Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: c6I5+Nf7c49kwCDogn31OrWzK9JV4MUX4n142zVlPoQ=
Subject key identifier: 47:B0:21:86:D5:56:BD:CE:C1:E8:88:0E:99:AB:93:72:44:B9:E0:27
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 019932A408CF1B7F8CC33ED23D097E98D2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 13BB
Signing time: Wed 10 Sep 2025 08:00:34 +0000
Manifest this update: Wed 10 Sep 2025 08:00:34 +0000
Manifest next update: Thu 11 Sep 2025 08:00:34 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: seQTVNjI0QX3YaF8gBn+U14KwibiWSRs+cod+yXdtAg=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:08:cf:1b:7f:8c:c3:3e:d2:3d:09:7e:98:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Sep 10 08:00:34 2025 GMT
Not After : Sep 11 08:00:34 2025 GMT
Subject: CN=47b02186d556bdcec1e8880e99ab937244b9e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:25:db:fc:39:d6:de:82:7f:42:77:03:3d:
78:5f:75:58:b1:2b:ea:c2:ac:ab:79:b5:90:e1:a6:
89:a1:c9:11:49:b2:49:ad:c5:4f:07:10:74:05:3e:
1c:0c:5f:c7:84:64:ab:5d:4c:a3:6c:bf:d7:a5:58:
57:01:c4:62:f9:b3:c1:00:44:c2:bc:a9:69:fb:37:
6c:7e:37:6a:dc:d2:56:af:b4:bb:31:91:c4:70:66:
f4:3f:98:2d:6e:0b:23:51:8f:33:da:eb:de:64:27:
19:b3:6f:61:68:ea:0c:11:67:73:f8:a5:1c:c8:a0:
aa:19:b9:24:c5:9c:ed:cd:e7:c9:ba:20:ec:dd:e8:
9b:1b:c2:2f:d2:e5:38:4e:f8:ee:e6:ad:1d:d9:4e:
00:b2:e7:b3:26:72:ef:02:3b:42:d1:bd:b7:e4:89:
84:b1:0c:22:5d:39:a9:3b:4f:fd:db:67:5a:a7:33:
1a:33:2f:62:dc:ca:47:fe:0c:a0:eb:bf:01:7a:f6:
6e:ff:61:ad:47:a3:cb:b8:e0:b7:0a:f3:f1:1e:d0:
3e:f8:7b:18:90:37:95:4a:9e:04:97:ae:94:d6:9d:
5c:a6:7d:5e:32:a5:94:6f:98:1b:c3:e5:6c:f8:64:
f9:61:2f:1c:2f:1c:5a:2c:ef:1d:7f:a4:9e:b0:22:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:21:86:D5:56:BD:CE:C1:E8:88:0E:99:AB:93:72:44:B9:E0:27
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1a:fb:50:a8:35:f7:44:82:0e:cb:37:c7:9a:1f:93:2d:58:
05:98:55:cc:11:ca:fc:1a:ed:1f:dd:c7:e2:7a:f8:52:3f:86:
bb:4f:89:27:ff:ea:e0:cb:c7:c5:26:42:ae:0f:ee:c1:1a:b3:
d5:e7:3c:a2:8a:e3:47:13:61:cf:e3:60:c2:ec:f4:22:4b:01:
fa:db:d0:61:a6:78:11:a7:da:34:ab:f9:9c:41:4a:05:c9:d4:
67:6c:a8:45:d3:75:1a:c1:08:fa:0e:a7:d1:14:4c:29:64:2c:
93:a1:99:c3:14:01:02:a0:8e:c4:ee:bb:f6:ec:8f:bb:46:4c:
4e:25:1b:dd:fc:b0:ec:0b:bf:f6:c0:35:65:23:3c:81:93:4c:
34:d7:22:e8:ab:0e:1a:c3:51:8f:d5:a5:21:94:2e:af:f2:a1:
80:88:ba:38:50:ef:f8:61:5e:6f:80:97:7b:12:fd:27:da:cb:
32:b6:5d:bb:08:b1:6b:bd:1d:51:71:55:a7:ab:6e:67:89:1b:
e8:88:64:80:0a:cc:e1:05:d1:e1:02:54:8e:8c:4a:ad:76:1a:
30:05:ca:cb:39:e0:9d:fd:c4:d9:41:f2:ee:fe:79:3c:b5:4b:
89:81:ed:11:17:cf:2d:32:0d:38:31:f0:5c:f8:47:be:0d:80:
75:19:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:25:37 2025 by rpki-client