Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: 8cv01g2ztL+lv8jC0g0vIf9A/EUEjT/mAQeZifQEEt0=
Subject key identifier: 5A:AC:E5:84:2D:41:76:31:CB:FF:AA:B7:89:8B:06:31:C7:75:E3:89
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019748FA1C7386AA358B04F711B3DA7C2194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 07CA
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: VNX3SKsp5dkOQyNRvLkW9ecNSIVQcJu5FjU2KXfoNb0=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1c:73:86:aa:35:8b:04:f7:11:b3:da:7c:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=5aace5842d417631cbffaab7898b0631c775e389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:3f:dc:52:0c:dc:ca:7c:dc:d6:76:03:65:
e4:46:fa:dc:38:8f:0e:c4:b9:8a:6b:75:60:22:5a:
37:ca:14:13:7f:29:4b:15:9e:9f:eb:4f:25:4d:83:
f7:fa:c2:0d:a1:17:43:9b:6c:ad:5a:16:61:22:61:
34:18:03:57:ea:c5:c3:fc:7c:76:10:8d:b3:bb:55:
4a:12:7a:8e:f6:3c:a3:ce:b8:95:36:2c:fb:4b:b6:
45:83:b6:5b:58:d1:14:c1:a2:66:35:ba:e3:64:1c:
eb:10:ab:01:6e:65:44:91:bc:94:ce:84:de:e8:56:
8d:d1:b8:90:7d:ca:23:1a:62:7d:c5:ea:2c:a1:8c:
45:7b:2c:b4:58:5c:76:64:ef:e4:04:13:16:bd:09:
cd:f1:82:e9:27:5b:82:e6:fb:ab:93:82:ec:a7:91:
17:a4:84:71:9c:33:c9:af:a3:cd:30:c5:89:07:2e:
ce:89:75:8c:27:12:45:18:31:02:48:ee:b3:f9:ce:
c7:d6:0a:4a:f0:6d:01:94:d5:8b:a3:ca:21:b6:2f:
e8:b7:13:dc:80:b6:65:71:f3:e2:1e:2f:dd:bf:cd:
7d:e5:94:9c:57:ff:0f:62:7c:a4:63:cb:ff:80:23:
c1:ef:c0:4c:5c:bc:a9:98:e3:58:0c:54:8f:f0:5b:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:E5:84:2D:41:76:31:CB:FF:AA:B7:89:8B:06:31:C7:75:E3:89
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7a:b1:f8:a1:27:1e:40:cf:15:f9:f9:64:bf:9d:8b:bf:a2:
fd:b0:d7:ef:9c:61:82:fd:ae:33:1c:d0:3e:82:77:ba:ee:7e:
d0:3a:2d:48:a7:4c:b3:e0:99:73:03:95:2b:e1:d4:91:d0:8b:
ce:86:72:5a:14:4b:a6:25:36:d9:f5:12:ba:83:94:7c:85:b1:
3b:1f:53:3b:29:7a:83:8e:6d:c4:e9:a1:64:bf:3e:f0:d7:60:
d9:c1:b8:34:ac:47:46:51:18:ab:6a:f9:82:45:a6:74:6c:22:
cd:69:66:b0:08:4e:f7:af:70:de:2a:48:0a:02:1e:12:bb:19:
16:49:fc:70:ac:df:39:8e:93:2a:d5:98:31:ac:95:d8:ee:83:
17:1f:6b:1a:19:73:75:1a:27:d0:cf:82:5c:ad:69:3a:78:77:
64:9c:6d:de:e4:5d:ee:de:ea:97:d1:bc:1e:8d:cf:c7:86:c8:
92:fd:f7:d7:fc:9d:02:d7:41:33:b4:4f:7c:cb:6c:3d:cb:e6:
56:33:2e:72:4a:91:50:11:a4:57:92:b2:e1:06:65:d1:4e:f4:
38:34:a8:44:e5:55:62:58:55:23:f6:02:b1:47:56:18:76:64:
10:ed:1b:a8:69:83:fa:8c:c9:58:ce:6f:b9:dc:b6:92:d8:f0:
df:d0:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:30:09 2025 by rpki-client