Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: 4vtbwCbl+r9DFqPSdEZvki5pahq0TpakL0LCXV6Z4AE=
Subject key identifier: B8:75:EA:39:66:18:29:50:25:2D:50:90:C3:A6:E0:A2:5C:9E:1E:17
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 019751213CDCDA8E831F4EA1AD7E0652A89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0BAF
Signing time: Sun 08 Jun 2025 20:00:22 +0000
Manifest this update: Sun 08 Jun 2025 20:00:22 +0000
Manifest next update: Mon 09 Jun 2025 20:00:22 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: nT+MzJnS0SoIYwj0kiij3qlVn524pNaF6Tdr6LEtt1A=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:3c:dc:da:8e:83:1f:4e:a1:ad:7e:06:52:a8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jun 8 20:00:22 2025 GMT
Not After : Jun 9 20:00:22 2025 GMT
Subject: CN=b875ea3966182950252d5090c3a6e0a25c9e1e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:28:1f:da:0e:75:b8:ac:56:66:52:68:3f:
08:4c:54:73:2b:50:ec:a0:19:4a:76:ce:4c:5e:0c:
9f:50:39:40:56:54:6c:80:8b:1d:2f:7d:15:7d:f2:
1a:5b:9b:35:fb:6a:8b:72:42:9e:60:13:5b:ab:ef:
15:85:c0:7d:0b:ab:35:95:b9:0a:65:d8:3f:20:1c:
c7:d7:26:35:08:23:28:1f:60:13:6d:db:2d:b7:ba:
8a:bb:78:7e:f8:88:56:d9:6b:76:b2:3b:81:33:35:
9b:d5:6c:af:ec:cf:a5:88:1b:2a:f2:e7:f0:21:29:
29:48:16:3e:36:0d:e7:b9:e0:c7:d6:a4:f8:eb:f4:
44:a8:9f:b3:e0:0d:82:a3:e5:a8:5f:fd:28:25:5f:
94:db:8f:18:01:dd:c7:2d:53:92:96:e1:1f:34:65:
c7:03:7f:b1:9a:f8:7a:e5:18:f7:d5:78:cf:05:de:
0b:b7:81:5c:49:d2:41:6a:53:8b:ce:a6:a4:23:0e:
53:aa:39:3e:43:bc:7b:e9:70:28:b3:59:16:4f:89:
75:2e:a5:9e:3d:b2:e3:d1:13:bd:f3:29:55:a0:33:
97:ba:1d:57:27:83:11:b2:47:e6:7b:e7:2f:5b:4e:
5d:80:fa:9a:54:73:04:86:3b:7e:b1:3b:82:d9:e6:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:EA:39:66:18:29:50:25:2D:50:90:C3:A6:E0:A2:5C:9E:1E:17
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c2:49:f9:71:bd:96:30:b3:7e:a0:67:b3:d4:24:91:4a:04:
f4:4a:a5:5e:71:db:b2:5e:24:6a:ac:d7:fc:b2:88:dd:f3:bd:
2b:60:31:b9:34:21:17:78:a0:05:a7:51:58:08:15:0b:f2:e3:
99:ad:d4:33:de:c5:55:b6:d3:90:68:b2:1f:42:e0:b2:22:98:
4b:f4:bf:10:6b:d4:a2:91:fa:6a:10:45:89:66:cc:69:07:82:
c7:35:bb:a6:f1:fe:3f:b8:a0:6d:51:87:30:79:d4:31:78:6d:
3a:38:6c:1d:ad:dc:7a:11:a7:71:dd:10:e4:61:5a:fc:7a:a2:
36:b5:0e:91:de:85:0b:27:d5:d5:fa:25:0a:a0:6e:f2:45:43:
52:0b:7e:9e:76:2d:74:40:0c:a6:3a:26:fb:97:2a:4a:41:e2:
f6:37:ad:cc:79:52:8b:5d:de:1d:fd:da:46:26:66:d5:e1:04:
73:c7:f4:08:8e:13:bb:ac:3d:f8:e0:5f:3d:e6:5d:24:c2:0c:
e4:ae:22:a6:ba:44:c4:74:ac:00:25:80:5e:8b:74:0f:9e:91:
cc:c6:6c:b6:fa:7d:00:0c:25:2c:4d:2e:a9:1e:95:71:82:a6:
95:4c:7e:ed:05:b9:4d:8f:66:33:c9:c7:f2:78:63:36:d0:b3:
2d:02:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:29 2025 by rpki-client