Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: eeRqc9Hm1dVIl3pWEIePR/ClAEzZ2Jy+GaSr0k0sI+g=
Subject key identifier: 3B:37:39:BD:19:37:E2:FB:29:DF:C9:AA:27:00:33:61:63:CB:B6:84
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 01975FB97A34CBF8EFF29AE3ED2C5CBC3DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 16:01:20 +0000
Manifest this update: Wed 11 Jun 2025 16:01:20 +0000
Manifest next update: Thu 12 Jun 2025 16:01:20 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: oxcGuAWh9ks3j+sqXMBiLTR9i6vuXBpsZoGhIC3uvww=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:7a:34:cb:f8:ef:f2:9a:e3:ed:2c:5c:bc:3d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Jun 11 16:01:20 2025 GMT
Not After : Jun 12 16:01:20 2025 GMT
Subject: CN=3b3739bd1937e2fb29dfc9aa2700336163cbb684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:4b:a6:32:25:f1:94:d2:ec:a4:47:80:5a:
ca:a9:90:68:c4:bd:c2:be:73:d1:37:26:6c:2b:a8:
48:2e:d2:53:1f:17:e0:67:e0:b8:cd:d9:e9:f2:50:
3d:88:1b:9b:60:27:b9:fb:1f:bf:f7:62:51:62:1c:
ff:e0:58:53:31:7f:e8:82:0f:c4:d4:25:80:0e:e6:
b2:f9:f4:35:57:a6:71:d2:0f:47:21:05:3c:5e:02:
2f:fd:82:98:ab:d3:09:01:3d:c5:29:0c:39:6b:36:
eb:f7:bd:34:25:0b:f3:68:68:4b:15:70:df:de:4c:
0a:a6:34:41:43:04:bd:0a:16:97:64:e6:db:80:cb:
6c:84:3d:9c:d9:06:b3:c6:e0:e5:08:82:2a:ed:d3:
21:ef:f3:a9:c3:c8:86:ac:bd:27:cc:e5:7e:a2:f4:
5f:76:61:e2:eb:53:a3:37:b6:3d:2c:fd:01:fc:9a:
13:34:d9:eb:04:41:b4:a3:fc:4d:aa:a5:1f:8d:14:
a5:46:8d:f7:07:65:51:67:90:f3:cb:ea:7f:1c:6b:
d5:d5:84:d0:fa:8f:6d:73:68:14:83:eb:4c:be:67:
c1:29:97:24:e3:a6:bf:e0:a6:e9:d4:fd:7c:2f:57:
6b:12:43:ca:66:ec:b6:a7:76:05:c4:54:80:98:27:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:39:BD:19:37:E2:FB:29:DF:C9:AA:27:00:33:61:63:CB:B6:84
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c0:72:7b:95:75:6f:12:64:4b:88:ce:01:cb:16:30:8e:79:
1b:00:8b:4f:32:52:62:7f:66:ee:d7:17:52:f9:c8:80:2f:9f:
20:7d:14:fd:9a:93:1b:ac:e4:1e:f4:c9:bb:ef:7c:fe:2f:25:
06:45:9c:85:cb:af:1e:75:9f:f5:76:c9:4c:ef:c7:1d:4e:b1:
5c:a1:d0:29:2f:2c:70:64:7e:3b:16:62:a0:d6:ef:0e:f0:24:
e0:36:38:52:78:12:4e:a1:c9:47:4c:3a:0c:d5:0f:4a:5f:41:
3d:d5:8b:06:1b:c5:76:78:a9:81:7e:f7:4c:d8:29:55:b1:17:
13:07:49:04:82:fc:b4:d2:94:f8:0c:4b:cc:d7:d4:45:6d:46:
e1:2c:85:ac:f5:18:00:3e:e8:a7:fc:14:ce:ef:51:10:da:6c:
0c:f6:24:60:cf:ab:82:62:7e:61:8f:d8:b1:1c:75:88:23:dd:
11:11:cf:2c:9e:62:7d:18:f1:79:be:c0:34:9f:94:3d:92:43:
88:d0:bb:b8:2c:45:8b:da:36:8e:bb:21:b2:fb:7c:1b:c7:5a:
b8:b6:24:59:43:1b:91:e0:8e:e9:7d:57:cd:56:81:bf:2c:0e:
fc:55:e6:f5:a9:66:56:72:a5:c9:78:c8:73:32:d5:6c:34:f2:
f2:b5:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:57:26 2025 by rpki-client