Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json)
Hash identifier: krHfm7I4FGqXj1QxDoEhZdtr0EsRtJG1ibsU7wOTNT4=
Subject key identifier: C3:11:8C:10:88:EE:AF:E4:23:1A:26:B4:C8:FA:DF:BB:C4:1E:DC:40
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01984778050EAC228CD8CE59A3FAD93DE225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
Manifest number: 04CB
Signing time: Sat 26 Jul 2025 16:01:44 +0000
Manifest this update: Sat 26 Jul 2025 16:01:44 +0000
Manifest next update: Sun 27 Jul 2025 16:01:44 +0000
Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: VWxtHHWDFlSBjLDh9FImD/CmndCmXxqtC19jm8/b/1U=)
2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:05:0e:ac:22:8c:d8:ce:59:a3:fa:d9:3d:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Jul 26 16:01:44 2025 GMT
Not After : Jul 27 16:01:44 2025 GMT
Subject: CN=c3118c1088eeafe4231a26b4c8fadfbbc41edc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:9d:66:f7:6a:a1:5e:85:9b:4f:cf:24:88:
7c:3a:50:dd:a2:5a:3e:e0:e3:d1:15:86:ff:4a:a0:
d0:f2:b5:53:aa:8a:0d:5d:15:2a:35:99:af:8a:d2:
7f:03:04:df:1d:89:a8:11:a4:72:75:24:1b:ac:64:
60:43:a4:36:43:e2:55:57:74:2e:7a:7f:e2:e0:96:
d7:d3:7b:5b:fe:29:24:f2:d4:ca:12:ff:48:72:69:
db:93:62:23:da:60:a4:18:90:e2:11:e1:96:bf:37:
93:00:77:44:91:03:b4:79:03:41:9f:f2:f9:a3:1c:
94:9b:7e:af:1a:f4:85:b9:ca:14:aa:79:85:d4:33:
c2:d3:41:f4:17:eb:f1:99:c1:5b:d6:43:f0:e9:bf:
ae:29:54:cd:28:08:15:cc:78:2e:b9:2f:c5:8f:32:
59:73:c6:bc:1d:57:d0:ce:91:48:48:ba:95:a6:f8:
7f:da:c5:ad:6b:d4:d1:c9:36:f2:cc:87:2d:08:77:
7f:d2:92:ab:bf:d1:d5:c8:f9:ea:24:b5:21:eb:a1:
c8:82:86:fd:48:c4:04:03:13:00:2b:79:9f:53:19:
b1:6f:8d:19:76:ba:5e:dd:48:31:67:be:a7:a4:ae:
dd:e9:da:ee:9d:4e:85:d2:36:8d:0b:b0:e0:4d:a4:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:8C:10:88:EE:AF:E4:23:1A:26:B4:C8:FA:DF:BB:C4:1E:DC:40
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d7:1d:3d:07:51:c6:ed:de:c0:20:bd:4a:d3:cd:df:3b:81:
f6:c9:ba:81:36:81:52:84:c3:ca:90:1b:b7:a2:d3:64:ae:22:
a5:3a:19:3c:4f:d8:f7:33:6f:e8:93:e7:2b:f7:e3:06:41:d2:
2e:fa:4f:68:b8:20:23:3d:43:2f:80:c9:0d:de:7c:5e:71:3e:
57:af:c6:45:cb:a9:e8:b8:c2:26:1a:37:c2:d2:dd:21:dc:19:
75:42:52:df:68:9d:48:94:41:58:09:3a:d5:b5:b3:7e:02:0d:
39:4e:31:2a:0b:59:b1:93:2b:3a:fd:a0:e8:55:1f:b9:11:cc:
72:38:9f:6d:24:16:3a:48:ce:79:8f:5f:8b:9a:fb:a8:df:c5:
1a:83:f3:9c:65:07:07:0d:73:6b:c3:01:d9:d8:c9:aa:13:e2:
bb:da:74:7a:ad:67:82:7b:77:d5:07:84:30:1a:65:78:8a:19:
d0:73:8e:99:82:11:c5:df:20:63:44:6a:f4:c5:6c:69:cd:a5:
3a:a8:db:7e:9d:11:4e:47:81:00:bf:59:a0:82:c3:2a:18:22:
8d:76:e1:6c:d9:c3:ce:13:25:35:6a:39:07:27:f1:83:ea:48:
ed:c8:f0:ad:66:ef:79:0f:12:e2:4e:fe:7a:48:c8:fc:5a:23:
85:3f:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:44 2025 by rpki-client