Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json)
Hash identifier: p0HiDtHhWM7RUikgEceNIcdH1f8mhrM/tTAVoU1Pqgs=
Subject key identifier: B7:98:89:75:A9:19:E7:44:1F:38:67:DD:01:8F:37:11:01:A1:D7:D1
Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Certificate serial: 0197488D1211283AECE0D2844838508CCE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
Manifest number: 02A2
Signing time: Sat 07 Jun 2025 04:01:34 +0000
Manifest this update: Sat 07 Jun 2025 04:01:34 +0000
Manifest next update: Sun 08 Jun 2025 04:01:34 +0000
Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: FyL1lWOEMwjYOL7/zRc+l9ftDztEI7vtYVlqh5iqkAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:12:11:28:3a:ec:e0:d2:84:48:38:50:8c:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Validity
Not Before: Jun 7 04:01:34 2025 GMT
Not After : Jun 8 04:01:34 2025 GMT
Subject: CN=b7988975a919e7441f3867dd018f371101a1d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:f9:92:d8:ff:d2:e3:b3:60:b4:94:4b:8f:
2b:cb:7a:3b:3b:0d:68:c4:e0:7f:3a:92:a3:bd:f1:
42:e5:45:b8:5b:ae:43:86:e3:cf:98:78:57:f5:23:
93:9e:9e:5e:f1:82:1c:f0:20:67:7d:e9:58:d1:9c:
7a:2d:b0:f6:23:37:ac:ab:de:41:05:99:32:8f:0d:
d9:13:98:6b:89:8e:e1:36:f9:bc:fd:3a:b1:fb:a8:
c6:51:f4:ad:45:bb:57:b9:52:00:5d:87:a5:5a:85:
fd:7a:76:fd:7f:1a:e7:6f:26:33:2f:13:e3:62:56:
7d:05:25:34:3d:67:64:b6:88:75:89:92:8c:00:b6:
72:39:60:fe:ec:82:07:c3:1b:0b:20:27:90:b3:b7:
d6:e6:ee:d2:e0:b0:75:ef:48:19:89:aa:7b:49:72:
19:c6:68:0f:23:10:98:cd:8d:48:57:a6:d2:fc:b6:
7a:c0:d0:4a:ad:1c:07:af:f7:d9:3c:c0:a7:06:4a:
2c:7a:72:c8:95:5a:8e:27:97:74:fe:b4:a7:ec:1d:
36:6d:86:32:f0:9d:20:7b:6e:e1:92:34:fa:7e:dc:
2e:3b:e6:67:e5:3c:f6:a0:10:a2:49:97:4c:9d:29:
97:21:66:dc:43:59:2b:d2:ac:7c:25:5d:3c:3a:f8:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:89:75:A9:19:E7:44:1F:38:67:DD:01:8F:37:11:01:A1:D7:D1
X509v3 Authority Key Identifier:
keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:30:1a:3a:a5:31:ad:6b:0d:b5:83:e8:f6:76:fc:ed:fd:36:
cb:ff:98:11:27:57:24:c3:b9:c1:88:3d:36:ba:e6:f1:69:d7:
c6:ab:7e:f6:a8:b8:19:f5:3e:44:68:2c:f4:47:b7:93:7f:11:
08:60:4b:33:a7:5a:ac:59:c1:54:de:e6:45:60:50:95:e8:08:
c4:5f:57:5f:18:f2:28:a3:93:92:8c:9c:a6:dd:8b:7c:20:70:
78:74:9b:a5:6f:6c:27:aa:e0:e7:4c:ab:65:8a:95:a6:d5:03:
29:20:ea:9f:94:48:ed:96:2f:b4:75:26:b7:9a:44:c0:17:03:
c6:ff:81:db:45:04:11:46:74:37:83:48:27:9f:ff:4a:71:0a:
4b:57:bc:4f:3d:05:31:b4:09:b4:0c:9d:e5:1b:1d:33:f7:e0:
48:14:05:19:67:4a:22:14:3b:bc:ae:e8:2b:e0:d5:a4:e4:d3:
89:37:75:2c:99:e3:b3:c9:f0:38:53:4c:ef:72:09:58:50:19:
27:8f:cd:09:15:ec:d9:08:af:03:5f:4c:fa:0c:88:7a:13:f3:
f8:b9:bd:78:ef:31:8d:1f:8a:a0:08:b2:d8:35:3e:a4:19:9f:
b5:e0:ca:01:ab:67:8a:fe:72:7d:1d:ec:a9:24:96:4e:f7:9f:
70:cb:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:22 2025 by rpki-client