Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: 1u4I2hmm+olyAoJ08KoCF5Dza0yzx7Tid5jN6Qrl0cU=
Subject key identifier: F7:2E:79:6E:FA:DA:7B:91:F5:79:22:D3:08:DA:B4:6B:7E:50:4E:8B
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 01974A0D00D5228AF4B5DAF9B290C2415D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 12BE
Signing time: Sat 07 Jun 2025 11:00:55 +0000
Manifest this update: Sat 07 Jun 2025 11:00:55 +0000
Manifest next update: Sun 08 Jun 2025 11:00:55 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: orpQqcYew6xq0euakm3Et1alPENUn7OlHjV4Co2h5zQ=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:00:d5:22:8a:f4:b5:da:f9:b2:90:c2:41:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jun 7 11:00:55 2025 GMT
Not After : Jun 8 11:00:55 2025 GMT
Subject: CN=f72e796efada7b91f57922d308dab46b7e504e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:a3:19:6c:16:2e:90:e5:63:00:13:34:fa:
a6:fc:70:06:13:63:a8:38:22:35:1c:1c:1d:6d:1c:
b0:8c:11:72:7d:a2:87:af:6e:e6:c5:8d:d1:71:6c:
63:39:28:5f:47:27:52:52:bf:05:dc:ce:88:1f:20:
41:b2:4c:6b:27:ef:f7:50:6e:1b:19:31:d0:aa:7b:
0e:c3:b7:ef:36:98:7e:f3:07:96:13:7d:85:1f:1b:
c6:0d:cb:0c:a9:17:e1:a2:f3:c4:5d:18:95:c6:d1:
91:63:a4:12:e5:f1:ec:7a:22:05:09:cc:97:9d:3a:
73:56:61:c7:7c:17:65:2e:f6:23:2c:5b:7f:be:38:
85:b4:4d:5d:c2:ae:98:dd:bf:d0:0a:d1:66:98:77:
3e:78:71:df:c3:71:ae:09:9f:59:65:cb:93:f3:5f:
57:02:b6:80:89:bf:49:5d:d0:cd:6f:da:1d:23:0c:
13:c2:ab:f9:89:d1:59:f7:29:05:98:e9:a0:39:25:
4e:e6:f2:47:f9:f1:c2:ee:ce:7e:8f:30:67:a5:94:
b9:ad:15:99:c1:f7:bc:ed:a5:e1:54:c6:0f:b4:46:
e3:41:fa:4a:40:01:7d:28:c3:90:cb:e4:2a:f2:fd:
77:0f:6d:03:77:34:2a:ba:28:45:c9:b6:ac:80:3e:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:79:6E:FA:DA:7B:91:F5:79:22:D3:08:DA:B4:6B:7E:50:4E:8B
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c3:0f:48:1f:3b:2a:73:78:ea:43:03:f2:08:17:f8:c6:e3:
cf:67:17:b8:78:cb:17:07:5c:d7:76:3b:d5:ee:ee:fc:40:4a:
05:3c:51:84:ae:b7:6a:22:b4:9a:93:51:eb:41:b8:67:5b:c7:
6d:18:1e:20:77:b7:66:3b:d3:b1:0a:8d:69:da:86:de:9f:6b:
a9:8e:2e:b4:06:6a:59:93:56:5a:3f:31:21:57:c5:9a:8e:14:
0a:b0:be:ae:cb:c2:d5:9a:0b:5a:bd:2a:89:65:46:5f:ec:5f:
6b:a9:4a:83:e5:37:ab:59:6f:7c:d6:94:cf:27:c5:12:fd:e4:
1e:bf:36:a2:e4:19:e6:4b:1e:55:0f:62:d1:83:55:35:07:17:
75:24:cd:02:c1:91:2e:37:d8:ee:38:4b:a7:f8:43:51:ab:aa:
d4:54:ae:fe:d8:5d:ba:62:0e:39:2e:13:42:ec:86:dd:e5:3f:
09:ff:8b:15:a7:3a:de:0b:a4:70:34:b6:3e:a3:11:95:a4:c4:
d6:5e:f5:bb:3e:26:15:f4:46:a7:04:55:4b:01:e1:a5:22:a1:
47:a9:9f:ef:ff:b5:46:34:02:9b:d5:d9:5e:a8:d0:29:44:88:
e2:66:15:2a:5b:ac:55:cc:9e:cd:b0:3c:6a:5f:ad:b9:30:c6:
c1:da:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:09:50 2025 by rpki-client