Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: Rl6K10g+gT/UcbwsPqEUmU+/Zb8U1lVQD3nRlNd3t50=
Subject key identifier: 17:29:03:EB:1D:E9:58:DE:CE:19:83:8A:D6:89:C4:0B:E6:01:5B:78
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 01974B1F30FAA0C0E215F043C4EE68759214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0D40
Signing time: Sat 07 Jun 2025 16:00:24 +0000
Manifest this update: Sat 07 Jun 2025 16:00:24 +0000
Manifest next update: Sun 08 Jun 2025 16:00:24 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: FRuIl5pet2BzY08EPYM8kQRblv8QkIhI9IdBbWwdhfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:30:fa:a0:c0:e2:15:f0:43:c4:ee:68:75:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Jun 7 16:00:24 2025 GMT
Not After : Jun 8 16:00:24 2025 GMT
Subject: CN=172903eb1de958dece19838ad689c40be6015b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:0d:bd:5a:5b:41:6a:34:df:1d:63:8a:2d:
3c:9d:f9:00:b3:43:33:43:8c:53:d1:d4:6a:b6:ab:
38:ba:78:a3:2d:f9:ba:f6:ac:f0:cd:ff:5a:38:38:
20:ea:17:20:b1:39:56:c8:9a:84:b9:b2:84:6b:68:
d7:01:09:f7:85:03:e1:a7:97:e4:40:6e:ae:c6:a2:
fe:f9:53:84:d7:a1:9c:ad:20:9b:b1:f9:d9:72:82:
f4:03:20:d6:72:74:a7:2a:07:1e:f7:44:60:c4:f9:
20:90:2d:e2:3b:19:ec:cc:1b:c2:2d:35:8d:a2:d1:
81:80:1a:0f:1d:c4:11:0e:8e:70:7d:ca:9a:ca:fd:
15:64:34:6a:a3:4e:0f:4b:8e:33:04:63:1c:6c:38:
0c:be:60:b3:f1:9d:ca:4a:f4:05:7a:29:05:31:db:
ef:91:89:ce:fd:8b:82:e7:23:dc:88:0f:90:e6:57:
5c:2f:4e:bc:a9:6e:43:46:8e:b2:ea:cf:1a:fa:86:
b2:d2:62:5d:b5:bc:04:ae:a5:fb:af:09:26:d0:d7:
6f:f6:ce:e3:47:74:1e:b7:cb:33:ca:fd:fc:9a:60:
80:a0:61:b6:a8:fc:a9:45:a6:a4:43:05:a6:28:86:
b4:e3:9c:99:8f:34:fa:fd:e0:65:1e:f4:1f:d7:18:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:03:EB:1D:E9:58:DE:CE:19:83:8A:D6:89:C4:0B:E6:01:5B:78
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:5d:06:6c:64:32:64:5f:6a:cb:d4:f9:11:da:6e:34:b1:
58:8b:e8:18:80:a1:21:5e:ea:ac:0f:10:4d:98:1f:a3:5b:45:
10:71:62:7f:89:83:da:1c:be:80:c9:84:c5:22:7d:8f:f6:7d:
b7:e8:f8:94:7e:17:f8:b8:c4:1d:50:df:31:4b:17:20:cb:3d:
2a:9f:a0:b6:4a:cf:79:18:1a:8d:60:49:a0:0e:98:6d:a4:aa:
e7:eb:c5:23:7c:3f:11:67:88:b6:c5:bb:b5:59:82:bd:18:87:
68:38:f9:c6:fe:0f:92:61:fb:8f:46:e2:e4:8f:1a:8e:ce:bc:
72:67:23:0f:68:a5:67:28:1d:a2:63:cd:9a:d9:d0:35:94:4b:
9d:38:bc:ac:2d:c7:8f:a7:f3:67:e6:60:ae:a1:1c:c1:14:a5:
48:15:39:fb:1a:28:50:08:ff:63:c9:8a:43:bd:fd:b3:b4:23:
1d:b0:51:1d:82:a4:04:92:6e:e7:50:34:44:0f:74:14:d8:8f:
a0:f6:62:ca:b2:c0:ff:a7:d9:a9:e3:63:43:ef:46:3e:a7:54:
54:5d:32:47:ed:0e:88:63:c3:79:1c:39:22:78:8b:c8:b5:21:
a7:f0:eb:f6:d6:e2:45:03:e4:7e:ae:42:5d:a3:5a:8d:ee:eb:
3e:bd:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:25 2025 by rpki-client