Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: ZAecUyeJEG3+Q9HCUGKm7M4rVRLG+ZKI2EUZaYVrykM=
Subject key identifier: 92:07:48:78:CC:E4:B8:E6:A6:FA:06:BB:9A:F8:36:29:EB:A6:75:61
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 01974CD6FFDE235932029A94E7DDFD07BD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 03DD
Signing time: Sun 08 Jun 2025 00:00:47 +0000
Manifest this update: Sun 08 Jun 2025 00:00:47 +0000
Manifest next update: Mon 09 Jun 2025 00:00:47 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: MZt9/QHxUpDur1faZ0YB2zLZ/OO7AtCOLCwroiVt42A=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:ff:de:23:59:32:02:9a:94:e7:dd:fd:07:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jun 8 00:00:47 2025 GMT
Not After : Jun 9 00:00:47 2025 GMT
Subject: CN=92074878cce4b8e6a6fa06bb9af83629eba67561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:71:87:34:b2:83:99:01:da:f6:b5:01:5e:7c:
9e:75:4d:39:8b:16:98:85:f5:ba:d6:8d:52:16:10:
20:bf:1d:c2:9e:76:51:70:04:4c:10:f2:e0:df:dc:
9a:41:7d:6e:17:09:e3:e8:9c:20:dd:0f:46:37:e7:
2e:fe:ae:7c:a0:12:02:0e:30:b7:f4:25:35:4f:67:
8e:eb:d9:23:98:4d:ad:16:fc:c1:6a:8a:63:84:53:
6f:5a:98:8b:2e:10:0c:03:79:64:d5:cd:d8:6f:87:
34:17:12:4e:6e:e5:70:83:72:9c:e7:d3:cb:58:96:
5d:0b:15:fc:fa:8a:59:bf:e4:80:e5:a8:76:67:08:
0e:c9:e8:e6:99:7f:4d:2e:f0:e1:59:a7:2c:19:22:
a9:d4:6b:7c:f6:26:94:5a:9d:b1:2a:e0:93:ef:75:
f7:68:41:f1:05:be:31:21:57:8d:6f:cd:4e:ba:d0:
f3:a8:81:8e:41:cd:a4:28:58:b1:44:18:b3:3f:9f:
d6:83:94:ec:5c:c2:57:54:91:f1:ce:da:4a:e8:9b:
58:c8:82:a9:c8:be:44:9f:63:bc:a9:67:72:75:01:
04:c3:e2:38:ce:f5:b1:62:87:4f:49:9a:3a:20:67:
f9:90:e6:5b:a8:5a:5d:83:a0:1d:0a:bf:dc:5f:60:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:48:78:CC:E4:B8:E6:A6:FA:06:BB:9A:F8:36:29:EB:A6:75:61
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:43:61:67:2f:3b:df:43:34:91:19:82:a4:cb:12:d2:b4:
1c:21:09:95:e5:3b:d9:6f:d3:20:2d:dd:9d:48:37:0d:ec:4d:
6b:63:0e:5d:54:f2:73:06:9f:34:87:0e:03:1f:d5:bd:c3:3f:
ab:2a:42:e4:59:9f:28:19:23:d1:05:49:e2:a9:5c:63:1f:84:
6f:c1:1e:fa:20:61:d1:2a:35:f2:1d:4d:fa:4d:93:74:a4:76:
3e:91:52:26:7c:78:ec:7f:ea:5a:94:bc:e3:ac:45:70:dc:c7:
2a:cc:3f:61:8a:20:1a:8f:61:91:04:85:2e:63:7f:98:51:a4:
6b:c1:17:64:c6:9d:ac:04:ba:80:75:57:18:48:9f:4d:24:5b:
23:dd:02:3e:9e:b9:94:bc:2a:f0:4f:01:25:88:c9:f6:2d:8e:
0c:ab:3e:3a:b2:1e:f4:11:3c:4b:f3:06:6b:5f:9c:94:2a:d9:
83:93:da:c1:26:14:28:6d:f2:14:f6:87:c8:2a:29:8e:e7:65:
42:a0:8c:8b:c6:be:7f:94:88:2a:f5:3d:4a:f3:70:70:82:63:
24:c9:69:fa:03:3f:fe:f4:fe:b6:f4:a2:4d:42:23:d1:5f:18:
4b:7d:95:23:99:41:0a:ba:fa:72:b6:a7:12:2c:cd:14:db:68:
63:7e:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:25:32 2025 by rpki-client