
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File: HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier: 6CUW7j8AXwIvOlDF1Oh+TI7E/ez36nMpbA/iAxP9tNg=
Subject key identifier: D0:B8:D1:52:F8:95:23:3D:0B:32:B9:03:15:A1:43:79:20:C3:E6:9E
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer: /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial: 01987450ACD3320F811AA79C0555A1391C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:01:40 +0000
Manifest this update: Mon 04 Aug 2025 09:01:40 +0000
Manifest next update: Tue 05 Aug 2025 09:01:40 +0000
Files and hashes: 1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: TIRkEuT5GAYcEoPj9h8ZFPfzUJZ5QMmuudrQ3cKb6bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ac:d3:32:0f:81:1a:a7:9c:05:55:a1:39:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Validity
Not Before: Aug 4 09:01:40 2025 GMT
Not After : Aug 5 09:01:40 2025 GMT
Subject: CN=d0b8d152f895233d0b32b90315a1437920c3e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e4:4e:97:1c:9e:06:e3:3d:0d:60:d9:84:dc:
f9:9b:2e:19:10:cf:9f:40:eb:f0:85:08:77:aa:46:
68:94:83:79:5a:8d:7a:23:c3:34:00:96:e0:04:bf:
a2:7a:59:45:a4:da:1b:a7:be:f8:e3:34:30:cb:84:
82:f1:f9:e3:78:46:32:37:6a:48:1f:48:a1:19:ad:
64:37:c5:56:30:53:12:a8:06:2b:d0:e6:99:f1:1f:
cc:0a:0b:99:7f:1b:18:2c:8d:39:95:48:1d:eb:c4:
13:d8:ac:17:77:9b:7b:73:1d:c7:f3:81:15:65:21:
bf:00:b9:de:8b:a6:dc:a6:65:1f:67:fa:c1:8d:69:
41:13:10:9d:42:23:42:bb:e9:4e:fa:cd:19:52:dd:
5e:c5:58:8f:0c:a3:a7:3f:51:80:b0:ed:1e:0c:5e:
83:37:8c:b5:3b:25:df:29:d9:c1:99:88:0b:a2:2b:
cd:86:43:85:c9:30:9d:42:2b:46:0c:87:d2:3f:ee:
32:fc:a9:38:16:81:a4:0a:85:83:01:7d:0c:75:0b:
64:c4:91:fd:c0:1b:b9:2f:41:72:b6:31:51:88:70:
11:38:b4:54:7f:0d:61:6e:b6:95:bc:bb:0e:73:92:
b8:c6:22:aa:e8:23:ba:27:7c:5c:02:38:09:6a:86:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:D1:52:F8:95:23:3D:0B:32:B9:03:15:A1:43:79:20:C3:E6:9E
X509v3 Authority Key Identifier:
keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:df:87:d2:73:a9:91:99:4e:a8:43:c6:ef:49:a4:6e:11:
ab:80:b6:bf:3e:67:56:2f:b4:d3:c6:87:3e:79:ce:e4:d2:82:
a4:1c:32:bd:84:4b:23:5e:81:7d:db:8f:da:c7:9b:57:6d:49:
bd:8e:f5:45:a1:77:93:91:95:e5:f7:56:a3:91:f2:a0:68:61:
8c:67:62:40:98:aa:84:8a:8c:ad:5a:71:05:15:2a:63:2e:2e:
ee:cd:74:f2:7d:4e:81:a7:42:c5:d7:1f:f0:67:ce:cb:ae:d6:
0d:d2:c2:21:b5:ed:a7:51:6d:76:40:be:61:58:07:b5:f8:ec:
73:fc:0f:ee:9a:64:85:1e:95:9e:f8:c7:e2:38:c0:93:0d:77:
6a:c0:0f:46:82:d2:04:60:78:66:e9:dd:66:51:82:a1:a9:af:
72:cc:ce:22:ef:13:d7:fc:35:50:11:76:69:30:9b:da:f1:12:
f4:39:c1:c0:27:13:2c:23:7d:bc:da:8d:d0:f3:36:df:e4:c8:
92:34:8f:bd:56:89:1b:87:3e:26:12:3a:b2:c5:96:9b:25:d2:
b8:be:fe:8b:e2:83:0b:d2:14:84:6f:25:3b:9c:b9:a3:a3:97:
2c:75:3a:09:f0:c4:52:9e:3e:12:ef:d9:f5:4a:ba:fb:0b:3e:
d9:65:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:06 2025 by rpki-client