Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: YY3CiDNmxDxCbOKPhn4xY5S+SlwvMXrOb6kwB7ZB8ak=
Subject key identifier: 11:55:B5:8F:03:22:F6:3D:35:06:A0:DA:4F:6E:FE:B5:BD:00:F8:BB
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01992C6B5F88F846BCC0B8A95D62ABBC1F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 0299
Signing time: Tue 09 Sep 2025 03:00:58 +0000
Manifest this update: Tue 09 Sep 2025 03:00:58 +0000
Manifest next update: Wed 10 Sep 2025 03:00:58 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: Lxk7qZIeZWj8fA27p+iHU5Npvk02O8KgKdIH5DnjJaU=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:5f:88:f8:46:bc:c0:b8:a9:5d:62:ab:bc:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Sep 9 03:00:58 2025 GMT
Not After : Sep 10 03:00:58 2025 GMT
Subject: CN=1155b58f0322f63d3506a0da4f6efeb5bd00f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:c0:e5:ea:23:2b:46:82:ab:9d:a1:8a:87:
2f:1b:90:11:4a:c8:23:b0:52:f1:ce:f1:19:65:ea:
25:26:58:66:40:11:03:59:33:de:c9:62:4d:b1:6a:
5b:82:8e:a6:c4:f0:04:b6:01:14:9e:47:d7:13:68:
3a:15:7f:82:be:9a:24:8e:39:a8:48:7a:62:5a:33:
59:40:63:d6:fa:ab:fc:39:e9:60:41:51:9b:79:39:
25:60:85:94:54:2b:de:49:f3:55:4c:96:69:f9:88:
7c:8c:a1:2d:da:f3:fd:2d:55:51:3c:f5:f9:82:63:
54:c8:e3:20:2e:00:9c:63:f9:18:3c:4e:3a:21:ed:
c6:51:ce:6c:dd:fa:97:61:90:f8:3a:84:e4:9f:41:
c7:01:a5:c5:1f:18:c1:1e:4f:b7:08:e0:68:d7:ae:
d3:5a:9d:7b:75:ae:25:a4:b8:06:7a:3a:68:b6:e8:
bb:e1:b2:fb:62:89:11:1d:fd:01:55:30:f4:af:e6:
c6:09:2c:de:71:77:a3:5b:3b:1e:94:d5:2a:0d:cb:
26:6d:f9:e9:21:aa:fd:75:5e:f6:64:86:50:e6:34:
96:dd:2d:be:89:95:b8:51:2c:4e:4a:7c:e7:9c:88:
c0:87:11:8f:3f:62:36:5a:d1:b5:04:cf:07:c4:80:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:B5:8F:03:22:F6:3D:35:06:A0:DA:4F:6E:FE:B5:BD:00:F8:BB
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:b7:cb:2c:67:5f:bd:97:2e:bd:59:ff:47:b9:7c:9a:cc:
5c:f3:4d:38:c4:28:e4:6d:ca:7f:61:d7:6d:da:2b:49:01:6a:
55:9c:b1:71:55:47:d7:c8:71:60:58:f6:81:fb:46:c7:d5:a7:
6a:3f:ab:00:4a:2c:8f:34:f5:52:44:c3:33:6c:20:52:ad:89:
96:22:ed:78:19:c7:ff:bf:c6:ca:93:e3:fb:07:da:3a:85:fd:
07:7e:e4:cc:00:37:49:16:aa:47:e3:dc:ac:ae:f4:06:0d:18:
29:ae:17:c5:89:6c:d6:5e:1d:a9:9e:76:61:fb:99:9d:29:7a:
f3:a9:6f:ed:67:35:4d:17:1e:d3:14:70:c9:15:0c:38:97:49:
33:e1:bc:82:8f:47:2f:f3:1c:95:64:e1:b3:49:c7:40:ab:a8:
d7:13:32:7d:a8:86:c9:91:09:5a:97:88:5d:e5:b7:bb:0a:a9:
39:a2:19:94:6e:0e:1f:72:d9:60:cf:a7:1f:28:c3:29:c5:d7:
95:45:0e:da:20:06:2f:f5:5a:06:87:5c:e3:68:89:39:50:50:
1b:4f:a2:f9:d6:27:b1:6f:92:d0:42:88:a2:60:48:37:cd:e7:
4a:e4:5f:29:4a:5a:8e:49:40:33:b9:b4:58:8f:8e:dd:5c:89:
63:60:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:06:04 2025 by rpki-client