Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: o2G2nzF3F0TDI9amapQXgmNIRSwsX/BgYwEPIHGBLpk=
Subject key identifier: 3C:24:81:77:06:6B:C3:6F:4F:E8:C6:0E:41:60:BA:B8:09:1F:8D:BC
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0198481B4CF5CFFF40364A6D49E2F55B5AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 19:00:05 +0000
Manifest this update: Sat 26 Jul 2025 19:00:05 +0000
Manifest next update: Sun 27 Jul 2025 19:00:05 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: pS4qUxoFwvYjQo40/qNUXeAakVz3hA2tUXJm3u39s/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:4c:f5:cf:ff:40:36:4a:6d:49:e2:f5:5b:5a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jul 26 19:00:05 2025 GMT
Not After : Jul 27 19:00:05 2025 GMT
Subject: CN=3c248177066bc36f4fe8c60e4160bab8091f8dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:05:2d:74:8d:66:0f:75:10:96:4d:fc:ed:
6a:73:bc:f2:68:d0:29:3f:49:14:d1:47:8c:c1:95:
47:50:e3:3c:9f:87:0f:48:2e:c3:8a:25:01:33:c1:
82:bd:5e:83:a5:32:17:a7:4d:bb:95:25:de:aa:96:
eb:a5:0d:69:40:0d:ca:36:9e:64:3c:fe:5d:86:7d:
66:21:8b:29:2c:09:d9:a5:0a:b4:c5:8e:1b:8f:42:
db:db:58:b8:1e:39:6d:3c:ce:76:9b:42:d9:28:08:
bf:ab:25:96:15:3b:77:14:a1:94:1f:56:1c:31:df:
a5:c9:b8:49:ad:e4:9f:eb:c7:e5:b5:52:2e:ad:10:
25:a0:a7:e2:19:5a:f3:f8:23:a7:e1:a9:57:ad:e8:
80:1c:67:3d:3a:57:ed:5a:f9:a5:f3:57:7d:11:f3:
c4:e3:83:37:20:bc:61:1d:21:65:55:b6:06:53:6a:
3b:c6:e5:a5:1b:a9:00:e6:72:d0:fc:ea:d9:88:ee:
23:d3:f2:79:f3:70:10:30:c6:ad:2a:7a:8a:3c:8a:
0c:f4:88:80:4d:42:f2:8a:94:88:e0:91:17:4d:07:
8d:19:6d:38:28:a2:b3:ed:8f:88:05:85:fd:0e:ac:
56:82:b2:b1:85:4d:01:1d:52:c2:a3:ac:ca:5c:3f:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:81:77:06:6B:C3:6F:4F:E8:C6:0E:41:60:BA:B8:09:1F:8D:BC
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:a8:ab:79:7d:56:53:53:63:b3:98:80:bc:f3:fe:71:be:
ca:63:00:da:a3:86:08:ce:c9:4c:68:03:6f:a4:aa:55:f8:a9:
32:12:3c:1c:34:77:bd:84:d4:bc:f0:00:2b:08:08:90:6c:37:
53:8f:e4:ca:ca:35:48:f9:d6:89:45:b1:78:b8:ce:ca:f6:79:
0d:f6:c7:73:7a:da:86:58:a0:a2:d6:20:ce:81:f3:82:f2:25:
97:6c:f4:ac:ac:98:b3:ef:3d:8d:47:5e:8c:e5:bd:6a:33:e7:
e0:c0:02:42:c8:f5:61:71:b4:c9:e1:99:f2:6c:d7:1d:70:3b:
6c:5a:fa:b5:ec:af:1f:0e:a7:5a:42:25:76:62:c8:e9:68:a4:
c5:4f:a2:08:68:44:9c:4f:e9:50:ad:1d:89:2e:f2:5e:09:0f:
de:37:27:80:cb:26:eb:a2:1b:cf:1b:06:ff:2a:cc:ae:ca:1d:
13:70:7f:44:ad:a4:89:52:7d:6e:db:35:df:e1:3d:c5:b0:39:
fe:63:6a:7d:7c:95:95:81:f1:23:5d:38:18:70:10:74:b9:c3:
65:e0:41:3e:d4:7a:18:d9:f2:58:86:73:00:c6:64:5c:45:83:
d8:70:c3:af:7c:cb:ab:62:13:76:4d:50:35:14:cf:4a:4d:ba:
4b:3b:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:45 2025 by rpki-client