Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
File: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft (raw, json)
Hash identifier: y4+yM1QLljV816maaopXhpppklUYq7zzzLd924L0zik=
Subject key identifier: E9:F3:D1:32:A6:F4:FC:68:D9:79:D8:A2:80:31:50:E7:96:94:5F:F9
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 01985268B11699C6CE462DF2415482A77793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
Manifest number: 1614
Signing time: Mon 28 Jul 2025 19:00:49 +0000
Manifest this update: Mon 28 Jul 2025 19:00:49 +0000
Manifest next update: Tue 29 Jul 2025 19:00:49 +0000
Files and hashes: 1: DeQFcAAznRKaWbjYYwtHWvAu_JE.roa (hash: GnVFGXqZ+Ydt6iYpHsJ9f6xgYMJ7ccNl+9bHKUUsU+w=)
2: HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl (hash: whsW4OqAeDAVBSozWXAXRjCiZkZyqErHhuSgrF2ww70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:b1:16:99:c6:ce:46:2d:f2:41:54:82:a7:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: Jul 28 19:00:49 2025 GMT
Not After : Jul 29 19:00:49 2025 GMT
Subject: CN=e9f3d132a6f4fc68d979d8a2803150e796945ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:e7:1d:4c:d2:5b:bb:34:4e:e2:a8:b9:48:
84:75:4f:3b:40:f5:b1:ab:a3:43:97:16:7a:91:1b:
7e:a0:aa:65:17:2f:d8:a2:d3:4e:e5:a8:78:83:92:
c8:48:66:63:98:9a:0a:28:b8:90:1c:3e:97:4a:a9:
03:a7:7d:20:ec:7e:68:26:1f:ae:cc:23:24:54:3e:
da:00:65:cf:0e:3e:9d:b0:c9:29:54:5d:f6:20:eb:
8e:ca:ad:79:81:9b:a4:d8:62:c4:9c:1b:6f:68:89:
9d:a5:39:fa:87:9e:65:ed:94:5b:ae:83:4b:1a:62:
69:1c:03:16:04:f2:6f:8a:a9:d4:b8:f7:24:d9:34:
ac:5e:c2:14:86:aa:0c:dc:1d:ed:d6:5c:00:77:f3:
de:c4:b5:60:48:6f:b6:5d:37:83:75:2f:34:04:0e:
f4:49:72:7d:50:67:d1:38:99:5c:cf:b4:35:5a:6a:
6e:b1:5a:28:9b:5f:0a:75:d9:ca:fc:9c:a7:c1:f5:
59:94:64:05:47:bd:47:0b:ea:ec:e2:59:31:45:e3:
09:f0:9b:55:1f:56:25:2e:f1:d8:26:16:f7:d9:2a:
36:d5:05:bb:72:82:93:ee:c6:a6:57:d2:70:19:1d:
bd:21:0e:09:a0:d9:bb:d4:34:c8:97:de:cc:ad:6c:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:D1:32:A6:F4:FC:68:D9:79:D8:A2:80:31:50:E7:96:94:5F:F9
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6a:69:b5:e0:dc:9b:6d:34:1a:26:38:d1:0b:8b:20:6f:4d:
90:c6:62:0a:c5:2b:5c:a2:ee:d7:cd:1e:10:7f:7b:70:95:1a:
52:a7:fd:36:5d:cc:89:5c:96:47:94:fd:4a:5e:16:d3:8a:de:
cc:66:60:42:58:dc:c0:8a:32:d4:6a:8a:23:53:af:33:c9:9f:
86:e0:84:b0:2f:47:de:47:49:08:46:e8:b7:a6:8c:69:89:02:
d3:44:57:1a:cf:b0:88:ae:14:b5:7c:63:36:9e:04:3d:c8:c0:
74:d6:56:e1:4b:db:13:f2:53:a8:31:23:7b:5d:87:cc:91:43:
fd:39:35:fe:ac:e9:65:70:cb:6a:40:02:a9:d6:ec:c0:2b:66:
54:81:39:76:c7:aa:39:ee:39:da:99:5e:3d:b4:1c:54:6f:12:
79:f8:31:51:59:0b:b6:03:7e:39:45:73:1d:88:5c:48:3a:4b:
77:25:55:71:ef:e7:fe:90:a2:3b:46:24:1a:6c:8e:9c:71:e1:
65:93:79:4d:85:05:45:c6:fd:70:5d:34:bd:71:0e:f6:c5:18:
41:b4:5e:5e:3d:70:f0:0d:f1:1a:91:fb:c9:d1:c3:19:1a:da:
ae:42:a2:36:19:a1:2a:b1:bf:cf:ce:e0:af:6b:6c:87:00:e9:
41:43:dc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:31 2025 by rpki-client