Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: OhKI5rEv5qVEprtFmqywtNyP/d7MLcIbfygpGti6BdI=
Subject key identifier: A9:EB:13:9E:9D:66:53:CC:F9:A6:42:46:26:B6:38:10:28:9E:FF:4E
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01974AE84B5EB0D91055568EDBFC6AB17B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 147A
Signing time: Sat 07 Jun 2025 15:00:27 +0000
Manifest this update: Sat 07 Jun 2025 15:00:27 +0000
Manifest next update: Sun 08 Jun 2025 15:00:27 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: drevzrDBxiMUZ05VsWix8VfVipKTJqoi8Tye0xjPJlc=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:4b:5e:b0:d9:10:55:56:8e:db:fc:6a:b1:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jun 7 15:00:27 2025 GMT
Not After : Jun 8 15:00:27 2025 GMT
Subject: CN=a9eb139e9d6653ccf9a6424626b63810289eff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:14:fe:87:61:c6:c9:d0:d0:d3:ae:21:d9:
0c:50:61:2c:28:bb:ca:1b:a5:5b:de:82:2a:2c:c1:
fb:75:94:ef:63:43:3b:2f:c3:88:d7:5a:12:34:20:
7c:96:37:ed:69:78:15:b6:95:14:f5:d8:20:29:32:
46:e0:c4:2d:76:89:10:c4:cb:fa:10:b4:b1:01:1a:
dc:b6:ca:97:8d:4f:0e:b6:2d:64:6f:3c:04:5f:d8:
19:20:86:c2:c1:cd:9b:80:13:c9:05:12:ea:00:ef:
69:b3:01:f7:e0:23:85:c2:37:8e:b4:e5:74:93:1b:
83:4f:8e:a1:0b:80:6c:51:86:4b:d2:9b:92:29:18:
18:26:b9:ca:4f:08:dd:a9:71:72:8a:a7:5f:80:e0:
43:2a:d5:c3:f6:08:8c:88:88:51:50:4d:cf:e0:58:
60:f3:ce:04:6c:b5:11:87:5a:bf:46:ae:11:76:87:
0c:b7:dc:79:03:6e:06:55:c0:40:41:21:89:29:bf:
c4:72:ac:53:ec:a5:23:2c:cd:60:4b:99:03:fa:29:
65:ef:23:ed:4c:c2:da:53:77:b4:ab:48:97:35:9f:
f7:88:55:9d:c8:88:7d:9a:8b:4b:cc:14:94:87:a8:
9b:aa:65:87:c6:68:c5:92:e6:2a:5e:06:24:91:2b:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:13:9E:9D:66:53:CC:F9:A6:42:46:26:B6:38:10:28:9E:FF:4E
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:70:ca:11:fa:36:76:02:6a:a9:21:0a:b8:bc:1d:01:6c:f1:
73:5b:86:00:e5:27:d8:ca:d1:ae:52:06:ab:23:5e:cd:79:e9:
4a:f4:b5:38:87:22:06:93:79:28:37:d4:e0:40:c7:76:a8:77:
9b:3f:25:fe:88:df:a1:eb:59:ce:ab:39:26:78:5f:80:e3:de:
ec:34:64:9b:c7:05:b4:66:21:4e:48:8a:52:df:e9:42:9b:9c:
b7:b7:73:a9:2f:f4:1e:a8:3b:7e:8c:15:c4:fa:67:37:41:b3:
30:89:98:93:6f:56:e4:80:d2:90:73:ea:80:96:61:ef:88:a9:
5c:70:fc:af:6c:83:1a:4b:26:ea:f5:2e:c2:07:2d:e6:f8:d8:
9a:35:c2:48:5b:81:9c:19:ae:3f:67:5b:b2:fc:8f:a6:22:9e:
16:6c:4f:5c:0b:aa:47:5e:32:c6:ad:09:61:38:d3:ee:54:a0:
c7:e7:40:bd:b2:f5:9f:9b:6f:cb:a8:9d:a8:ca:3a:aa:87:4c:
04:03:b3:a8:13:15:a8:b5:26:18:65:79:5c:ee:2a:8c:94:f4:
e4:da:97:b2:f2:09:60:5b:10:3a:e5:d9:71:95:b9:90:81:d3:
b7:fb:f4:d8:e7:4e:f9:cd:71:30:3e:1b:35:b4:4a:0a:4c:a2:
02:9c:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:48 2025 by rpki-client