Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier: jnQo7ra4T2yJxucRfr11FZ8woYTMp9c42705l8zoMS0=
Subject key identifier: B9:47:E5:50:63:6E:0F:E0:6A:7B:5C:90:C1:42:DB:F9:7D:65:F6:08
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial: 019845F6C922DF937FEFA8029994C73D168A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number: 0AE6
Signing time: Sat 26 Jul 2025 09:00:57 +0000
Manifest this update: Sat 26 Jul 2025 09:00:57 +0000
Manifest next update: Sun 27 Jul 2025 09:00:57 +0000
Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: 6ZXp/6Kcp+POnPq+h76rpxl1rM/hLxrDnS24XoVlAEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:c9:22:df:93:7f:ef:a8:02:99:94:c7:3d:16:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Validity
Not Before: Jul 26 09:00:57 2025 GMT
Not After : Jul 27 09:00:57 2025 GMT
Subject: CN=b947e550636e0fe06a7b5c90c142dbf97d65f608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:22:ff:35:9a:e2:00:1d:a0:76:3d:8e:17:
38:06:19:d4:8e:70:3f:43:d7:01:ec:03:e1:44:cd:
07:36:39:af:9d:f9:55:59:e4:9f:bb:04:4c:06:34:
1e:df:38:b6:e4:b0:bb:42:23:c5:e5:ff:d9:ee:b7:
f0:67:31:d9:37:73:68:60:08:cb:c1:cc:8f:23:f2:
31:0c:88:7f:73:74:da:3d:5b:7a:2f:bd:40:4d:57:
2d:a2:af:b4:da:67:7f:d0:6d:5a:71:03:15:42:5c:
76:44:ae:3f:90:ab:d2:1a:0f:2c:aa:0e:f6:ae:d3:
a9:c1:7c:dd:b8:a8:d6:99:3d:06:45:20:bf:d5:bf:
74:7f:6b:5e:68:fa:03:0e:24:60:7f:31:d4:ce:91:
04:2d:96:f6:e4:d9:56:fe:70:08:a8:f4:75:42:e3:
dc:b7:5b:8b:0d:09:73:ef:08:6f:89:51:a9:e2:b6:
c4:79:2c:c1:fe:06:3c:5b:4f:9e:42:bb:ca:9b:9d:
25:e1:0b:90:6c:ae:b7:24:e0:4c:c2:5b:7e:31:60:
1d:b5:28:4d:78:76:2d:79:fe:75:80:65:ae:a8:f6:
a7:f4:2a:f5:6f:5c:12:4e:1c:a8:9a:14:e0:a8:92:
ab:07:8c:e6:22:77:23:84:1a:71:44:3d:27:e9:78:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:E5:50:63:6E:0F:E0:6A:7B:5C:90:C1:42:DB:F9:7D:65:F6:08
X509v3 Authority Key Identifier:
keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:91:97:c3:8d:15:92:9a:1c:b1:96:20:e4:d3:6b:c8:73:
23:ab:b2:75:a6:f3:d9:e7:d4:ef:10:99:0f:c6:08:46:c5:7c:
d7:ff:07:0f:b0:e5:97:3d:3f:13:8b:61:6f:00:1c:65:9b:25:
07:0d:62:c8:1c:de:36:64:e2:b2:1c:80:f2:09:f8:b3:35:b5:
d0:22:3d:14:0f:73:25:24:8b:df:6f:e4:a7:83:0a:77:fd:22:
22:af:ab:f9:23:2b:bb:63:13:80:75:af:6c:51:8f:8e:52:75:
19:0a:3e:cb:45:87:fd:b0:31:6f:ed:6f:d5:56:26:98:58:dd:
86:e6:1d:f0:7f:f0:ef:8e:28:4e:3e:d0:28:16:47:7b:2a:3e:
dc:a3:55:46:d6:28:0a:33:3c:b9:48:c2:d2:ec:99:24:3e:f5:
07:9e:78:34:73:8f:4b:fb:ad:60:3f:b3:82:ed:e4:83:e6:82:
ed:05:2d:f2:f5:5f:ba:58:65:3a:87:1d:ab:b3:54:c4:87:1a:
d6:03:8b:ab:79:67:88:76:45:10:f3:31:87:23:bd:cd:52:b1:
ad:34:5d:92:ce:62:da:7a:33:8e:36:d4:60:29:d7:2f:80:4f:
40:43:c7:8b:d6:4e:39:5c:b2:c1:76:57:68:74:48:47:e7:f9:
80:58:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:21 2025 by rpki-client