Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: UOO33vWsoE986vlKs3TGyMF+FFDbvRMgZUyUpbAihPs=
Subject key identifier: 78:83:91:CB:60:D0:36:D2:BA:07:01:9B:3C:92:C3:89:7A:39:2B:89
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01974DB2C1B9E6651FF22F58787058751BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: 0133
Signing time: Sun 08 Jun 2025 04:00:50 +0000
Manifest this update: Sun 08 Jun 2025 04:00:50 +0000
Manifest next update: Mon 09 Jun 2025 04:00:50 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: qJvQIe87FUTYkS9GRtxEjsinmANNvgE9UI1EuvngG10=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c1:b9:e6:65:1f:f2:2f:58:78:70:58:75:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Jun 8 04:00:50 2025 GMT
Not After : Jun 9 04:00:50 2025 GMT
Subject: CN=788391cb60d036d2ba07019b3c92c3897a392b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:a8:2a:75:78:d0:32:4e:b6:25:61:51:07:
ae:d5:d2:98:c0:b1:0d:4b:29:d5:ff:b1:3f:8f:6b:
a7:12:97:d1:66:68:cd:44:cb:46:a1:f1:a7:71:61:
c8:5f:7a:79:28:f4:a2:53:14:0a:0c:20:ba:ab:76:
a8:95:0a:42:7a:c7:20:36:0e:f3:c6:9b:26:65:ca:
37:20:ef:c7:c1:ea:6d:19:04:e0:45:53:52:ae:9a:
ef:f1:49:65:0f:7f:9d:1a:6f:d2:14:dc:c5:fd:ff:
01:a8:e5:27:d8:a5:31:93:7a:4d:db:44:3e:71:ac:
ee:5d:7d:b3:06:69:77:2f:27:05:a8:07:45:d8:8e:
e7:fe:ab:27:b8:34:81:fe:e2:c4:3f:eb:5b:87:c9:
75:93:ba:2f:89:46:70:fa:d5:c7:c6:87:09:36:5b:
da:db:fb:e1:66:2b:c1:75:9c:bc:b3:f3:34:6f:aa:
22:d9:6a:dc:81:a7:5b:3f:ec:e0:3d:4c:60:3a:f1:
49:e4:5f:18:1c:37:df:27:c1:1d:4f:d4:5f:1c:3e:
31:10:08:48:38:44:3c:23:57:5b:a9:ca:4d:82:b5:
8e:1d:d3:ba:05:4f:c8:79:f7:ea:28:60:8e:78:4f:
c1:f5:44:d8:ce:44:92:fe:43:b6:39:e3:3a:4a:f1:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:91:CB:60:D0:36:D2:BA:07:01:9B:3C:92:C3:89:7A:39:2B:89
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:18:2a:49:0a:14:95:84:7a:21:ea:41:34:6b:e5:0d:d5:
2e:e8:35:a0:e2:29:60:0e:04:4a:f0:68:23:3c:34:14:f3:d3:
82:a7:56:88:06:6d:58:44:6f:ce:cf:34:83:9e:d5:e2:65:88:
76:04:81:ea:45:51:cf:03:a9:8e:35:d0:30:ed:bc:27:d7:3c:
be:15:31:97:4e:26:cb:fd:f0:a1:3d:95:54:62:e8:05:4d:44:
87:fa:2b:9b:5a:1d:29:17:8a:c7:d2:e0:9d:3e:3b:a9:af:b9:
57:2e:a3:53:c4:35:d5:c3:63:c0:ee:91:c6:ca:e6:ef:aa:b4:
11:15:b3:ea:8d:aa:31:04:14:32:20:a0:33:f4:d9:8c:f6:ef:
ab:cf:e6:88:a5:fb:02:f2:02:2f:c4:3a:e3:48:ab:b2:df:fb:
7a:a7:7b:ca:03:30:6e:f3:47:6a:aa:02:d9:aa:1b:2b:76:7a:
0c:13:f7:4e:60:df:b6:76:f0:7c:8b:d8:d4:f0:ba:84:88:c7:
78:fb:50:b9:11:ed:59:8f:a2:0d:3b:16:41:8f:2e:c4:bb:46:
58:b0:36:19:09:8b:44:d6:06:99:b8:fb:aa:32:32:a4:df:fe:
10:66:2e:46:3c:90:f8:60:3b:64:6c:03:d0:f6:28:9e:23:de:
25:58:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:46 2025 by rpki-client