Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: bhaeU7SopZkkYV5+mOtdHkNyjJLzdHBEy5GX9k/P/4I=
Subject key identifier: 7F:D9:04:3E:2A:7C:3E:E7:B2:1D:17:F0:45:B3:35:AE:61:BC:6F:76
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 01976960BB26908E593776271875CFF7856E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:00:36 +0000
Manifest this update: Fri 13 Jun 2025 13:00:36 +0000
Manifest next update: Sat 14 Jun 2025 13:00:36 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: gg6poxQRAtjd2Hn3FfCiNJ0mMwEWJMS++tYK2L+CD8o=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:bb:26:90:8e:59:37:76:27:18:75:cf:f7:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Jun 13 13:00:36 2025 GMT
Not After : Jun 14 13:00:36 2025 GMT
Subject: CN=7fd9043e2a7c3ee7b21d17f045b335ae61bc6f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:e6:b3:0d:b5:4b:55:ad:c4:4b:9a:96:86:
2c:05:b6:9d:ba:65:fb:9d:6d:93:bb:32:fe:09:c2:
1d:fa:f9:92:44:eb:b0:21:ab:94:08:da:44:d6:e4:
37:0f:e4:ec:aa:29:70:ee:55:02:9d:80:ba:eb:f3:
95:6b:bc:34:0f:ec:2d:84:7d:a4:a3:76:d2:c2:07:
e8:71:b9:62:92:87:85:02:e5:45:49:da:20:66:ec:
ea:c5:58:e5:d8:fa:04:58:97:15:c2:0c:c6:5f:dd:
0f:9e:a4:f5:55:7e:a0:29:54:01:44:1d:67:a1:24:
c5:bf:28:c3:4e:17:c2:38:92:b9:46:c0:fc:15:d0:
ab:a9:31:10:c1:a4:58:fd:04:ff:72:40:d1:76:e8:
80:d1:f1:93:8a:3b:2b:83:17:a7:70:dc:a7:0d:38:
6e:45:e8:15:a1:17:2d:fc:9b:ac:10:0c:48:b6:48:
bf:2a:d4:5f:39:dd:72:12:2b:3e:c6:a4:89:b9:9f:
8a:2f:2f:98:8e:0e:18:6c:1d:54:14:3c:39:57:b2:
c3:2b:c9:d3:6b:30:cb:5e:92:e6:df:f8:50:99:ad:
af:fd:cb:25:59:ed:40:2b:58:a7:67:cd:5b:a8:f4:
55:ff:ea:7f:0d:3f:71:c4:d7:ab:e4:45:63:d6:20:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:04:3E:2A:7C:3E:E7:B2:1D:17:F0:45:B3:35:AE:61:BC:6F:76
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:62:93:61:9b:0a:ab:53:b4:d1:a4:2c:c8:60:26:5c:a7:
1a:df:4e:7e:cc:2b:b6:67:19:12:8b:bf:65:c2:c3:31:26:40:
c1:a3:ff:e7:79:91:3b:3b:54:81:fa:fa:dd:db:c7:15:61:a4:
70:0d:ad:36:e1:c2:da:3e:63:6d:eb:98:3a:8e:2d:aa:65:5d:
c6:8b:60:81:38:09:48:05:4f:2f:b1:d6:5c:4b:01:5d:a7:9a:
71:e8:c5:b7:1c:c8:b4:44:55:6c:41:d7:78:21:6b:7a:19:a2:
cf:27:a4:8b:b4:60:65:36:96:98:4f:c6:7a:b5:57:62:b7:51:
ce:d5:cd:3f:e7:2e:a7:90:f9:98:28:76:30:ab:0f:34:6b:22:
cd:be:84:49:88:61:43:c3:60:3a:52:89:5f:87:5f:4d:6f:1c:
24:e5:0a:80:63:bd:d9:5e:32:37:44:9d:b6:a5:ab:57:f9:65:
04:aa:69:e6:95:6a:19:87:e6:55:91:7b:24:90:97:54:00:0d:
f4:35:c1:88:14:2f:df:55:28:e8:65:54:5c:71:76:87:c7:44:
e6:5a:55:ff:2b:8e:57:ab:9d:3a:19:ca:ea:46:75:4d:ea:51:
58:19:19:b7:f6:93:ac:dc:9e:ff:f8:6b:ea:16:81:ea:cd:11:
36:3f:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:56:18 2025 by rpki-client