:6b:94:
12:b4:5d:9c:f9:7a:e5:26:1e:98:89:2e:97:7b:42:04:09:68:
a7:ad:b4:f1:d2:8a:77:a5:ef:af:65:d4:06:82:2e:a2:a7:b4:
0d:a5:ff:ff:0d:b6:90:76:98:37:da:98:d1:11:14:c4:8f:0f:
29:08:7c:7d:af:6e:07:46:5e:d0:1b:e8:e9:7f:2a:8e:3a:d5:
8b:86:d5:57:9f:ea:76:29:2b:e4:02:df:da:3a:b1:f7:66:2e:
11:c9:4d:cc:99:e4:9e:f9:fb:9a:71:27:2d:03:c7:56:af:69:
d1:8e:88:3d:c7:09:64:86:c2:58:a6:48:7a:c7:aa:6f:f9:45:
92:c0:11:ec:7a:d9:88:95:f9:a6:7f:cb:bf:2e:ed:fb:ae:e4:
a1:01:d1:8a:ea:79:5f:d0:2c:fe:c7:dd:d7:b2:34:15:e6:03:
d6:a9:f7:cb:0d:bd:01:a4:80:89:1b:b0:6e:42:9f:fb:7f:fb:
be:d3:e3:d1:7f:30:c5:a3:d1:f3:55:ac:d2:81:e7:b4:36:8b:
ab:0c:46:2e:b4:ef:84:20:b0:57:3c:d7:a7:30:5f:76:c0:21:
2f:60:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:52 2025 by rpki-client