
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: 8knfUfvszgMAOd+6ZWZdphyL6ZVs9B4pNyJcn7ZvrhM=
Subject key identifier: 66:50:63:D0:69:42:84:34:AD:29:8D:91:0D:47:EA:BA:F0:2C:0D:3C
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 0199FBEAE120A7DB47CA69A177EF0DB79F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 0369
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: HvZ5O5IMzNM2N1Z4IrHbBN/mPa50A/SpFFzPjcPlljM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e1:20:a7:db:47:ca:69:a1:77:ef:0d:b7:9f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=665063d069428434ad298d910d47eabaf02c0d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:f9:7a:69:94:18:08:3d:67:52:11:85:fb:
4f:7e:76:ff:75:fd:b3:87:3c:3d:ef:ad:94:c7:40:
cc:11:5c:0a:89:5e:da:62:0e:b9:d1:31:a7:db:9a:
13:b9:85:3c:16:ea:12:a9:3e:10:a5:63:06:9b:44:
1f:b1:28:98:88:be:d1:e2:04:37:31:9e:2a:72:05:
39:36:52:f6:bd:dc:f7:fc:fe:93:03:33:70:65:31:
1f:e2:15:a0:22:13:70:92:99:5c:34:75:91:e7:ad:
2c:24:36:6f:b1:5b:44:aa:7d:b1:85:ca:bf:5f:95:
9d:6e:77:f8:7f:c2:31:4c:cc:d3:d9:1f:c3:f0:02:
a0:00:18:de:79:86:bc:f0:19:af:3e:62:c4:be:3e:
e9:6b:61:aa:e3:c8:f2:59:d8:b7:e4:03:a6:dc:15:
68:c0:db:30:53:b9:1e:aa:1d:a5:5f:57:75:f1:69:
88:f3:19:81:4e:a4:61:e8:bf:23:92:77:37:2d:df:
8a:df:b3:6b:b4:a6:1a:ab:66:6a:b5:f1:fa:c9:fe:
ef:c1:aa:2d:b4:f1:fb:6b:c3:83:04:b7:fe:58:66:
fa:3c:73:98:7c:07:4c:f7:06:f3:88:88:06:c8:fc:
72:b6:18:a1:be:77:59:54:1b:db:f5:94:61:ba:cf:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:63:D0:69:42:84:34:AD:29:8D:91:0D:47:EA:BA:F0:2C:0D:3C
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:c4:f7:d4:eb:5f:39:09:21:69:a3:64:18:d8:85:0a:b8:
81:45:02:3f:8f:9b:bc:d0:e0:2a:46:fa:96:b6:38:6b:45:8f:
44:27:b4:8c:3c:c1:d0:89:ca:a6:e3:30:9c:b7:52:c0:83:25:
08:de:c9:d5:ac:ac:32:93:bf:ef:7c:fe:bf:d7:5a:fe:ff:58:
d7:6b:07:83:38:dc:9c:79:8d:47:e7:55:a0:d6:bb:d5:35:fe:
c9:e6:3d:8a:67:a2:64:7e:a4:3c:23:3b:97:66:d7:1e:d9:31:
d6:4c:a3:93:c4:7a:e0:a2:67:74:75:39:00:55:a5:9a:56:46:
1c:90:7a:f2:18:08:e8:4a:55:1f:3b:11:cb:1d:fa:94:b4:a7:
19:37:25:b7:15:4c:4b:7f:09:68:25:f7:6c:da:92:35:46:b5:
80:1c:57:78:d4:01:3b:e1:15:1b:80:f2:2b:0f:a9:34:bc:4a:
27:c9:38:05:a9:54:1a:e0:17:d4:34:bf:98:c9:f7:5b:94:06:
eb:f7:60:9a:c7:9e:2a:03:8c:62:1e:b5:3d:38:f1:07:d3:02:
e8:e5:8f:b0:70:69:bf:9a:4f:6b:80:03:2c:50:a6:93:97:43:
4f:b7:7a:6f:ae:91:ae:4d:84:07:b2:cb:2b:47:6f:ba:76:6b:
79:21:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:14 2025 by rpki-client