Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: noEvdfMWy8Z0I2DluzJzcowfBGk6FRYau113P68RNTM=
Subject key identifier: 0D:D4:F3:6A:21:4C:31:49:F0:C5:A4:BD:9A:AB:86:1D:97:85:84:09
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019767725E3FDFAFD135558282063FEB0BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 04:00:37 +0000
Manifest this update: Fri 13 Jun 2025 04:00:37 +0000
Manifest next update: Sat 14 Jun 2025 04:00:37 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: 7HetBF0CxUgzDHW2ym04AnYdYkQVLOh1V3JwPZR5zM8=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:5e:3f:df:af:d1:35:55:82:82:06:3f:eb:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Jun 13 04:00:37 2025 GMT
Not After : Jun 14 04:00:37 2025 GMT
Subject: CN=0dd4f36a214c3149f0c5a4bd9aab861d97858409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:b8:b6:cd:7a:cd:fa:f1:3d:6f:76:c8:94:
9c:58:96:c0:d3:28:5d:f7:07:7f:fe:b3:4d:68:50:
fc:eb:c3:24:8e:3b:28:0c:a9:97:d0:1c:21:b8:51:
6f:54:54:12:55:f0:78:85:b3:c5:a5:04:f1:e5:48:
a1:65:f5:5f:83:c1:f5:74:26:68:83:35:e6:82:89:
45:aa:2e:63:0d:46:bb:c9:d8:45:f2:be:91:13:06:
0a:2a:e3:4f:bf:a9:a8:90:69:e2:22:23:2c:a8:84:
3f:d2:7f:d9:49:a4:b3:7d:de:cf:20:d1:ea:fe:43:
47:40:60:42:ab:a2:65:cf:85:bd:a2:8f:67:10:52:
b8:69:4b:69:0d:e8:a6:19:2c:a4:89:35:f7:a7:07:
81:28:89:bd:a1:fe:ff:66:87:1c:7e:43:89:fe:93:
ba:99:ce:6f:ab:25:e4:eb:1b:a0:93:02:41:01:f0:
30:e3:4d:75:7a:cd:3a:51:d5:e7:a4:3b:01:19:d1:
6f:0a:c0:ec:1b:49:dd:88:63:19:50:9f:ec:e7:dc:
8a:d9:98:18:f8:be:e1:42:8e:2f:05:40:79:ce:21:
6e:07:15:44:94:f7:09:53:a5:8a:b4:60:88:a3:7f:
80:eb:86:26:c2:c7:40:39:77:c8:05:94:0b:ba:b1:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:F3:6A:21:4C:31:49:F0:C5:A4:BD:9A:AB:86:1D:97:85:84:09
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:9a:da:8c:32:f9:70:99:c6:ff:38:cd:33:a4:87:ea:1f:
18:18:02:74:c8:e3:fe:02:35:90:64:3e:13:59:e6:d4:24:dc:
4d:77:2a:82:7f:5b:11:51:3c:d2:18:ef:4e:07:7c:ce:24:3e:
d9:07:6d:b9:e2:d9:69:40:4b:0d:f1:7c:9a:34:88:d3:d5:06:
3e:46:ef:8d:a3:1c:4c:8c:1f:75:85:21:4f:36:87:c2:08:a0:
4e:f8:17:4e:51:4f:d9:0b:83:0b:15:9a:e5:56:3d:56:2d:60:
94:0a:2d:6b:f9:29:85:8b:59:7d:94:88:e0:9c:11:c5:cb:aa:
4b:9f:2c:aa:60:1d:f9:60:be:dd:4c:76:85:f4:fa:41:20:b2:
55:a4:54:fe:82:2b:fb:5a:5a:7f:2d:56:2e:f8:d7:77:c9:b1:
64:91:b6:50:fd:b6:57:00:16:21:01:70:12:9e:f7:cd:52:77:
a1:fe:25:cb:bc:29:a2:6a:66:95:8d:c6:d9:31:c8:0e:f2:3b:
8a:a8:2d:34:84:88:26:a5:34:2a:61:b6:69:52:56:0d:0d:e0:
61:da:77:1e:c1:94:e2:f4:64:b7:24:ad:22:8f:43:20:3b:ba:
c9:69:73:b1:f1:55:40:f0:56:00:f7:fa:e1:8d:38:c1:eb:8f:
51:fc:c6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncl4/36/RNVWCggY/6wvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3
ZjI1ZTQwHhcNMjUwNjEzMDQwMDM3WhcNMjUwNjE0MDQwMDM3WjAzMTEwLwYDVQQD
EygwZGQ0ZjM2YTIxNGMzMTQ5ZjBjNWE0YmQ5YWFiODYxZDk3ODU4NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqG4ts16zfrxPW92yJScWJbA0yhd
9wd//rNNaFD868MkjjsoDKmX0BwhuFFvVFQSVfB4hbPFpQTx5UihZfVfg8H1dCZo
gzXmgolFqi5jDUa7ydhF8r6REwYKKuNPv6mokGniIiMsqIQ/0n/ZSaSzfd7PINHq
/kNHQGBCq6Jlz4W9oo9nEFK4aUtpDeimGSykiTX3pweBKIm9of7/ZoccfkOJ/pO6
mc5vqyXk6xugkwJBAfAw4011es06UdXnpDsBGdFvCsDsG0ndiGMZUJ/s59yK2ZgY
+L7hQo4vBUB5ziFuBxVElPcJU6WKtGCIo3+A64YmwsdAOXfIBZQLurHCIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3U82ohTDFJ8MWkvZqrhh2XhYQJMB8GA1UdIwQY
MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt
ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh
LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAKa2owy
+XCZxv84zTOkh+ofGBgCdMjj/gI1kGQ+E1nm1CTcTXcqgn9bEVE80hjvTgd8ziQ+
2QdtueLZaUBLDfF8mjSI09UGPkbvjaMcTIwfdYUhTzaHwgigTvgXTlFP2QuDCxWa
5VY9Vi1glAota/kphYtZfZSI4JwRxcuqS58sqmAd+WC+3Ux2hfT6QSCyVaRU/oIr
+1pafy1WLvjXd8mxZJG2UP22VwAWIQFwEp73zVJ3of4ly7wpompmlY3G2THIDvI7
iqgtNISIJqU0KmG2aVJWDQ3gYdp3HsGU4vRktyStIo9DIDu6yWlzsfFVQPBWAPf6
4Y04weuPUfzGJg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:08:44 2025 by rpki-client