Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: d6jNQP5vhov8KM5HulfzRUD66QF7HL+sv1JsW++zxl0=
Subject key identifier: 09:82:A8:DB:57:A2:71:97:2B:52:00:03:4A:21:6F:7A:49:D1:FF:65
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01985F11884CF476BC63E7C2F2C8D0DE1686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 1509
Signing time: Thu 31 Jul 2025 06:00:41 +0000
Manifest this update: Thu 31 Jul 2025 06:00:41 +0000
Manifest next update: Fri 01 Aug 2025 06:00:41 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: xXuC2GHy/jCouzAc4Yl67E2xq6gNFzIOMXr1/7+sER4=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:11:88:4c:f4:76:bc:63:e7:c2:f2:c8:d0:de:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jul 31 06:00:41 2025 GMT
Not After : Aug 1 06:00:41 2025 GMT
Subject: CN=0982a8db57a271972b5200034a216f7a49d1ff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:97:80:eb:4b:8e:7c:72:9f:a3:6a:02:fe:
ad:2f:8b:29:13:2e:80:bc:98:0a:66:c3:ed:62:29:
2e:82:5c:93:57:11:df:c1:f0:b5:c5:f4:37:0f:9b:
08:42:b9:13:30:38:e5:07:81:28:00:c3:ca:cc:29:
03:c6:37:ab:64:c8:07:f4:fe:79:07:46:82:82:16:
f5:a7:39:9c:0d:9c:dc:8d:3e:78:05:a3:35:17:38:
b5:20:be:ed:35:9e:2f:eb:c5:b8:2c:8e:55:61:1b:
6e:c2:5e:1c:df:34:97:a3:a8:99:9e:61:51:5f:ff:
44:9c:02:55:20:f8:09:ea:5e:4b:74:86:da:03:35:
93:44:71:08:82:44:2d:71:5a:27:8b:7a:0e:e0:83:
fe:18:e2:e8:9f:b4:c8:25:d3:13:b6:a7:5f:6a:16:
14:09:e3:25:20:8c:b7:e0:a4:48:b6:de:9f:2e:26:
b1:d1:d8:d4:12:a0:fc:f9:bf:72:b4:fe:c3:d6:8b:
a2:f1:09:51:15:78:de:5e:a0:e3:2a:71:0a:07:b3:
57:c2:12:0b:21:3f:fb:fe:b1:79:f7:75:2b:dc:2e:
3c:0f:e9:4f:fc:ee:3b:22:68:2a:92:56:c9:5b:47:
e3:6a:45:0e:69:41:e8:1d:a3:68:db:be:09:7a:53:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:A8:DB:57:A2:71:97:2B:52:00:03:4A:21:6F:7A:49:D1:FF:65
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:54:fa:45:05:49:22:bc:3e:12:84:79:24:30:e5:27:12:eb:
f4:89:e9:0d:2a:4b:11:09:1e:a7:59:61:1b:16:a8:a4:36:cb:
48:af:5c:5b:a6:27:02:99:55:46:23:b5:2c:b0:35:10:d9:ad:
11:2a:d7:1b:9a:4a:ac:ff:1c:5e:9c:bb:33:7b:75:19:0c:7f:
7a:e8:de:8f:9a:98:04:fc:bf:49:ef:39:b1:62:eb:96:db:57:
04:0e:58:9e:77:bd:ab:21:d3:a3:7d:10:23:64:d5:5a:d6:22:
b7:3c:44:f1:d9:bf:b6:54:cb:f2:2d:fb:97:a4:17:78:a5:a9:
8b:28:d4:a4:88:ed:a7:3a:91:ab:f9:c9:07:4d:6b:7a:db:18:
0f:00:b9:7c:94:ea:32:5b:1b:32:50:61:99:01:ac:93:77:d0:
ea:ea:01:1d:59:61:83:9e:d1:5d:b7:0e:e9:96:10:a3:f9:15:
7d:a9:c1:fe:5f:6f:6d:34:ba:35:d1:24:70:02:15:30:a4:03:
82:69:08:7a:b2:ad:68:f7:c9:70:84:83:1c:90:8a:ac:8c:30:
b3:89:f5:68:55:99:f0:b3:43:5b:0e:44:14:e3:e4:c1:7c:b0:
46:90:5e:d1:60:27:8a:b1:4c:c4:ef:59:26:09:6d:46:c8:51:
4e:0d:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:54:52 2025 by rpki-client