Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: mP1TPFQ1OJN5hppN1xKISAaL/489n8cVnMf8Qb2IvUI=
Subject key identifier: 08:FB:E7:89:AE:7F:4B:1F:09:B4:64:E5:C9:24:A4:98:57:EF:1C:35
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 01984A0A4477F6128D0C64045450EC9C16C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 12ED
Signing time: Sun 27 Jul 2025 04:00:43 +0000
Manifest this update: Sun 27 Jul 2025 04:00:43 +0000
Manifest next update: Mon 28 Jul 2025 04:00:43 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: SEkcvj0nY5sY6R8aefXhyL3xETuW13Dqf/oxoKYPyT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:44:77:f6:12:8d:0c:64:04:54:50:ec:9c:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: Jul 27 04:00:43 2025 GMT
Not After : Jul 28 04:00:43 2025 GMT
Subject: CN=08fbe789ae7f4b1f09b464e5c924a49857ef1c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:ca:cc:de:79:77:a1:11:c3:2e:d9:e7:2b:
cd:1a:f6:24:00:b7:86:a9:a5:f8:6f:71:5d:cb:05:
76:76:05:9a:ab:82:af:e4:f2:c1:fa:2a:76:fd:df:
c8:34:8e:e6:26:33:ad:2f:99:1b:12:a0:dd:58:80:
10:ee:70:40:7c:75:06:3a:54:67:cd:cb:a0:d9:7e:
d2:56:6a:62:e6:5b:8a:44:d2:52:44:fe:da:bd:50:
81:9e:d5:1b:21:08:6a:3f:f4:58:72:d4:80:9f:2d:
2a:6e:9d:ce:56:b1:40:2b:16:d3:79:50:77:c3:05:
eb:88:4c:37:9c:25:54:96:e2:91:2d:dc:9b:99:bb:
92:90:db:53:0f:61:52:53:46:b8:c4:7d:d0:c4:be:
3b:60:76:f5:62:62:60:91:64:db:49:90:1c:09:1a:
08:00:24:33:e5:5e:0b:10:14:21:33:88:a4:34:83:
9b:c6:9a:01:53:81:a9:75:c6:53:37:6c:46:27:14:
4a:3f:56:2d:41:aa:8c:c5:02:34:12:b0:26:73:f6:
0d:ce:71:e1:c2:47:c4:91:df:ad:c3:49:26:9f:61:
79:00:3b:ee:f4:78:52:2d:0b:8b:52:09:c6:7a:27:
b1:61:48:ac:a4:8c:8b:8d:47:f5:3a:bc:e6:2e:4a:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FB:E7:89:AE:7F:4B:1F:09:B4:64:E5:C9:24:A4:98:57:EF:1C:35
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:03:b7:7c:ed:88:02:a9:8f:57:fa:55:82:38:76:4f:bf:
0b:6c:0d:0b:b4:ad:ce:5c:72:41:10:b9:9e:2b:ad:af:24:ca:
c7:45:ff:cb:85:35:c7:7d:b3:d3:5c:b2:a8:bd:30:4e:32:a0:
56:ff:55:99:0d:09:ad:1f:87:73:bf:3e:78:8e:13:ac:54:b6:
78:14:34:aa:8e:ae:3a:73:79:b5:6b:c0:2a:c2:4e:b1:e7:3e:
94:50:fb:d6:1e:d5:68:ca:75:10:1b:60:b8:36:f5:38:ea:47:
41:86:fe:19:66:3b:dd:82:e6:77:e1:f1:75:8d:90:14:f8:ac:
10:95:58:9d:f4:d8:ad:e6:9b:b8:82:30:39:27:7a:e0:95:31:
d9:24:62:f9:b7:77:d2:95:30:ea:88:b1:3f:4f:34:24:c4:d0:
7f:0e:b6:39:4c:48:65:0c:09:24:97:a0:28:24:3a:de:d5:f7:
8b:f7:2f:6b:a7:63:48:f7:a6:c2:ef:07:e4:b7:45:cd:a6:73:
9b:65:4b:df:03:a9:06:7e:a5:22:27:ba:f8:76:4c:74:d9:6e:
56:94:37:72:cf:8c:cc:be:02:a2:ee:95:d3:f3:4f:6b:7a:9b:
d7:31:7b:08:e6:1e:dd:51:1c:06:15:85:b6:2b:b6:a6:c0:66:
85:f1:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:49:42 2025 by rpki-client