Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: SvfmhUahmD0UdxItu+cPbnKMmOKcpDsRw3aBzFm8ILc=
Subject key identifier: D6:E5:75:2E:74:4A:09:23:29:04:7B:CC:D5:AC:82:62:2B:5C:7F:BC
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019835A7CBBA89598DDA01B4D07D157EC0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0415
Signing time: Wed 23 Jul 2025 05:00:45 +0000
Manifest this update: Wed 23 Jul 2025 05:00:45 +0000
Manifest next update: Thu 24 Jul 2025 05:00:45 +0000
Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=)
2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=)
3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: cdfesvZbp6P5m8fUOC3okk3dYT8f2ljBpy3wFW0iEnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:cb:ba:89:59:8d:da:01:b4:d0:7d:15:7e:c0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Jul 23 05:00:45 2025 GMT
Not After : Jul 24 05:00:45 2025 GMT
Subject: CN=d6e5752e744a092329047bccd5ac82622b5c7fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:1a:d6:fc:36:b7:a5:1a:ce:7e:e5:b1:db:
92:ef:60:bc:15:9e:ef:b1:d3:2a:ba:62:ba:a1:57:
f0:a6:61:5f:13:7b:be:1d:62:56:3a:8a:75:97:39:
ed:27:96:f1:12:aa:ca:9a:08:43:c1:d5:1d:fe:a9:
61:61:ee:64:65:2b:1b:7b:1e:cf:eb:c5:5c:24:8d:
7b:49:aa:52:16:02:05:06:54:f9:3a:9a:5d:54:c5:
5c:91:9a:2e:ca:d4:74:37:41:7b:3d:eb:3a:d7:14:
a6:28:b1:81:c9:9c:99:e9:3e:d2:8f:9f:b3:bd:73:
1f:80:96:be:96:2e:69:95:3a:0a:27:26:2d:09:cf:
e7:7d:5e:a8:b4:c6:70:d6:41:6d:13:d4:8c:d3:a7:
18:f0:86:82:d5:a1:72:96:dc:71:7f:2e:91:4d:aa:
a3:fe:aa:6f:3e:5e:2c:1a:0a:ee:8e:60:d2:2f:47:
9d:37:6e:6f:51:6e:15:a9:9f:16:34:97:42:b1:cb:
18:67:91:5f:ef:c6:bb:47:a4:55:f4:ff:ef:7c:3a:
ee:33:9d:5b:4b:9d:c9:74:4b:a5:c4:9d:d3:79:e2:
5b:26:8b:ee:72:e0:ba:47:7a:e3:b1:63:93:2b:cd:
63:0a:11:64:0e:52:13:89:4e:2d:7e:8d:8c:05:7c:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:75:2E:74:4A:09:23:29:04:7B:CC:D5:AC:82:62:2B:5C:7F:BC
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2b:53:1e:ab:01:38:bb:c1:84:5b:d4:c3:3c:c0:5a:90:5c:
36:cf:9a:9b:6c:b5:96:bf:c0:40:fb:56:1b:10:5f:ab:06:28:
21:e9:23:b5:40:7c:4d:6a:94:64:cc:a3:45:8c:b9:ce:d4:ac:
f3:bc:79:f8:66:08:f2:cb:0a:e6:7b:05:a3:04:e2:52:86:f3:
06:bf:ea:6e:bc:4d:dd:a5:4a:c6:22:52:65:ae:33:23:bf:d6:
5d:5e:8c:29:a7:55:13:95:2b:86:4c:cf:31:61:fc:04:76:72:
f8:e3:e7:6e:5b:f3:70:69:c0:a7:37:6f:13:4a:93:ab:c1:f4:
1c:b2:ec:c5:a3:1b:bb:37:bf:50:11:5f:af:ab:5b:70:bc:ec:
6d:af:f7:07:6b:a9:a0:c8:cc:43:59:13:69:7a:eb:c0:7c:c7:
f6:07:2c:6f:14:3b:82:6b:0e:41:81:07:f8:11:0e:07:e2:f9:
56:cb:22:db:83:9e:8c:66:bd:12:b2:66:d5:8a:1b:51:8e:e3:
1e:a4:d6:42:58:54:82:ea:8d:31:d3:19:b1:bf:01:53:a7:c6:
32:d1:16:a7:fe:5d:0f:67:0e:61:e1:aa:c7:f3:fa:78:e4:15:
2f:84:03:55:ae:6e:58:3d:ed:91:69:0f:59:77:d0:de:ff:9f:
f0:fd:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:25:00 2025 by rpki-client