
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: 6i16d21PUrvKnfcb4h03TcnELOoKNef7c8CulnnCa50=
Subject key identifier: F0:86:4E:BF:21:35:E8:93:AB:28:CA:2A:32:C4:4C:6C:19:A1:50:93
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 01977075F5D330BD2F4CDD2F0AF69F877008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 0FD2
Signing time: Sat 14 Jun 2025 22:01:08 +0000
Manifest this update: Sat 14 Jun 2025 22:01:08 +0000
Manifest next update: Sun 15 Jun 2025 22:01:08 +0000
Files and hashes: 1: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (hash: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=)
2: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=)
3: C3bQMRmtLfyKqffanrJ7_7vWCk8.roa (hash: EqbhaUJu7cZDNVqNN0UffRpUBKao2EeOOhzgBDrLfd4=)
4: bpfV9qpUqRU7ZbL5m4qH_-0K2rg.roa (hash: 4P0zOtuiLjjQhgT/25d48jeUAEanfYakXWIUUX0ljiU=)
5: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: Kc1LteQcHiZ8cOR8z6XLdP3mfQ29RAmNnrPAlmUl7h8=)
6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:f5:d3:30:bd:2f:4c:dd:2f:0a:f6:9f:87:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jun 14 22:01:08 2025 GMT
Not After : Jun 15 22:01:08 2025 GMT
Subject: CN=f0864ebf2135e893ab28ca2a32c44c6c19a15093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:49:94:c9:78:09:71:99:20:22:61:5a:79:
99:0b:ba:36:63:64:98:0d:cc:85:4f:16:2b:95:92:
8a:3a:7a:da:75:da:f9:d9:d7:62:0f:45:28:08:a5:
3d:32:98:8e:98:43:5c:6b:55:39:a9:41:13:5d:22:
16:59:8c:bd:43:c3:8a:b2:d2:9f:f0:86:c6:05:af:
98:16:b4:c6:8c:4b:44:6b:37:c6:aa:61:5b:cf:ac:
1e:98:f9:63:da:03:66:48:96:c4:01:b5:0e:25:c0:
41:50:a5:3b:b6:e1:c4:16:08:92:2e:9c:34:d6:1d:
e4:85:0d:47:ea:dd:10:44:c1:7f:05:a5:ff:fc:ad:
a2:57:fe:87:83:aa:94:bb:36:2f:26:be:ce:7d:86:
fb:f7:18:32:53:a2:22:60:03:65:fa:00:9e:d5:fb:
35:d3:df:1a:07:b6:56:f5:1b:2e:d2:39:81:e6:dd:
88:22:60:1a:7f:27:15:1a:84:af:30:3a:be:2a:f2:
d0:6c:6b:92:86:cd:16:b0:2d:5f:31:fb:ab:c9:0b:
c3:94:fa:b4:53:ca:ff:86:de:67:71:32:16:ac:58:
35:8b:64:4a:98:a7:cc:7e:b3:8e:8d:96:64:64:d5:
a3:60:b2:12:ef:fe:d5:90:65:f9:88:4d:6a:86:9a:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:4E:BF:21:35:E8:93:AB:28:CA:2A:32:C4:4C:6C:19:A1:50:93
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:c4:c1:aa:1a:0d:9f:5d:38:7e:85:42:31:02:00:71:67:
2b:78:63:78:9f:a9:8d:f7:2e:40:5b:28:18:ba:54:e4:46:fb:
98:67:9c:41:c4:4a:1d:b8:4b:eb:63:07:11:87:9f:a1:6e:ad:
db:d7:ec:5c:c0:3d:f5:32:6f:b9:d2:e8:97:3f:c9:c3:90:1c:
09:0b:a8:b3:7b:59:6b:88:3f:66:86:3f:8b:b8:b1:f5:07:d9:
64:7f:3e:ee:26:fb:a0:04:72:75:4c:cc:73:5c:95:0e:ff:56:
0b:e4:35:9e:c2:fa:3d:0d:8e:d3:18:18:33:b5:b5:e3:c0:84:
6a:de:e9:8a:95:a6:53:e4:13:26:bf:e7:c5:1a:d5:fc:70:a9:
44:45:4e:68:e5:83:03:5e:f2:d3:e4:03:69:83:66:df:23:f1:
70:5b:63:11:d3:3c:2f:7a:5e:f5:3c:d7:dd:98:d1:73:6e:9d:
fd:cd:07:7b:6f:82:01:94:5f:21:e9:dd:5a:65:82:95:bc:77:
32:66:31:0d:cd:9c:41:e3:10:2f:e2:19:66:d9:fb:d0:72:39:
6f:8e:9c:19:91:21:28:31:da:ec:98:a3:27:bf:65:b9:2b:9c:
1a:26:b8:7e:10:b3:72:60:3e:9a:73:de:e0:3c:6b:cc:4a:95:
4e:54:d4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:39 2025 by rpki-client