Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: yqBvX5wVhG4A0pwIQbj82HFhqNlGDdLEfRb+a6s/6Xc=
Subject key identifier: 69:5E:42:88:CA:BB:86:E6:65:53:C2:D4:D0:8A:A1:2C:76:A0:CD:F8
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 019A52D2B4268F633B771FE82EAA33506598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 0A6B
Signing time: Wed 05 Nov 2025 07:02:11 +0000
Manifest this update: Wed 05 Nov 2025 07:02:11 +0000
Manifest next update: Thu 06 Nov 2025 07:02:11 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: dF3jag4IWaWQ1dZgc0jBt7pL2llz2eQN+1DHvkrcfgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:b4:26:8f:63:3b:77:1f:e8:2e:aa:33:50:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: Nov 5 07:02:11 2025 GMT
Not After : Nov 6 07:02:11 2025 GMT
Subject: CN=695e4288cabb86e66553c2d4d08aa12c76a0cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:50:bc:ee:a8:9c:eb:16:b8:23:18:9e:68:
4d:67:49:b3:bd:77:aa:31:67:a1:80:2d:a1:d3:02:
60:1a:76:8b:09:15:63:e6:e0:8a:5e:d5:d9:ea:40:
81:02:f9:d5:15:7a:9a:c7:25:fe:92:72:43:da:9c:
6d:b5:60:86:67:45:07:f0:eb:5b:3c:bf:83:6f:1d:
4f:0c:4a:52:9e:34:62:d8:79:40:2c:fa:40:b3:09:
79:02:93:29:44:fb:75:91:4a:83:f6:38:87:50:36:
21:eb:d7:e7:b2:85:80:c5:16:22:45:a9:7c:9b:c0:
e2:24:31:39:8d:e7:fb:9d:16:bd:54:55:2e:3d:83:
21:bf:fe:40:84:d8:fb:30:3f:e0:88:66:36:a9:90:
dc:3b:5e:fc:2f:1a:1c:a1:6a:65:cf:7e:1d:29:57:
fc:ab:da:97:c7:ba:e4:01:6a:fc:e8:a8:4b:89:d8:
13:c1:e5:6f:99:6a:89:6e:bd:4d:55:bc:22:04:21:
51:be:3b:6b:90:5e:51:54:b9:8c:7b:67:17:ba:72:
97:bd:77:ed:1d:d6:2f:7b:2c:6a:ca:62:2f:36:b6:
a1:3d:2b:7d:63:51:fb:c8:50:56:9d:86:b1:dc:e6:
b5:1c:b7:de:b5:40:c0:97:0c:93:3d:ba:7b:a4:3d:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:42:88:CA:BB:86:E6:65:53:C2:D4:D0:8A:A1:2C:76:A0:CD:F8
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a6:f8:ff:8b:0c:7b:ca:1c:74:69:d3:96:1d:84:c9:4d:22:
eb:ce:a1:f0:b0:4e:8f:6b:19:d8:d7:0c:a1:9c:6e:7e:f9:a4:
fb:6f:bf:1c:6b:e4:22:10:30:71:60:c1:89:d4:a1:50:13:6a:
fb:a1:5d:2d:a0:35:9b:4d:55:52:3f:94:00:d2:12:3e:c2:66:
08:9f:60:90:53:b0:f7:fa:c2:0a:51:9e:01:54:70:b8:6c:33:
73:86:98:ae:da:da:e1:c8:30:fc:c9:f2:33:4f:ed:1c:d4:71:
95:22:fc:90:83:ac:ec:8e:5f:2f:c2:b9:cc:fa:57:95:56:7e:
e8:1c:cb:50:9c:62:1e:3c:08:c7:c0:6c:35:15:68:d3:9a:e0:
66:a2:7e:a4:77:81:95:38:f0:e7:78:fd:ae:70:a7:b1:a2:88:
fe:80:d3:bc:57:aa:27:af:6d:db:f3:f3:c2:91:f9:a6:91:03:
2f:ff:b9:ec:4c:ef:0b:a1:cd:02:1b:e8:cd:91:b6:20:d6:91:
b9:6a:be:2c:5a:41:21:b6:80:1a:5c:f8:c3:c2:b9:6a:1a:45:
70:4f:3a:dd:eb:c6:03:c9:ed:48:ec:46:a9:45:5d:e2:5e:a0:
c9:e8:b3:38:22:5e:a9:c9:08:b5:d3:c4:2d:ca:48:cc:f3:fd:
6e:a8:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:10:30 2025 by rpki-client