Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: WUoBo1Pr+UBK5qbuk6xg/OFR29fr+nN0F89okpmqEPY=
Subject key identifier: 22:03:B2:87:21:3F:08:08:9F:96:A7:24:E5:26:D5:90:6D:74:62:57
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 01974DE9E0CBCD98412B8B0FDA833D0406CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 05:01:02 +0000
Manifest this update: Sun 08 Jun 2025 05:01:02 +0000
Manifest next update: Mon 09 Jun 2025 05:01:02 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: A6oFAvjQhkxKF7nSqzR9Ow8GJbws8b0jxId5xuqU4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e0:cb:cd:98:41:2b:8b:0f:da:83:3d:04:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Jun 8 05:01:02 2025 GMT
Not After : Jun 9 05:01:02 2025 GMT
Subject: CN=2203b287213f08089f96a724e526d5906d746257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:ad:9d:11:b1:8c:e7:94:e9:ab:e2:bc:93:
9d:e8:ba:c0:d5:56:5a:1c:f9:0c:44:28:97:5b:14:
b4:06:0f:4d:08:ae:fb:a7:df:79:11:c9:76:5a:45:
95:41:68:40:95:aa:5c:ef:71:c7:97:96:2c:7b:55:
a1:62:3b:8b:4d:4e:28:ac:42:91:71:99:c0:2a:13:
ec:30:95:d7:22:46:1a:80:a7:f8:64:00:21:37:ef:
1f:a7:cb:da:79:0c:10:52:7a:12:52:c2:0f:fa:d7:
bc:6d:f7:16:b3:bc:67:f3:df:29:a4:65:a7:e1:80:
b3:af:62:2a:ee:b6:a2:ff:0d:42:d5:fb:79:3f:5e:
ab:34:cb:b0:a6:37:92:68:75:16:bc:6b:15:c5:ff:
82:86:6f:ed:82:b4:69:fa:ac:5c:06:1b:7b:f3:b0:
a9:7d:e7:64:1a:2f:ea:42:17:63:07:93:25:0d:c0:
ad:10:6b:ee:9d:66:c1:cb:7e:2a:bc:94:71:fa:a6:
ba:ac:ce:cf:54:e2:58:75:41:cd:3d:a5:ed:fb:d8:
4f:18:38:32:8e:25:f2:47:88:67:b1:0f:4a:7c:a6:
8c:6d:24:08:80:bf:b8:14:88:05:a0:fe:29:76:ae:
d3:0d:14:a7:db:38:28:0f:c3:4c:19:0c:51:e5:d1:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:B2:87:21:3F:08:08:9F:96:A7:24:E5:26:D5:90:6D:74:62:57
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:98:5c:7a:f8:45:67:35:7f:45:82:9f:8b:0c:9f:5b:bb:fd:
1f:e7:4c:9e:6b:9e:7f:8f:14:c7:fa:c6:90:1c:b2:9b:53:ff:
1c:f6:88:c8:ac:98:4d:aa:ed:71:55:91:a0:3e:6a:82:3b:b5:
9f:95:b6:5f:e3:62:b9:17:b7:94:f4:e5:ef:77:95:f0:44:54:
12:13:ce:da:07:fb:43:cc:9d:45:a2:32:c6:8c:a4:a2:12:25:
83:64:19:d1:87:dc:5e:a7:7d:f8:b5:05:65:f2:34:39:58:0a:
a3:05:35:64:be:49:c9:1b:3b:cd:25:bc:43:ea:2e:55:c3:b8:
d2:8a:a9:97:5f:61:59:23:01:11:86:ea:02:c7:b7:8f:4d:b6:
2b:b5:79:68:d2:16:cd:54:cb:36:85:e8:8e:fd:22:9d:03:ae:
be:c4:5a:2a:56:ad:25:fe:35:73:98:6a:3d:19:55:90:e0:e5:
09:08:44:c7:82:25:36:b1:28:0c:ec:fd:69:11:99:e5:e7:0a:
ff:1e:82:3d:10:b0:0b:7a:f3:8d:3b:1d:78:d7:a6:d6:f4:b4:
51:63:69:e5:30:1a:ac:76:10:55:91:d1:e3:c9:9b:bb:f6:d1:
56:fa:fa:b6:94:0a:fc:60:02:9d:07:2f:1e:f4:df:38:37:ae:
20:3c:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:52 2025 by rpki-client