Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: EEpBaHR1IJptsomGipTeNd9+xQ39ocI2cQ8RRVqcc70=
Subject key identifier: 6E:BE:3B:3C:D5:73:D1:C7:87:82:FC:6F:4B:C7:D8:95:34:23:69:A6
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019A0035C98BB713E9E451D632D0CD616741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 015B
Signing time: Mon 20 Oct 2025 06:01:56 +0000
Manifest this update: Mon 20 Oct 2025 06:01:56 +0000
Manifest next update: Tue 21 Oct 2025 06:01:56 +0000
Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: AFUmCoioCJK7vzIh37kJyRd5oWnvNSGuWTP9plKdqj8=)
2: XsdhFSN7DeTh4eI00BDD4_zttPw.roa (hash: tFKcPxfIMyOctJnt0bo6v620CjrP47cFED0TLnvjy0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c9:8b:b7:13:e9:e4:51:d6:32:d0:cd:61:67:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Oct 20 06:01:56 2025 GMT
Not After : Oct 21 06:01:56 2025 GMT
Subject: CN=6ebe3b3cd573d1c78782fc6f4bc7d895342369a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:eb:57:ef:d5:ba:51:90:fc:63:f0:5b:4e:
81:a0:a1:df:3f:0d:70:32:53:24:a7:d4:b0:ba:ed:
be:26:6a:1e:ca:ad:56:36:26:77:80:10:76:ce:a8:
f6:0a:b0:51:f4:fe:cd:98:1b:5f:1b:b6:8c:a8:e8:
4a:28:58:10:fc:b5:3e:69:f5:ba:b9:97:35:10:03:
45:52:2e:92:9b:6b:d0:d9:c6:b8:e2:0d:48:a7:f6:
90:a1:04:49:b2:67:e5:b4:63:a5:79:4d:fd:df:25:
81:1c:65:2e:8b:72:d9:92:63:85:2a:19:c8:54:95:
8b:b3:f7:15:77:85:07:71:80:1d:7f:b3:fe:ec:71:
3c:21:bc:8c:eb:ba:f6:3d:a3:91:68:ee:61:a5:34:
75:a4:00:17:27:9e:b5:0a:46:bc:01:05:50:7a:26:
ce:04:67:44:ad:5d:b6:e4:63:1a:cd:b3:07:ef:74:
b4:3d:a5:70:7c:4c:ae:35:cc:a3:20:5d:75:dd:c5:
32:ab:4a:c7:ff:04:fc:cc:87:1f:b9:f4:e1:a3:00:
66:30:0d:22:d4:0f:99:4d:a8:cb:5e:aa:6f:2a:90:
92:0d:3e:bf:00:4e:b7:3f:09:ad:31:ad:4a:3d:5e:
0d:95:bc:ca:2f:65:5e:d8:a2:3e:fa:05:89:80:8e:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:3B:3C:D5:73:D1:C7:87:82:FC:6F:4B:C7:D8:95:34:23:69:A6
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:e2:26:2b:40:59:fc:57:8f:71:66:ef:f5:ba:44:3e:26:
57:fb:8a:5b:49:e2:ec:f6:ab:93:06:4b:7d:fe:13:88:4e:65:
9d:f5:d0:01:75:36:cb:c8:99:86:68:e9:46:8e:bf:83:cf:ab:
9f:52:a8:17:97:c0:9e:0c:65:2a:d2:00:5f:4b:b6:c7:af:a2:
16:7d:a8:79:d0:a9:c0:4f:30:57:d8:44:02:2f:d6:66:1e:f8:
a2:71:bd:7a:80:b7:82:e5:62:a5:26:65:74:ee:99:2d:b7:30:
04:a0:16:8e:8a:fe:73:cb:13:5e:50:1e:f9:b3:60:c5:1d:43:
b0:e8:d3:81:c1:93:40:62:d1:e8:a7:ae:54:43:c7:44:97:9e:
8e:4f:df:ad:e9:eb:c8:99:23:cc:44:69:44:6f:10:59:dc:22:
e6:c1:d7:0f:86:f6:c4:b0:96:23:d5:f0:b3:ae:b7:5e:6b:23:
00:e5:b1:31:d0:d6:49:67:d7:d1:3c:dd:87:d3:83:d2:33:c7:
b1:69:f6:90:c0:8f:5f:f9:c8:fd:50:7b:ce:20:45:54:94:18:
b1:a7:a8:b8:8f:6e:de:80:09:82:4b:ed:5f:76:b8:8f:18:bf:
27:7a:7a:0d:77:08:fe:6e:76:c2:43:2d:bd:04:80:8a:c9:b4:
13:71:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:43 2025 by rpki-client