Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: x+Va3ey3Nqlr87ftGvu8b3a+poAVyYXSW7dfPrpMcho=
Subject key identifier: 1D:39:0D:82:D9:10:26:F1:DA:D1:85:CB:2F:F9:0D:88:73:51:5B:44
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 01976A3C324ED8BB78BBE84B7033FC948FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0BBC
Signing time: Fri 13 Jun 2025 17:00:19 +0000
Manifest this update: Fri 13 Jun 2025 17:00:19 +0000
Manifest next update: Sat 14 Jun 2025 17:00:19 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: VDZS3vHobSMd9G6/sLiytDI8KdvcvPOBo/nTaa7AiqM=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:32:4e:d8:bb:78:bb:e8:4b:70:33:fc:94:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jun 13 17:00:19 2025 GMT
Not After : Jun 14 17:00:19 2025 GMT
Subject: CN=1d390d82d91026f1dad185cb2ff90d8873515b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:5b:b0:eb:cf:dc:8f:ba:bd:50:95:ab:23:
86:7e:09:48:8e:7e:6d:ba:e8:5c:a4:81:7b:2a:1a:
bc:4a:86:ed:24:65:8e:79:cd:8e:df:bf:a1:b4:56:
df:00:90:a8:2e:c7:57:98:81:73:62:19:3a:e8:6e:
c9:d7:49:7a:58:2e:a7:8f:7d:9d:3f:04:19:65:36:
91:69:02:ec:98:83:17:ee:43:1a:b9:1a:f9:dc:95:
ed:1c:40:36:7f:eb:1a:db:be:c3:50:a3:9a:c3:7d:
50:8e:d3:95:e2:26:be:1b:fd:7a:d4:eb:62:33:db:
c4:5a:b1:bf:19:44:ca:0a:70:7f:a4:0e:35:8b:66:
cf:72:89:9e:c2:c5:1d:cd:ca:73:0c:c6:f8:29:84:
74:8f:30:99:4e:2b:59:c4:33:e0:25:40:b5:24:37:
3b:3f:a6:e7:6b:a5:3c:9e:17:60:a8:7a:66:c6:8d:
3a:5f:61:a7:34:e5:a4:55:4a:f2:63:28:5b:19:fc:
7f:8d:1d:ec:80:b2:03:76:1c:f5:df:b0:19:70:3f:
9d:92:f0:70:5c:7b:79:60:64:50:82:5b:4b:1c:27:
c2:77:a1:c7:c6:50:63:e0:bf:41:d5:9e:f3:13:e7:
43:ae:ef:df:ea:1c:84:db:af:3d:c4:03:41:11:eb:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:0D:82:D9:10:26:F1:DA:D1:85:CB:2F:F9:0D:88:73:51:5B:44
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:79:c7:a5:1d:ab:b9:23:7c:db:b8:35:19:9d:20:a3:3c:
2d:23:da:c1:a2:2a:96:54:9a:58:53:2a:67:2b:12:28:f6:35:
46:0f:35:a8:57:55:2b:6a:0c:41:3e:f1:85:4a:9e:13:b0:6b:
49:d2:51:8e:cb:9c:71:40:a7:6b:d9:9f:51:bf:4a:cd:e9:25:
1f:7c:47:31:98:35:e1:1d:ce:7b:27:03:7e:4c:f8:61:9e:6f:
e3:80:ce:49:8d:1b:0e:bf:29:ac:92:dd:44:21:3b:f2:6f:da:
f7:80:af:ed:3a:c7:29:a3:64:df:8f:ed:1b:09:43:34:90:96:
70:f8:03:23:90:4f:df:9f:ee:a0:df:2c:4c:10:a3:19:4b:f0:
b1:6b:49:7e:2e:d1:48:a4:39:fb:24:8d:4c:4c:b3:c6:7c:8d:
9d:78:7e:db:2d:6c:47:1b:3a:9e:57:55:4a:a4:66:b2:db:8d:
b6:9e:e0:04:f8:24:21:9e:29:17:0c:e8:6e:04:5f:a7:24:9e:
92:ef:0c:a2:c1:54:ae:1c:ed:7f:e5:2e:59:b9:c5:5d:b5:56:
6b:df:1f:fb:2e:8b:6c:5c:73:62:22:1b:08:23:50:2b:37:43:
d1:24:85:16:e3:6f:59:5c:c3:42:89:bc:46:31:bd:fa:66:ce:
96:d3:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:43 2025 by rpki-client