Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: ITH6yJ/q32W8PJieLZZ/YadCUKg0RMgECm3GavrL6X4=
Subject key identifier: 1B:16:35:FA:5B:AB:73:80:E2:F9:FE:50:6C:FC:E0:0E:30:F6:8F:C8
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019A4F2B20D90E5F382381B6CE5D3100C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0ED2
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: P4bdhyDf1JyG63pjL4C5Fq86fI5CubdcspYWq9unlEI=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:20:d9:0e:5f:38:23:81:b6:ce:5d:31:00:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=1b1635fa5bab7380e2f9fe506cfce00e30f68fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:b6:ca:a3:de:41:7e:65:45:24:96:89:b1:
21:d3:95:0e:d9:76:82:28:c0:3e:c0:44:57:d9:5a:
79:54:35:5e:8f:95:ad:5b:f8:9a:75:05:ed:8c:86:
47:5a:4e:f9:6a:c0:35:0e:ec:ff:8a:36:9c:47:09:
f0:7f:59:76:7e:35:3a:bf:d7:91:68:d3:bd:26:21:
8b:90:92:25:1a:07:e5:5f:27:21:09:42:3f:11:7e:
d2:05:c1:fe:d0:13:1a:3d:0a:e0:5b:74:ad:e5:0c:
db:64:91:28:84:d0:da:73:38:4e:ca:71:a0:00:b1:
31:3e:99:1e:80:21:36:45:f7:14:5d:eb:18:c1:ee:
be:b0:a4:da:6f:74:51:54:b2:45:7e:29:f7:20:ff:
03:61:eb:5e:07:05:15:6b:05:45:c1:c6:06:7f:3b:
9b:92:c8:46:0d:3f:9f:98:2b:c3:ca:1a:40:82:4a:
de:f7:40:2b:ab:df:73:93:79:a9:25:c6:9f:69:c5:
e6:3a:dd:31:4b:77:0b:ff:d9:b5:3f:96:d6:a3:dd:
85:61:7c:f8:39:a0:da:99:96:ea:e7:bd:be:ab:bd:
66:d2:60:a3:65:6e:10:81:6f:6b:02:88:d1:e0:99:
4a:90:4e:5f:5a:7c:50:99:60:3f:11:4c:b8:e5:65:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:35:FA:5B:AB:73:80:E2:F9:FE:50:6C:FC:E0:0E:30:F6:8F:C8
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ab:55:37:be:5d:61:fe:0e:a7:9d:77:01:6f:ad:fe:94:49:
2a:55:c1:a9:4e:30:3e:1e:0a:a0:4c:eb:74:c9:8a:1a:f4:d9:
94:b1:c8:d0:68:17:8b:cf:fc:9d:8d:94:c5:30:51:08:20:25:
ce:a7:5f:28:73:c9:ef:ed:f4:f9:25:0f:17:b4:14:5f:4f:3b:
c1:cb:48:c4:c8:39:68:5c:5e:43:c1:40:46:77:28:17:bd:ac:
31:c7:a4:fa:69:9c:b9:c9:6c:83:f8:84:b3:e3:24:ec:a1:24:
72:54:ed:f7:21:e3:65:46:5b:7a:5e:a5:4d:4d:69:9a:3c:dc:
31:f0:20:c5:91:34:e8:19:25:10:a5:c8:38:93:13:9f:43:d7:
c1:59:a4:f4:64:79:6a:cf:26:ec:6c:0d:8b:32:d4:ec:95:e4:
50:5f:03:1f:62:83:d4:bc:07:26:bd:f2:cd:7b:cb:42:60:ed:
ad:48:fe:99:a5:6a:03:de:a2:37:b4:1b:fc:db:d0:9e:6a:7e:
7b:bb:19:e3:86:6c:4d:1c:85:35:22:5f:2c:b8:26:5e:45:cc:
6e:94:b3:e8:b5:36:c5:f4:db:49:18:25:d7:70:b1:9b:d1:ec:
95:cb:b6:67:b3:c7:20:fa:23:46:27:e1:51:ca:f0:b6:2f:13:
64:21:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:26 2025 by rpki-client