Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: lZd56MXSfddT88duDXCaSYSgMp/CCAxiXelZi/2jpXs=
Subject key identifier: 6E:F4:54:A7:45:28:5E:DB:5E:00:0F:90:95:56:4B:4F:7C:0D:A6:48
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 0198D6611FEE73C6C00695139EB3F79B4E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 09A6
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: 3ggOWt/FjXXDqEyTVZUTeZuCOhIWv99GHSr6z8zp2kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:1f:ee:73:c6:c0:06:95:13:9e:b3:f7:9b:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=6ef454a745285edb5e000f9095564b4f7c0da648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:dc:1c:a9:59:e1:a1:4f:f6:d3:cc:7b:2d:
7b:1e:10:2e:ad:be:95:04:cc:77:36:d6:7a:82:bf:
d4:75:ae:24:c6:72:6d:bd:fc:70:65:3f:cf:c0:6c:
28:23:5c:41:ee:a8:f3:69:c3:0f:de:72:6f:95:ab:
64:eb:2c:79:07:d7:f0:fc:66:af:90:b2:05:e0:81:
35:ef:a0:65:ef:b5:76:72:7d:dd:74:60:d5:4e:43:
d8:1f:d3:40:b3:79:5d:45:7b:03:7f:a2:93:42:bd:
43:90:cc:59:a1:e2:6e:41:66:bd:d9:84:fa:10:e6:
82:97:f5:e0:bb:bb:be:29:c0:54:bf:24:cb:26:ee:
cb:57:c8:39:c7:89:28:96:2d:8f:30:01:90:00:15:
0a:d9:64:2e:ed:25:84:02:dc:6a:dc:44:bb:0c:c0:
2c:98:d5:00:73:87:da:f2:83:95:57:09:38:ab:d1:
14:55:f3:3f:b5:5d:87:d7:b7:10:d6:75:37:24:a1:
fd:9d:9a:81:75:3b:b4:72:1a:5e:6c:7e:e8:9b:d6:
03:d5:e2:7e:fa:6a:00:88:5f:e0:a9:a7:55:59:90:
b9:10:8f:2d:24:2c:09:df:0f:41:36:e0:92:5a:96:
98:4e:67:6b:9d:b1:bb:1b:58:48:93:12:5d:88:4d:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:54:A7:45:28:5E:DB:5E:00:0F:90:95:56:4B:4F:7C:0D:A6:48
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:74:9e:e0:f6:85:c3:c4:15:b3:44:6e:56:5d:45:5f:c5:12:
af:00:1d:e5:05:7d:48:a6:2a:71:b9:af:6c:83:b3:4a:33:67:
2b:b4:53:0d:d6:b5:dc:13:8b:fe:dd:3e:d0:f4:aa:6e:fd:a6:
fe:87:5d:2c:c8:c1:ca:e7:34:4f:c6:97:2c:c0:ed:03:fd:1c:
31:68:39:e1:fd:9d:a5:01:d9:98:3f:fb:db:b1:12:e7:ec:f1:
9e:79:a4:d9:0c:88:14:6b:30:1c:8f:ed:78:93:39:b0:e7:35:
0a:ff:45:da:8e:74:5e:b5:b2:b3:d0:2f:11:e8:b5:9f:4b:0f:
98:2e:c1:60:3f:93:53:76:c2:5e:50:6d:86:7e:3e:f4:26:62:
af:4f:b3:aa:03:5c:14:0e:5d:63:ba:96:78:02:40:ad:7b:32:
2b:51:62:d0:17:36:46:7f:9e:35:15:09:ec:7b:45:59:b0:41:
4a:fc:db:46:4a:5c:78:40:a9:b7:d0:30:9b:af:59:46:51:41:
ef:55:93:29:fb:88:25:7f:0c:4f:d7:c9:e6:e5:47:78:07:29:
dc:55:90:5c:f7:22:84:20:32:ce:f7:f0:32:ca:b2:cd:10:95:
b9:d1:f3:f8:b0:59:35:43:d2:0b:0d:f2:1e:c0:e9:30:3e:f8:
17:87:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:07 2025 by rpki-client