Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: 3IN34PRTcTF6XHWBEVSERrKWL9f3DFkgROZxRmsRSKk=
Subject key identifier: 1E:7B:28:3A:D2:98:52:96:03:54:8D:6E:D6:54:23:E1:5E:9A:05:3A
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 01976BF3E632F64DE620AC81BAA9BB1478F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 01:00:35 +0000
Manifest this update: Sat 14 Jun 2025 01:00:35 +0000
Manifest next update: Sun 15 Jun 2025 01:00:35 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: CR3Omn7yCXz3teSfWMSQOJBzM/cfnwWTLbC/SGkylwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:e6:32:f6:4d:e6:20:ac:81:ba:a9:bb:14:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jun 14 01:00:35 2025 GMT
Not After : Jun 15 01:00:35 2025 GMT
Subject: CN=1e7b283ad298529603548d6ed65423e15e9a053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:6b:eb:00:39:6b:d1:3b:96:16:64:88:b3:
4d:9a:4b:ed:60:3e:dd:4f:a1:02:74:75:c3:72:0c:
6d:ce:e5:4c:6c:ae:5b:7c:25:51:b1:6b:e4:b8:68:
a4:3a:58:9c:de:e3:92:7d:51:56:36:e4:de:73:1f:
a6:5b:39:10:58:3c:dd:54:58:31:20:1c:51:35:21:
9c:aa:9e:d0:f3:22:55:3e:cf:53:66:9c:76:4f:2f:
ba:93:8f:d3:56:11:40:d5:43:79:6b:87:80:07:2e:
90:fe:39:8c:bc:26:97:bb:c1:8c:c9:81:dc:44:34:
a8:38:5f:97:a3:3c:79:c6:53:54:ef:fe:e1:40:b6:
94:f5:f2:50:e6:7a:cb:e9:fb:74:9d:7e:f3:a1:7d:
73:ac:3b:37:e0:e7:78:8c:77:fb:9f:b6:b9:be:49:
0f:d0:02:35:5c:9f:ce:ff:2c:c4:e3:2f:7b:47:80:
15:ac:14:74:73:90:e0:7d:58:de:47:6c:35:30:a4:
3a:c4:d4:a7:d2:ee:96:c3:6f:90:e4:03:e9:9d:c2:
3d:1f:c5:26:f0:e3:c2:91:a4:a8:f1:5b:17:00:5b:
8c:1b:5a:f5:be:db:e8:5c:ed:d7:ed:8d:95:40:dc:
39:8c:2d:eb:46:00:05:e4:a9:fc:34:d5:7f:b7:8c:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:28:3A:D2:98:52:96:03:54:8D:6E:D6:54:23:E1:5E:9A:05:3A
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fa:32:e9:7e:6c:73:37:66:44:72:de:51:c2:6f:69:fe:cd:
e9:2d:0c:ef:5a:3f:43:17:54:f0:ef:03:ca:95:25:9d:63:37:
6c:2c:cd:21:19:32:58:90:b2:85:a9:ba:b8:8d:db:e0:b9:0e:
e3:ec:6b:5c:b4:84:10:65:9d:44:ec:eb:f7:92:ab:c0:c9:20:
79:04:3f:b7:8b:f8:f1:81:63:20:b5:2d:2c:67:ec:39:f3:76:
73:13:6f:f4:80:36:7b:c8:21:c6:1a:63:e2:1e:7f:b1:46:35:
62:a2:37:37:1c:b5:3d:75:5a:69:b2:a1:ae:6b:27:3d:53:a9:
2e:8b:b9:c0:84:b4:a2:d1:d1:20:23:1a:9c:96:ef:a0:a3:fb:
ed:8e:e3:51:fc:39:05:d1:0f:4f:d9:d9:85:1e:c7:9d:20:e5:
84:d6:17:db:fd:ce:1f:a7:fa:1b:af:66:39:a0:c3:15:54:d0:
bf:dc:07:40:42:56:f8:e1:34:d4:06:be:b3:67:24:20:42:bf:
e6:ea:c7:dc:d0:28:f7:4d:30:ce:24:38:8a:88:26:3c:1d:28:
7d:74:de:ac:e5:f1:a2:7e:61:21:7f:a8:ec:30:15:22:1f:e3:
18:2f:5a:fe:9e:04:25:36:84:75:c5:86:e7:d0:4b:32:fe:5a:
a8:82:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:47 2025 by rpki-client