Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: tV5KigGCCXtaF1wlQ8Fd4CpPRn+IJNERHNF5JPn0DlQ=
Subject key identifier: B8:4B:8B:BA:8F:29:EE:CA:29:F0:D6:2F:F0:B8:E3:78:45:EE:FE:92
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 01988D6B2D7FDDEEEA3702FAC504BFBF67A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0483
Signing time: Sat 09 Aug 2025 06:01:08 +0000
Manifest this update: Sat 09 Aug 2025 06:01:08 +0000
Manifest next update: Sun 10 Aug 2025 06:01:08 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: FHZ3YgdPG2AQFTtTPSbm1yU/fTf/s849ns+7P3kHZK0=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:2d:7f:dd:ee:ea:37:02:fa:c5:04:bf:bf:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Aug 9 06:01:08 2025 GMT
Not After : Aug 10 06:01:08 2025 GMT
Subject: CN=b84b8bba8f29eeca29f0d62ff0b8e37845eefe92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:f0:81:3d:4e:43:fe:65:14:8a:f2:b7:0b:
41:8f:e0:50:94:a3:e1:df:63:90:27:ac:53:71:ed:
d9:ca:7a:49:fe:5d:c0:05:02:3e:ca:2b:3a:a0:e2:
ae:6b:fc:fe:25:6f:31:fc:bd:4a:5a:d5:85:c7:cb:
a2:a1:43:3c:91:44:50:25:4c:3e:99:3a:dd:de:5a:
23:d3:a7:a5:b4:9a:1c:50:7c:42:00:3b:5a:43:5f:
4f:66:e2:e0:90:59:85:74:8e:d5:d6:89:fc:41:d8:
ce:20:f9:2e:c0:f6:58:bb:94:69:c1:10:38:3c:12:
b1:4f:b8:7d:a5:49:00:57:97:09:16:79:31:ee:e2:
48:f6:82:2e:71:84:69:a4:db:9d:a2:a1:d5:45:cc:
7e:3b:19:54:86:d8:d1:83:87:c2:02:f1:7f:00:c5:
be:74:c0:e7:fa:ee:dc:94:8f:6a:e9:6c:6b:77:c5:
a0:33:e3:af:da:31:85:02:28:93:ed:c0:8d:aa:b2:
28:12:94:8b:2a:7f:44:54:87:d9:02:39:7b:8a:9a:
45:1b:c9:cc:e7:7d:88:34:ea:db:cc:59:16:63:3c:
6c:9c:16:b0:88:aa:b5:9b:5a:e1:1e:e5:62:10:c8:
9f:f0:e2:f7:cf:b2:26:6d:74:96:ba:0c:e9:46:40:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:8B:BA:8F:29:EE:CA:29:F0:D6:2F:F0:B8:E3:78:45:EE:FE:92
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:7f:ed:fc:14:c2:4c:91:d6:d1:98:53:28:ae:75:c9:71:
7c:aa:cd:35:4d:77:45:33:4e:f7:37:b0:22:95:93:2e:a3:25:
ed:cb:a2:1c:74:81:be:06:60:0e:82:82:80:4c:25:89:95:88:
2c:25:aa:97:58:85:60:8c:cd:4f:4e:e2:9c:41:69:1b:3b:71:
d8:f1:50:32:ef:7b:f5:7c:a5:91:5e:1a:48:f4:47:8c:a9:e4:
ec:12:4f:b1:ef:26:ad:e7:25:c7:d0:26:cb:f1:3e:81:c3:9c:
62:5e:79:76:aa:d4:28:32:b2:87:b0:c3:1a:c7:e1:39:ca:dc:
66:16:03:e0:a1:5e:a3:51:6b:c0:9e:17:70:ae:47:00:f1:87:
ef:50:2f:95:d9:de:46:e4:f5:57:36:43:90:59:ed:e6:20:50:
cd:75:3a:45:23:c7:31:d0:20:f9:70:51:e4:cf:ac:42:e0:79:
d3:6d:97:fa:71:c6:ea:32:22:e1:b6:89:28:8b:dc:7c:5a:79:
d1:6a:c9:66:1e:21:83:21:8d:2a:81:12:0d:f7:d9:b4:4e:a8:
2c:53:2a:8b:58:b5:1c:2d:e3:17:e8:ec:0a:5d:fc:df:c7:0d:
5d:7e:dd:65:d9:52:95:59:2a:7a:69:51:62:63:c8:6a:8e:09:
2a:7b:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:48 2025 by rpki-client