Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: aBrs+Nb4CpTnKR2+P5GBQu0c0fWYE2Thj4IWwNQckP0=
Subject key identifier: 53:8B:24:BE:4B:5A:F0:FF:D0:21:C8:FB:7D:DB:BA:7F:6C:F2:2A:98
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 0199FE102B2D8D9CD7B7AE908F04AA260BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0EA8
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: z8VJjeP1arLZME3ekkh/us9jrv3FkM82fua4JFBHYWA=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2b:2d:8d:9c:d7:b7:ae:90:8f:04:aa:26:0b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=538b24be4b5af0ffd021c8fb7ddbba7f6cf22a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ea:21:6d:1a:1c:09:24:c4:03:0d:8f:f6:e2:
54:3c:b7:90:b4:92:cd:42:ef:b6:b0:cf:7f:20:bf:
37:c0:fa:1c:ca:3b:a8:c2:b1:77:7e:37:46:59:15:
e8:50:79:ba:99:9b:7c:6c:fb:35:44:fe:28:13:c3:
3c:06:d2:f3:e3:35:1a:0a:a8:3a:ba:3a:1d:46:86:
9d:91:af:b2:74:cf:c7:1b:3c:bc:ab:41:52:b2:32:
4f:c7:68:e3:95:53:9f:3a:a5:35:42:c1:9e:49:ee:
0e:f1:a0:d3:8d:12:1d:a4:9a:08:1b:d5:e6:7b:83:
77:2f:1f:82:e1:6e:8e:05:b9:2c:e5:b7:63:56:6b:
f8:53:9c:c0:ec:ec:af:44:d6:d8:66:d1:d7:9b:bf:
53:a8:82:5c:34:12:ac:54:99:82:53:3d:f8:7c:f3:
68:01:b8:d6:36:6f:9e:ad:53:e3:72:b8:37:c9:9f:
6c:19:1d:bc:d7:55:e4:4f:55:e9:9b:ab:f7:16:77:
e5:ae:2e:23:c4:65:28:61:ff:57:88:df:86:f9:6a:
9c:54:e1:02:a6:16:db:26:96:8f:51:54:df:95:9c:
58:19:10:e6:95:8d:46:00:6b:97:e9:b1:7f:81:f2:
86:93:8f:17:f9:66:02:60:8d:71:2f:36:e9:9a:f9:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:24:BE:4B:5A:F0:FF:D0:21:C8:FB:7D:DB:BA:7F:6C:F2:2A:98
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:bd:3a:48:b0:53:ce:00:48:5a:41:52:53:2d:c4:57:89:
ce:af:27:90:06:1f:a1:7f:36:a3:26:e5:0b:b9:25:3e:b6:bd:
d1:11:54:6f:20:ea:56:d6:86:24:76:95:fc:4f:1c:29:3d:55:
a1:6a:e2:15:fc:29:cd:6e:9f:49:b3:a7:0d:44:5b:50:83:42:
58:68:78:5c:b9:f3:9f:2d:0e:6b:38:da:d5:01:37:24:4e:7e:
e2:e5:b8:75:5c:2f:cb:68:ce:5e:e4:4b:22:18:5b:c7:7d:ac:
e8:25:83:65:78:85:7f:54:03:24:66:ea:fd:e7:a0:50:2c:50:
31:8e:12:0b:5f:6d:2d:db:6f:d9:5a:05:5c:37:01:d0:ab:1d:
11:9e:8f:51:d5:4d:9d:e8:18:bf:23:32:7b:20:7b:6c:06:cf:
45:f0:85:96:30:da:13:93:e0:94:12:27:67:bd:16:b5:03:9a:
f4:c9:a4:2f:14:b2:4c:46:49:73:ff:fc:f1:9b:dc:53:d0:05:
2a:c0:0f:1c:a3:7f:96:b6:1d:24:8f:14:85:8d:d0:33:7a:78:
31:c3:2e:16:62:f7:1f:e0:9e:46:d1:54:d9:45:4d:36:13:91:
78:41:10:80:99:b4:43:02:c1:f2:83:af:b4:5f:95:41:5c:a4:
c2:2a:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:45 2025 by rpki-client