Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: hRh8m1hyuGw8xijpOZdIhqQLSs4L2oDei23f5Qs9m1c=
Subject key identifier: 0C:8B:79:31:07:9E:CD:FE:32:1E:B3:F5:3B:B2:E5:38:D8:A4:8C:E8
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 0199FCFD1CB4684493CF5571B28626BD2D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 032D
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: 7h0fLJsa5CDMPyKwAJNL7Po0Rmqj5ZhpuEwHT9R5WLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1c:b4:68:44:93:cf:55:71:b2:86:26:bd:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=0c8b7931079ecdfe321eb3f53bb2e538d8a48ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:ca:d2:89:28:1e:a2:b4:36:15:18:7a:50:
d9:aa:10:84:42:e1:e2:a6:bf:f5:e4:55:28:01:1d:
f3:e9:c7:18:79:d8:d0:d8:51:91:a3:f7:79:57:ec:
4a:b2:6b:3c:a0:60:86:55:e7:06:f1:69:50:9b:a3:
d3:e1:f2:ac:b9:88:c8:88:38:fb:91:4a:fe:aa:b3:
b7:77:bb:d7:8b:ba:97:30:5e:4b:ee:98:62:6e:fd:
ef:41:c9:a1:45:b3:c1:f5:ac:78:71:16:71:3b:71:
03:28:31:75:5f:55:88:48:28:d4:c5:49:81:e0:f4:
fc:0c:11:4d:14:6c:c0:c8:6d:b7:7e:65:b3:db:0c:
d7:3c:3a:5f:02:19:f7:c8:96:a4:9d:80:a8:a9:11:
c9:95:61:84:bb:7d:3a:87:b8:8e:4f:cf:05:1d:88:
20:aa:ad:22:a1:7c:90:af:40:61:fa:be:1b:f5:76:
b9:d7:53:ce:fb:63:3a:a4:40:12:54:1e:09:39:08:
fa:7e:4a:79:8a:31:0d:25:a0:10:77:67:5c:38:a3:
18:a7:94:a3:3f:1c:52:09:72:85:d6:6a:1a:d0:92:
11:53:b2:0a:e8:38:ca:4c:d3:48:85:19:c1:06:7b:
25:39:4c:f7:0b:bb:34:ed:67:cc:f1:53:a8:0e:eb:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:79:31:07:9E:CD:FE:32:1E:B3:F5:3B:B2:E5:38:D8:A4:8C:E8
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c3:15:b6:cb:56:e9:be:e9:bd:80:04:81:ec:89:f0:e5:af:
f7:fd:f4:e9:e6:75:3a:b5:93:d1:5a:21:94:8f:21:8a:b5:19:
45:96:00:85:07:93:ed:ff:fb:74:92:d9:b6:32:92:85:73:11:
3f:2e:68:09:75:25:6b:77:0c:f9:5d:ca:51:d5:8d:0b:6c:1e:
ae:18:2c:e1:1f:83:c7:d5:d1:c6:0c:71:18:43:e3:19:6d:ba:
99:cd:bf:19:13:71:e0:e1:ef:d1:95:8c:0c:e7:93:44:05:48:
5e:4f:ba:34:0e:1f:c6:b1:8b:1a:d0:30:62:2b:48:08:48:f3:
6c:84:3b:69:8d:1e:73:17:e4:7a:42:9b:d6:5a:ba:5a:17:f2:
a3:5f:01:b9:49:3f:56:bd:33:e6:05:7c:88:9c:d0:a5:a5:9f:
1d:f5:c0:4f:1b:08:d4:13:3d:82:c9:bb:21:f4:02:00:2d:da:
a4:72:10:94:e0:a4:12:9e:64:61:a3:87:98:f7:dc:db:38:10:
6c:9c:a7:93:71:d6:2e:f7:be:92:c9:f1:65:a0:15:d6:b8:8f:
80:db:09:c5:91:00:2b:df:50:31:0a:9f:4a:73:68:65:d6:70:
71:99:28:48:96:ab:a9:55:5b:e5:9b:e6:9b:ed:a0:41:33:f5:
f3:e2:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:52 2025 by rpki-client