Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: yRcYBp9AHWJLZ5PvGLCtw5o6HRT+SIU5K0hxpsxRRic=
Subject key identifier: C3:E8:53:29:0F:54:AE:57:49:ED:05:42:AE:E8:F2:DC:4E:4E:B4:D9
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 01984AE56FB36D84F4EED75739844E0D954E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 08:00:06 +0000
Manifest this update: Sun 27 Jul 2025 08:00:06 +0000
Manifest next update: Mon 28 Jul 2025 08:00:06 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: WK/eFzQAEW1i8YjQNtLitsGwR3ZmQJRvzJH9YdbZ0yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6f:b3:6d:84:f4:ee:d7:57:39:84:4e:0d:95:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Jul 27 08:00:06 2025 GMT
Not After : Jul 28 08:00:06 2025 GMT
Subject: CN=c3e853290f54ae5749ed0542aee8f2dc4e4eb4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:48:66:08:0b:e7:46:ab:7e:e2:34:49:7c:
55:e8:8b:9b:f1:c8:3a:88:6f:8b:e4:bf:c9:93:2a:
75:3c:38:e5:de:34:88:6f:6e:4a:69:77:90:52:7f:
30:a5:ba:ac:ed:41:ec:f5:5e:b7:10:61:6d:3a:01:
30:e7:3f:63:45:e1:5d:36:6f:56:28:9e:b4:b1:57:
19:a4:01:19:05:5d:36:e4:ab:f5:41:d8:95:3b:58:
eb:e8:f7:67:b8:f2:9c:db:19:84:70:64:e7:6f:14:
40:01:1c:e4:bc:a4:fe:34:4e:ea:29:dd:40:fb:e3:
02:dc:9a:23:53:d4:d4:e2:dc:9e:5e:c3:18:89:1b:
ea:d2:12:44:f0:15:ef:85:74:ae:89:dc:b1:de:6d:
91:63:a6:12:65:3a:e8:06:c2:8a:c9:2b:45:e9:16:
dc:62:85:a1:a6:3b:8f:15:64:89:48:ff:75:b7:1e:
2e:75:6a:47:7d:51:e0:00:ed:0d:c3:5a:72:a5:86:
17:5a:4c:51:34:cb:b8:7f:fc:63:20:7d:d3:d2:02:
fb:7f:56:7f:07:59:4b:85:90:bd:ff:e2:31:84:8d:
6a:2c:aa:70:cb:47:b1:43:59:cd:d4:1e:7f:df:c3:
06:28:17:a2:b9:bb:6b:a9:82:02:30:43:d1:73:a9:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:53:29:0F:54:AE:57:49:ED:05:42:AE:E8:F2:DC:4E:4E:B4:D9
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:4f:14:35:94:86:6e:f4:6c:e2:4f:88:af:e6:5a:c3:d0:
ca:60:f4:a9:29:33:e6:2f:a4:8a:12:6c:73:d4:6a:26:02:59:
e5:97:2b:80:3a:66:a6:eb:ed:aa:f8:e3:89:1d:4c:a3:ed:01:
e0:2c:43:24:9a:4f:79:ea:30:d0:cd:9c:19:32:36:9e:59:c4:
b6:6d:35:2d:69:80:9b:5f:20:cd:4c:cd:4a:d4:2a:4a:bc:b2:
08:79:11:47:91:54:c4:24:79:fe:69:ed:b0:5a:08:e8:de:28:
9f:97:68:a7:3a:c3:ff:a2:bb:c1:dc:77:e0:6d:68:b6:7e:ee:
5f:b6:17:02:59:56:dc:b2:c6:a7:4b:fe:fb:28:8a:45:18:65:
31:a6:cf:d4:e7:90:00:1f:4d:12:99:df:96:6d:52:b5:4d:8f:
58:90:6c:67:61:19:b3:c7:f8:9c:72:28:58:43:99:f1:83:a5:
16:da:b8:32:10:12:93:ad:45:0f:c0:77:a1:c6:d4:21:71:dd:
18:e8:29:91:19:fc:3c:ee:ed:6b:bb:91:e6:81:1a:25:c2:fd:
fe:b3:ea:55:e7:5b:93:4d:ff:c9:47:dd:b3:e4:b5:0c:f6:f7:
1c:af:37:a9:ea:99:64:8e:a9:fe:52:66:c7:ff:fc:82:51:75:
5f:44:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:05 2025 by rpki-client