Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: +iLUdgCNeBvB45z5uNn8786rMV6s3eQ3q5obCRslvfw=
Subject key identifier: 17:35:39:44:D8:00:4D:7E:82:B0:9D:0B:EE:5B:82:78:57:2F:CA:4C
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 01984DB02F58B9790D6010698451837A5DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0462
Signing time: Sun 27 Jul 2025 21:00:48 +0000
Manifest this update: Sun 27 Jul 2025 21:00:48 +0000
Manifest next update: Mon 28 Jul 2025 21:00:48 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: 8Q+M3UovYTeVfcA0JVC9tAqE1kCAPtsf7ZNEJxWhUnc=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:2f:58:b9:79:0d:60:10:69:84:51:83:7a:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jul 27 21:00:48 2025 GMT
Not After : Jul 28 21:00:48 2025 GMT
Subject: CN=17353944d8004d7e82b09d0bee5b8278572fca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:2a:e3:9c:f8:e7:52:7f:a9:6e:6a:53:b5:
06:13:10:a8:c4:47:4f:8f:0e:87:24:ee:b2:89:ac:
04:4a:1e:5c:55:a9:4f:5e:b2:57:ac:1b:d7:2f:7e:
f4:6b:b1:ba:d0:8f:af:c2:54:4d:c0:e5:8a:16:de:
88:1d:7b:3f:55:d0:6a:cd:11:7a:cb:ca:7e:24:71:
fd:61:76:e1:d4:a8:18:8c:2e:4f:a0:d7:40:e6:bd:
49:ea:25:9a:43:5e:9d:56:25:b4:11:e1:13:68:49:
2d:4e:af:c6:ce:18:41:d6:9f:40:3f:1e:1c:1a:b5:
73:7f:07:c9:60:6e:0d:a6:a0:3e:5d:93:34:bf:19:
4d:e1:c0:46:96:1e:5e:c9:44:73:68:66:63:70:f1:
0b:d8:00:37:d6:cb:b0:b2:a2:16:d7:7a:b6:f1:27:
03:0c:9a:f2:71:db:78:a6:3b:ac:a7:55:93:9a:7e:
4b:00:1a:50:f4:ac:88:d7:67:1f:5d:c0:89:d0:5e:
ec:84:8d:54:d2:64:19:a4:b2:51:d4:90:7b:6c:02:
ab:7a:a1:f1:29:98:68:56:7c:de:eb:ed:89:1b:80:
44:43:58:ee:bb:f5:37:cb:27:4c:a5:ac:27:a4:f2:
a6:f1:88:f4:22:2b:bb:63:a6:cb:89:36:5c:99:1b:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:39:44:D8:00:4D:7E:82:B0:9D:0B:EE:5B:82:78:57:2F:CA:4C
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b1:a1:c1:0b:b7:ab:54:7b:d5:4a:1d:4b:f4:34:20:1f:fc:
92:18:6f:1b:12:f1:7b:27:a6:77:36:66:a5:e1:12:12:cf:48:
fc:2e:05:4e:cd:77:ec:6e:f1:76:ec:20:8c:7f:40:cf:60:99:
36:27:50:06:4a:ed:e8:8f:ec:7f:8c:c3:67:49:c1:05:23:a3:
a9:c6:ad:18:18:17:cb:d8:c9:13:e3:4d:29:9d:49:6a:bf:4a:
4a:91:9e:7a:f7:43:13:3a:70:5a:4f:18:d5:5c:eb:69:29:91:
63:13:d5:30:b7:13:87:e4:ad:0b:a4:d1:e2:80:c4:53:a6:70:
55:8f:16:4f:9b:fb:a6:66:4d:d3:90:b2:59:0d:ec:82:ea:ab:
0d:bf:9c:b7:9c:ff:20:28:40:45:78:78:37:2d:41:9c:26:01:
19:10:c3:20:e4:50:66:7e:9e:9c:e1:f0:88:bc:76:46:01:0a:
f6:b9:c8:ce:e6:c3:99:4d:4b:3b:f2:a9:27:38:90:28:31:ea:
4d:c1:8b:2a:87:15:b2:97:0a:0c:c9:16:d1:bc:76:34:03:c8:
21:7c:98:33:2b:e6:08:86:84:bf:00:92:1e:e9:5a:da:e3:87:
d8:72:29:d5:1b:d5:3c:e0:6d:ec:27:a6:fb:13:30:ad:07:29:
62:f9:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:03:53 2025 by rpki-client