Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: BfTlP0NrnLp3uSa78051YHh9O8rOh2jFQnXwBTa7HII=
Subject key identifier: 9C:D1:8B:A8:AC:9D:73:59:D0:DE:2F:66:00:BC:E5:3C:BE:CA:58:0A
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0198481B8F53E3F6FF109FF892B1DCB2A708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0DC3
Signing time: Sat 26 Jul 2025 19:00:22 +0000
Manifest this update: Sat 26 Jul 2025 19:00:22 +0000
Manifest next update: Sun 27 Jul 2025 19:00:22 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: VYH/KtSu5DIbB/RfRlcmyQ0Pje7klr04/ugc7Zw18QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:8f:53:e3:f6:ff:10:9f:f8:92:b1:dc:b2:a7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Jul 26 19:00:22 2025 GMT
Not After : Jul 27 19:00:22 2025 GMT
Subject: CN=9cd18ba8ac9d7359d0de2f6600bce53cbeca580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:ae:a5:e7:36:08:fb:94:0f:7a:6e:32:95:
23:49:1c:fb:66:c0:f0:da:da:89:89:c3:7d:8f:40:
aa:00:81:45:2f:09:ed:6c:d6:d3:a6:ce:2c:55:13:
ca:e5:16:e4:0f:ef:eb:38:b4:5f:ec:15:28:27:65:
d7:ce:a3:78:8b:e6:a3:8f:c0:27:07:20:e9:28:97:
d9:a4:09:43:11:f4:c4:ca:38:2f:89:ca:0a:bd:f4:
e2:cc:cb:16:39:3c:fc:02:11:b5:f2:5c:97:c0:d1:
35:db:c7:44:cb:a2:e2:97:de:61:ac:06:bc:b0:32:
d2:62:12:6a:8e:ce:1f:93:c1:65:41:00:1f:dc:31:
7a:c6:73:cf:f1:2f:fe:9a:73:3d:b0:cd:c9:2b:67:
b0:19:c1:04:59:ec:c0:fa:1f:f1:41:9e:93:4d:e3:
b2:48:46:5c:d0:f7:4a:a6:45:50:32:02:b6:71:b1:
8c:9a:fd:18:e5:8a:27:57:a3:a3:30:74:31:85:e9:
85:72:bc:1b:21:d1:0d:0e:d9:a0:15:af:10:54:0b:
93:1b:88:96:77:5c:47:c9:e3:70:7c:db:61:6e:15:
7f:1d:8e:49:61:12:04:0f:20:7c:27:bc:d3:9f:32:
d8:3a:52:44:e7:f3:d0:09:72:27:fd:47:27:5b:ac:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:8B:A8:AC:9D:73:59:D0:DE:2F:66:00:BC:E5:3C:BE:CA:58:0A
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:aa:19:5c:79:1c:58:60:9f:53:10:40:4e:2d:0f:7e:45:0a:
ec:e3:f6:cc:ca:e5:1f:06:e0:a1:e0:91:35:86:d5:22:a4:cd:
a3:e2:29:30:b3:1a:19:b9:03:8a:1c:f8:b9:f6:21:04:83:55:
22:09:b3:b7:2a:52:9d:d3:b7:3f:f3:be:ad:32:84:52:56:e9:
dd:3b:ef:ee:2c:6d:6d:52:55:cd:7d:de:b6:b4:b5:61:2a:57:
68:0f:d5:f6:0f:45:5c:cb:93:ea:b3:00:15:46:87:ae:bd:86:
9d:5d:e4:aa:93:7f:72:d7:c2:b1:8b:04:b2:80:ff:db:af:aa:
6a:3e:3c:91:fc:61:c6:1c:07:ff:52:7d:2e:5f:d7:a7:5b:1c:
e3:d7:88:b1:9c:f9:27:35:91:f2:99:06:f4:98:e8:63:60:88:
9a:07:01:a2:5c:d7:bb:4c:82:f4:ca:51:68:f7:b2:d0:bd:f1:
c0:e1:94:96:7a:0e:40:66:c0:aa:83:ab:35:b9:5a:03:24:0b:
99:b0:70:f3:11:c2:92:94:d6:bc:ad:16:d6:7b:0c:5d:6a:5a:
7e:e5:50:cf:71:e7:04:41:b5:a7:25:8c:fa:be:2a:4c:19:b0:
de:f4:a4:87:74:26:a6:74:52:be:bb:85:db:41:b4:82:34:2c:
44:38:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:40:43 2025 by rpki-client