Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: 6MAC+1b8ToyyHpbsJ4pDJCB/vOb0XRfNtk85eE2x36I=
Subject key identifier: B0:C9:2C:B3:DA:67:76:FA:CA:3A:F4:D9:05:C3:69:2E:F1:FF:32:EA
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01993380CF5F9BDED81FD102D90F121F31C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0AAF
Signing time: Wed 10 Sep 2025 12:01:43 +0000
Manifest this update: Wed 10 Sep 2025 12:01:43 +0000
Manifest next update: Thu 11 Sep 2025 12:01:43 +0000
Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: g0zwRItq/kfDeurjNgP8nU+1s8NWtxfuL8PNkUihYeY=)
2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:cf:5f:9b:de:d8:1f:d1:02:d9:0f:12:1f:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Sep 10 12:01:43 2025 GMT
Not After : Sep 11 12:01:43 2025 GMT
Subject: CN=b0c92cb3da6776faca3af4d905c3692ef1ff32ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:40:3d:c5:74:9f:04:4a:ed:cc:f6:9f:59:
26:6b:19:41:38:a8:19:2d:14:1e:a6:65:0f:92:cb:
09:5b:af:48:6b:1e:a9:95:93:fe:a7:9e:05:ff:5d:
36:93:5e:66:cf:7b:ed:60:48:36:09:4b:21:8e:f9:
f5:cd:4d:a2:22:a8:5d:04:79:48:d5:6c:70:a0:5b:
9c:81:ca:1d:2c:7c:49:2f:c5:53:44:73:59:ff:4a:
f0:7e:4c:47:cb:bb:f6:bc:d6:32:71:23:ed:4e:46:
33:2a:d1:36:f0:9d:3e:45:10:df:a9:26:ee:b6:98:
aa:5c:ab:be:22:cb:1e:78:fa:bd:0b:7e:15:95:8a:
0f:a2:99:36:ae:71:af:ac:d7:c5:f7:48:ac:6a:2b:
cc:41:92:79:e1:ff:b8:9e:c6:53:06:f8:74:12:97:
44:b4:40:c5:5a:e6:a4:b1:fe:66:7f:81:16:4a:d5:
77:36:fa:ea:ad:30:60:03:b4:b9:f9:29:7d:3b:aa:
fb:2d:03:01:37:59:a7:56:b1:03:1b:9f:c4:4b:03:
8f:19:d7:75:c5:19:f1:8c:2d:55:53:9e:36:53:77:
67:65:1f:a2:f6:13:c1:55:56:d4:29:48:9d:08:d5:
10:dc:6e:67:b7:c8:c8:0e:52:e0:ce:a5:4a:5d:ba:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C9:2C:B3:DA:67:76:FA:CA:3A:F4:D9:05:C3:69:2E:F1:FF:32:EA
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:7f:c7:57:d6:61:b7:a5:d4:ae:b3:e9:91:22:8b:6d:ca:
46:9b:0a:28:39:06:54:06:ab:b1:45:df:f7:65:9a:a2:02:3e:
ee:9f:37:34:be:ed:31:e1:99:c1:37:3a:18:18:24:0c:cc:83:
c2:f9:4f:e0:61:dc:fa:5a:b0:0c:52:37:3c:79:80:db:c6:40:
40:74:6e:fa:f7:bf:61:c8:1a:87:0b:8a:1a:1e:ad:87:dc:c7:
ab:f1:da:77:a6:76:d6:5a:2a:52:f0:13:19:c2:8a:99:e7:13:
6d:45:f7:4d:5e:f7:86:4b:8c:ee:f7:89:d8:2c:4f:29:49:ff:
91:34:da:f7:53:94:f7:f8:72:3b:40:38:9c:77:4e:0f:53:bc:
a3:29:c5:d2:1a:cc:e2:c2:04:7a:80:f5:51:73:68:2c:a4:d8:
e4:85:59:a1:34:0f:86:cf:75:da:92:e3:ed:7b:2a:a4:52:8c:
94:c6:7f:3e:e2:a8:7b:63:eb:85:60:52:1a:9d:bd:25:4b:19:
1b:c0:47:cf:db:00:89:5c:43:88:e2:21:f4:55:36:29:3d:17:
33:d6:ad:91:8e:7d:1a:cd:c2:90:40:95:6b:c0:a6:2b:49:5f:
8e:5a:ca:57:b0:94:ab:98:40:fb:e7:ab:86:33:ca:ae:69:37:
7f:1e:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:57:56 2025 by rpki-client