Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
File: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft (raw, json)
Hash identifier: hLUQj/5IgOBFjtO/OHpAIhe84U+aMP2PGwv+G7y33Ck=
Subject key identifier: 1F:74:E5:49:E6:B4:33:A4:A9:A6:57:3B:50:08:EA:E9:B0:0D:DE:A6
Authority key identifier: 1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
Certificate issuer: /CN=1c1c754b7a5b541892540d24ab98d31537974574
Certificate serial: 0199FE7DE7B70AD50E29EC8933C81F5C5830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl (hash: 5ybL5aS6GvfE21hPL00uBMzigIGp7UT4RtsOw82zGaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e7:b7:0a:d5:0e:29:ec:89:33:c8:1f:5c:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1c754b7a5b541892540d24ab98d31537974574
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=1f74e549e6b433a4a9a6573b5008eae9b00ddea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:e2:21:63:1c:b0:e3:24:27:c7:f2:99:ba:
af:58:85:da:48:72:82:90:0a:f8:2b:48:14:ca:a0:
8f:9a:ec:8a:d6:f9:6d:dd:61:ee:fc:73:c3:dd:0d:
60:4c:0b:e7:7b:b9:b7:86:46:93:e8:bf:d3:5c:bb:
62:31:ea:49:6b:c9:26:76:df:16:01:8f:bd:57:78:
dc:08:6f:75:67:c3:02:fd:f9:81:41:cc:f5:f5:68:
b5:f3:26:12:30:de:df:51:2a:41:42:14:e7:3d:ef:
1a:ff:ca:eb:6a:24:08:28:7d:bc:05:59:c2:71:a5:
1c:82:d6:ec:20:38:24:5a:30:94:e3:c9:a0:bc:ee:
e5:3f:e7:8b:38:6b:39:74:01:f9:8f:99:30:d3:27:
6c:57:96:28:6f:cc:97:b9:1d:a2:95:87:a9:bc:c3:
08:50:bb:31:41:6f:a9:5e:55:84:ec:0c:f3:f7:11:
79:0a:cd:50:68:e6:a5:c4:66:7d:31:4e:81:d5:43:
cb:28:b5:0b:38:b5:bb:1a:fd:5e:be:7a:56:29:c1:
cb:e9:fb:65:a4:97:48:83:24:c9:40:13:c1:ab:61:
00:43:08:ff:e3:98:4f:83:67:3a:c8:0a:d6:5f:c1:
33:4d:36:8f:71:fe:86:01:1b:85:e8:40:5e:ac:da:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:E5:49:E6:B4:33:A4:A9:A6:57:3B:50:08:EA:E9:B0:0D:DE:A6
X509v3 Authority Key Identifier:
keyid:1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:ba:78:5f:8c:dd:e3:ec:0e:8b:c5:03:3b:5e:b4:e2:17:
35:04:71:27:63:c3:65:38:1c:55:e5:82:e6:f9:c0:eb:d1:9b:
f5:17:a3:70:ed:7a:94:e3:5d:4f:39:f6:7c:83:16:ea:79:c4:
13:3b:cf:51:a7:95:ec:b9:7b:83:21:2e:ab:13:0e:b8:33:57:
b1:05:ed:c2:b8:35:c2:cc:17:17:42:ff:7b:af:68:2e:7f:2a:
77:bc:10:4e:27:77:a0:f0:0d:7d:de:0f:a4:cf:70:53:43:d0:
79:db:72:8b:8e:bd:c4:aa:3d:49:04:66:97:0e:05:75:2b:38:
15:2e:88:a4:db:1c:4e:de:87:68:0c:48:e1:a7:3e:d8:ac:40:
23:ca:a3:b9:1a:84:07:f1:53:b1:e6:88:02:bd:6f:e2:1a:0e:
48:08:66:41:d7:73:a9:6d:01:66:17:07:09:d9:4d:4e:f8:16:
3c:14:e1:24:7b:75:59:2d:9d:0f:51:33:29:6f:af:a2:31:c0:
b2:af:79:0e:6c:a1:c6:49:b4:e3:dd:7b:d6:92:f8:df:fc:e7:
98:06:db:a4:15:45:96:8f:80:3f:82:b8:e7:98:81:b4:5b:fc:
3f:c8:fa:e4:3e:c3:7f:85:32:e4:ca:c7:45:97:27:c4:06:93:
ea:cc:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:42 2025 by rpki-client