Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: m5APfELDVEDwAsG+Sy/BXlWfGj3IcE7DdjC8U0yDJdc=
Subject key identifier: AB:E0:F0:6B:9D:B2:A5:15:24:76:8F:DB:5F:1B:17:EF:11:49:68:52
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019849D393E2E3C01B11314A858CA54D63B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0A36
Signing time: Sun 27 Jul 2025 03:00:59 +0000
Manifest this update: Sun 27 Jul 2025 03:00:59 +0000
Manifest next update: Mon 28 Jul 2025 03:00:59 +0000
Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: 4w6S9JgveDPZ+sGkoGU3G7YBC+KzAGrt6bQ9PA5NMmg=)
2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:93:e2:e3:c0:1b:11:31:4a:85:8c:a5:4d:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jul 27 03:00:59 2025 GMT
Not After : Jul 28 03:00:59 2025 GMT
Subject: CN=abe0f06b9db2a51524768fdb5f1b17ef11496852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:d9:11:d6:8c:8d:9f:8d:43:e0:9c:36:38:
e1:9a:fd:6d:eb:55:be:ab:9e:e3:d4:fa:d4:93:e5:
43:ac:3c:ab:5e:f2:90:42:d4:c0:e9:10:36:4d:20:
f7:3a:2e:a6:43:8b:e2:ad:a5:69:34:55:71:0a:50:
ac:33:33:81:87:ef:5e:3d:60:c5:cc:c8:d5:83:3a:
5d:0b:1f:f9:79:30:57:c7:94:3e:c5:9c:a5:f2:30:
69:e4:e6:3e:21:6e:b5:a8:f0:76:bb:6d:10:34:43:
76:82:9c:44:79:21:2d:9d:0d:b2:7f:b7:6d:94:47:
0b:7f:ad:a6:ef:0a:47:a8:4d:9c:92:78:8a:05:63:
e8:30:93:b1:e8:2d:f0:fb:53:d0:a8:8f:55:a3:ff:
b7:40:d0:88:3b:13:9f:02:e6:50:fc:32:fd:19:8e:
51:02:34:ce:d0:e6:e5:6e:4c:d0:25:9b:a3:3c:aa:
0d:92:97:11:e0:22:73:85:4a:2a:03:76:8b:51:a3:
87:35:15:c3:1a:97:2c:9a:bf:68:e1:ac:06:42:7b:
4c:76:42:36:d6:2b:ab:f7:f6:c0:5d:72:ff:73:fa:
bc:da:91:9d:96:05:f9:7b:f9:38:98:f7:72:90:c8:
24:29:14:ec:56:06:60:5c:10:e6:2f:e4:a5:44:ac:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:F0:6B:9D:B2:A5:15:24:76:8F:DB:5F:1B:17:EF:11:49:68:52
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8f:a3:93:2d:0d:c6:67:a4:cb:da:6e:f7:3e:3e:08:8f:03:
cf:29:9a:ab:85:05:06:37:a8:d3:58:bb:8c:31:79:70:99:6b:
92:51:ae:17:b0:3a:e1:c0:3f:7b:79:64:1b:97:4e:e1:7f:6b:
81:70:ae:7b:61:30:f7:8a:a6:3f:94:db:b0:43:14:15:73:9a:
c5:b6:ab:e4:c9:67:4e:93:76:16:9c:4c:27:51:7f:98:27:41:
ac:2a:2c:ef:21:90:af:a3:9e:6c:06:92:9f:6b:05:ea:bb:12:
5a:6f:95:8f:2c:f6:7d:04:83:97:bd:d5:92:68:b0:69:80:58:
b9:30:4a:d3:77:60:9c:85:68:7d:77:6f:30:a9:cc:13:50:04:
fa:6a:86:5f:b1:c2:c7:03:da:d7:0a:26:b5:b0:11:e0:97:6a:
d8:21:ee:8e:ea:c7:2b:60:4b:b0:31:1b:48:03:d8:7c:f5:f4:
17:68:71:45:b9:53:8c:d8:a2:c3:f8:3e:95:9d:99:45:52:4b:
2d:4d:69:71:71:0d:27:52:0c:ca:d2:2b:83:05:3d:86:96:72:
ef:68:76:12:9b:57:c1:d4:f4:8d:21:c5:a4:01:19:c1:9d:3c:
35:fd:b2:7c:e8:73:b5:75:37:a8:c4:f7:6f:4e:77:63:ed:0a:
35:d2:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:18 2025 by rpki-client