Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: QPizyiBio4eY/OcDNLqcAmbOVrwI4z0YI0Af0OTZlb0=
Subject key identifier: 6E:37:E5:91:E7:65:98:4E:B5:BB:B3:42:B8:1A:F7:88:73:1C:12:B8
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 019A4DE22AF99D1F54B2B188480DFDC8F894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0BB6
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: X5OGjx/gu5kP/CYQVR2Fh/FjRkTUnqipCVOueeIXgbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2a:f9:9d:1f:54:b2:b1:88:48:0d:fd:c8:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=6e37e591e765984eb5bbb342b81af788731c12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:8e:44:b1:10:10:27:7c:4e:ae:04:88:e3:
b4:ad:af:57:fd:b4:98:fe:a0:d7:81:66:c1:14:87:
04:61:16:58:c4:78:12:eb:0b:33:a2:03:56:98:8b:
c7:c4:80:f5:0b:03:2c:6b:66:2f:67:53:c8:06:b2:
d2:1d:db:62:ed:b7:c4:45:7c:f3:31:37:3f:74:4a:
89:d9:69:49:aa:2f:e1:d7:79:39:37:54:64:85:14:
66:8f:8c:3c:ad:10:90:3b:c8:d6:a9:69:b5:08:d2:
8c:d7:59:a3:88:83:73:ef:32:57:d0:ad:3a:3b:96:
dd:a3:05:9e:da:e6:09:5e:07:63:f9:0d:f9:a7:1b:
16:a4:20:f8:47:1d:ae:99:d5:87:ba:1f:5d:3a:b9:
ab:cb:79:a8:b1:68:93:81:b7:bc:e4:df:68:9b:d7:
2f:87:6d:9c:25:4d:dc:4b:35:31:a7:89:a0:38:e3:
da:56:2e:e2:f0:81:47:a2:1a:89:b7:d6:e6:eb:15:
77:9a:5d:b5:53:1d:dc:77:be:ed:f4:6f:78:34:5b:
4f:b8:2a:44:6c:ef:36:dc:4f:5f:12:5d:c0:ae:ca:
31:eb:3a:db:07:e1:78:bc:31:3f:b8:84:82:a4:30:
78:bc:fa:69:be:c5:a5:72:e0:a7:b3:24:d6:ba:74:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:37:E5:91:E7:65:98:4E:B5:BB:B3:42:B8:1A:F7:88:73:1C:12:B8
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:b1:10:ab:14:99:41:58:46:c6:c0:0c:63:ba:20:3a:ad:
4d:d0:df:50:90:5c:f9:41:3c:2e:68:82:44:fa:60:95:ea:2a:
b5:cb:eb:d1:51:89:97:e5:08:b4:bc:6d:64:a4:96:1e:da:9e:
6e:9b:4b:70:1f:c7:ec:ab:01:16:de:1a:23:76:42:1a:29:23:
9a:fe:f5:d1:96:74:91:58:9c:b8:3e:65:ca:77:a5:37:4b:a5:
a9:43:45:df:b6:78:61:2a:b6:e5:7c:db:3d:02:ef:08:d3:42:
cd:53:12:fc:26:7a:a4:fb:dc:e4:40:78:1e:64:86:a4:5b:7b:
7a:c9:87:5b:3c:f4:a3:8d:85:b5:71:3c:73:8b:38:fc:5e:04:
36:49:7a:9a:3d:56:62:ef:b5:8b:42:62:f2:84:f1:2d:e7:e6:
c6:db:1a:30:52:2d:ee:b7:6c:e0:bc:32:0d:ee:3f:2d:19:34:
f2:6b:cd:4c:e5:9e:cb:d2:e9:d2:be:30:e0:dd:dc:42:b2:11:
69:40:fe:3e:a9:32:06:01:38:14:1e:4b:f0:80:5c:07:ef:11:
59:93:b8:7d:cb:1d:3b:95:07:7c:26:b4:51:eb:bb:45:ad:27:
a5:79:4d:ef:46:78:72:d8:5c:20:79:94:3a:8b:3c:c3:cc:0f:
3b:1e:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:27 2025 by rpki-client