Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: 6UUu522NUYwpCGlpm1QmFMfyWKH3DPld5f701r41iPM=
Subject key identifier: FE:EF:A7:51:1B:E8:43:1F:97:D7:15:CF:76:F8:43:74:E4:E4:3F:B8
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019759EE56775457475B21F9EED66B0D9C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 13:01:21 +0000
Manifest this update: Tue 10 Jun 2025 13:01:21 +0000
Manifest next update: Wed 11 Jun 2025 13:01:21 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: /1dXpvRPKkjJNdD+gLF2oWWiFucT2xgEYb6S+IkuGhI=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:56:77:54:57:47:5b:21:f9:ee:d6:6b:0d:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Jun 10 13:01:21 2025 GMT
Not After : Jun 11 13:01:21 2025 GMT
Subject: CN=feefa7511be8431f97d715cf76f84374e4e43fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:0e:7c:8c:32:a8:68:d2:39:77:ed:6a:31:
eb:fd:20:c5:ed:75:8f:a8:20:2b:aa:b7:72:3a:e4:
1e:ea:e4:02:97:6e:7b:24:d5:f4:49:0b:7c:d6:b7:
d6:c1:c3:46:70:81:81:18:38:6e:7c:94:a9:2a:7d:
df:d6:69:a8:bd:6f:76:b4:cd:04:6c:83:5e:1e:b6:
2d:72:bc:a6:ae:d7:07:bd:c0:46:0e:05:8c:8a:3d:
79:7d:17:86:8a:5e:6c:84:d2:92:50:ac:c1:81:b6:
06:1c:2f:5f:b1:5b:27:b4:19:65:a3:ab:91:3c:b8:
bd:a5:6e:3b:a0:07:4f:ed:28:08:44:f9:58:f8:7c:
aa:64:8d:43:52:63:10:3d:57:e8:8f:bf:be:30:de:
e6:fc:fd:64:7e:46:fb:c2:27:05:06:37:fb:4e:1d:
06:4e:51:ba:98:21:6f:d5:65:8c:e7:87:c3:6f:d2:
37:a3:3e:bb:60:c8:82:77:6d:9b:d6:88:c4:a6:b8:
2d:de:dd:fa:cd:13:a6:ca:c1:d3:02:e6:12:d7:4f:
94:ca:8f:32:d4:2b:9c:d3:4d:ca:16:54:d3:26:aa:
91:04:c1:53:a4:c8:22:ac:97:fe:9b:d1:b1:26:7b:
13:e7:86:5b:db:9a:b7:7b:6d:d3:ff:4d:8e:64:40:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:A7:51:1B:E8:43:1F:97:D7:15:CF:76:F8:43:74:E4:E4:3F:B8
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e0:01:70:eb:29:76:c1:92:28:63:23:47:8d:5d:7e:01:30:
1b:62:26:81:eb:3c:90:33:a8:7a:88:1b:ca:66:79:20:d5:8a:
ee:31:18:e6:de:be:f0:45:01:70:32:b6:76:61:57:7e:bf:ce:
6d:ee:2a:80:25:18:88:69:95:82:e2:67:01:b6:88:9c:fd:8a:
3e:79:15:ef:54:c5:8f:ec:18:86:52:53:9d:2f:e7:3d:55:89:
48:cd:7b:a4:be:4d:c9:c3:4f:1e:e4:09:c6:b6:cb:00:a1:12:
53:b5:65:27:c0:18:37:8f:28:3e:91:16:20:26:c3:59:71:27:
a4:bc:b1:21:da:55:b9:d2:f1:a2:46:97:42:e4:ee:f3:2f:24:
db:18:51:92:d4:9d:d4:ee:bc:0b:fd:a7:21:57:76:95:d7:cb:
b8:41:f6:6c:90:6d:13:fe:d0:bc:e4:9f:47:0f:e9:e0:d5:1a:
fc:f3:36:3f:90:78:a8:53:35:a9:51:aa:f6:87:e2:e3:a8:b8:
26:c8:30:e3:73:e1:14:16:fa:12:95:eb:c1:05:a7:5e:48:25:
df:06:35:98:e1:3e:b8:f3:fa:90:60:8a:8c:81:99:ed:ba:36:
8c:ca:49:7e:f9:44:58:2b:33:0b:4a:41:ad:37:9d:fa:eb:51:
ae:b0:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:46:09 2025 by rpki-client