Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: JeuiLiycGknww5M8gQBWo9LAuShj6zbx9wGNeED24NQ=
Subject key identifier: 0F:CA:C5:66:99:56:83:33:11:FF:95:D4:EA:5E:E4:20:B7:ED:2B:8B
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 0198D472CDD020024436979AB49E1C86B5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:30 +0000
Manifest this update: Sat 23 Aug 2025 01:02:30 +0000
Manifest next update: Sun 24 Aug 2025 01:02:30 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: AJZynnFEEoPRwgI9sqkbkSWk8bCF2XGjnRi9R+SnISU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:cd:d0:20:02:44:36:97:9a:b4:9e:1c:86:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Aug 23 01:02:30 2025 GMT
Not After : Aug 24 01:02:30 2025 GMT
Subject: CN=0fcac5669956833311ff95d4ea5ee420b7ed2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:63:b1:8e:a8:19:09:0c:41:c0:1e:32:86:
88:61:f3:1d:aa:0c:da:98:bb:2d:e2:26:4e:80:71:
a1:a0:66:a2:09:53:56:fc:93:ec:fc:95:9c:b9:b0:
bb:a7:90:82:28:aa:57:50:5a:a0:84:1b:34:9e:bc:
52:78:b5:f3:c1:32:75:17:6b:0e:95:79:87:62:5f:
18:97:d1:d4:01:ab:86:6e:92:5b:3b:50:c8:b9:df:
e5:6e:90:58:13:ed:65:66:4c:b2:18:ad:32:4e:63:
54:08:50:b3:35:25:6d:d3:79:b9:77:ac:3f:cc:b3:
e9:03:d2:ac:4a:03:84:ce:38:14:9d:87:d0:39:2e:
86:de:64:75:f0:84:0b:4e:b2:01:57:19:03:ff:fc:
d3:d4:6c:71:10:83:8d:42:ce:6f:bc:90:c4:9e:8e:
de:72:0c:6e:f7:9c:be:3f:48:15:04:7e:73:6e:7d:
85:cc:e0:cc:9c:f5:ee:1d:12:0e:23:3d:e8:fa:02:
62:7d:69:3a:ab:49:b3:55:e3:66:7e:f7:e8:6c:05:
8e:4b:b3:b5:a5:aa:86:ed:44:89:28:26:9a:3f:a6:
1f:1c:78:a7:26:f4:d0:2c:da:c0:5d:57:cd:8c:86:
c2:d1:a3:2a:95:eb:e4:2d:84:13:e6:83:fd:5d:69:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:C5:66:99:56:83:33:11:FF:95:D4:EA:5E:E4:20:B7:ED:2B:8B
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ba:da:f3:7d:07:03:bb:bc:fb:11:0c:64:12:6f:68:07:1a:
48:9a:67:1c:cc:4b:38:0a:a2:9e:b0:b4:b9:ff:29:69:c7:00:
40:db:17:1b:a9:66:8b:6c:eb:c0:6a:11:56:59:09:61:d6:4b:
53:2c:2c:4d:5e:42:3b:a8:05:96:cb:0d:8c:7c:d3:70:06:9b:
3d:e2:d7:3d:b1:9e:1d:88:8e:59:a4:61:11:d7:f0:1e:6f:29:
f1:be:83:18:09:5d:7a:50:68:8f:02:52:6d:73:88:3a:07:a1:
52:14:80:1f:cb:a4:d0:41:a2:83:d5:9f:4b:dd:7a:ff:c7:c8:
80:4e:04:48:f3:a5:ae:ae:d3:52:90:e4:3e:df:dd:c0:1b:a9:
fd:dd:a7:d6:43:ce:6c:86:b9:56:16:d0:bd:57:b6:bf:8f:ab:
28:3f:46:1b:cb:f8:8d:8e:ab:d9:5a:a6:ea:15:f6:3c:7e:ea:
79:10:96:8d:5b:58:c5:7e:e6:bb:c6:b7:ee:39:db:bd:72:6c:
eb:29:eb:94:ed:e7:e8:2b:36:8a:25:af:7b:87:9b:ef:2d:2f:
38:8f:5b:85:2f:d5:b0:ca:6a:5c:d5:b1:d9:f0:89:31:48:7b:
b2:5b:1c:cf:07:d6:bd:7c:c7:99:95:dc:a2:1b:f4:85:6c:35:
49:c5:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:48 2025 by rpki-client