Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
File: hyDPLDSRRvabop66wMiCKIEcovE.mft (raw, json)
Hash identifier: b80kkmoeMUSyeBZreLJc39IYljy0YttFhsUZpGZpB3M=
Subject key identifier: 0A:3D:31:47:3C:72:8C:96:21:DF:CC:29:A5:48:3D:15:FC:D8:12:7A
Authority key identifier: 87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
Certificate issuer: /CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Certificate serial: 019921B1251EDE0D6AE496F68BAE825AB42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
Manifest number: 0A3D
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: hyDPLDSRRvabop66wMiCKIEcovE.crl (hash: 3cXQu/MyWpquMQ2niqxcxe6dwB+cHnK8CUAwtwnpcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:25:1e:de:0d:6a:e4:96:f6:8b:ae:82:5a:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=0a3d31473c728c9621dfcc29a5483d15fcd8127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:26:bb:25:1a:5f:b9:98:89:f7:4d:f6:a0:
de:d4:84:ac:37:6a:3d:d1:31:b9:f1:07:70:6d:20:
e6:88:de:12:8d:6d:b1:a7:7f:8d:77:e4:cc:23:61:
1c:a0:26:3f:83:7c:f9:3c:58:8a:0b:10:cd:33:97:
f0:31:fb:7e:77:75:f4:d6:b0:0c:23:1e:64:c3:68:
53:67:97:3f:e8:d1:95:e1:bd:8d:a8:f8:0c:f4:97:
df:e0:a5:e0:c3:cc:79:d0:e1:70:0c:6a:97:3f:08:
4e:38:3a:82:6c:c2:49:e7:ab:fe:0f:6c:1b:db:fc:
3e:e1:18:fb:f2:a4:38:3b:74:35:ca:38:2f:6b:01:
c3:8a:cb:3f:d1:05:2e:36:62:a4:a9:e7:9f:4b:95:
82:99:ca:3c:28:50:d7:b1:f6:98:1d:40:a6:0c:0b:
b9:f0:f5:74:f2:08:e3:e8:bc:b7:c9:3d:79:6b:0e:
0e:fc:41:4e:63:55:5a:ce:6d:a8:2e:87:1d:70:a7:
f5:e5:b5:c3:74:77:db:e0:b5:e7:e9:c2:32:c3:a5:
64:62:f9:a2:a1:70:8a:d6:bf:ed:df:48:75:cc:82:
32:68:60:dc:20:ae:33:d2:f6:a5:5b:d3:e2:de:6f:
01:ad:26:91:9a:b6:a3:6e:6b:cc:e1:8c:d0:36:21:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:31:47:3C:72:8C:96:21:DF:CC:29:A5:48:3D:15:FC:D8:12:7A
X509v3 Authority Key Identifier:
keyid:87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:45:80:57:9c:32:db:30:15:9c:ce:e4:63:2b:2f:46:0a:02:
a8:68:31:cd:2f:38:ab:74:6d:93:2b:12:f5:58:d9:2c:56:a8:
99:2b:5e:00:78:b1:7d:54:fe:5d:e6:e0:67:81:ac:d7:be:4e:
2c:ce:37:37:b9:9e:ec:f1:41:b4:ad:72:aa:f2:d6:f2:a1:9f:
da:c8:9d:3b:78:31:9d:89:e5:52:42:62:f6:50:74:f7:05:29:
13:93:04:90:f0:e1:b9:7d:0b:40:df:55:52:7d:22:5b:e6:8e:
04:e3:38:ee:83:af:63:7f:38:43:e6:61:ac:d9:26:bf:07:13:
0c:95:63:3f:ab:c2:c1:ff:0a:ec:d3:80:37:35:68:14:d7:21:
bd:b3:7f:ca:76:0b:c9:84:7a:c7:63:8d:70:cf:5f:62:cd:b2:
83:72:30:7f:b2:ca:e7:a6:ee:5a:4a:1b:8d:35:77:97:ef:65:
1e:8e:fc:28:86:4f:a8:2e:55:46:80:fa:69:38:f3:e3:02:15:
5a:7d:82:66:91:f9:14:fd:f3:20:aa:ac:94:c6:af:89:55:f4:
50:2e:fa:69:69:49:fc:c6:ec:1c:49:83:f7:24:d7:f5:21:dc:
c2:8b:56:69:da:41:c8:27:94:8f:89:26:72:05:02:b9:2e:73:
2d:56:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client