Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: JaP/yoSo+aVD06+k45RDmWv0suc7B3HFZmDC8wDcshY=
Subject key identifier: AC:E2:C6:FC:B3:04:B6:93:08:8D:11:26:E8:70:0A:93:AE:90:BB:56
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 019A4EF501D6DB9858ED7C1E122EAE70B339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0DA0
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: UPAXLyd9017UukBqB5UX1aJkWZy3z14bzLcmgS60Zas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:01:d6:db:98:58:ed:7c:1e:12:2e:ae:70:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=ace2c6fcb304b693088d1126e8700a93ae90bb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:d8:f8:32:7b:a8:e9:1a:22:94:36:6a:af:
a4:e0:83:6a:be:ec:c2:08:29:8c:bf:52:29:d9:92:
88:7f:28:ec:a4:3f:96:dc:91:07:d0:ef:dd:e0:b9:
15:ac:6e:c8:55:c2:f3:8d:cc:d5:e7:28:46:30:28:
2f:b6:1f:8a:f5:bc:47:10:a8:37:82:66:90:09:ee:
c3:e5:25:78:16:c7:78:55:bf:a9:26:ca:36:3c:6c:
ee:f0:b2:f1:0b:6b:0a:0e:ce:72:9b:66:3c:49:29:
b5:e0:6e:1d:ba:9f:fd:21:64:b3:b7:76:1b:c4:a3:
d0:07:9d:1a:30:0a:87:8f:26:ea:3d:33:d2:8f:ef:
a1:04:61:6a:0e:1d:a1:15:90:ae:e5:f7:33:00:e0:
73:70:08:53:84:5e:da:3f:4a:43:c1:aa:59:68:61:
df:4e:ce:8e:25:3e:b3:25:d3:8e:65:3d:90:b0:13:
4a:ba:9b:20:c6:fb:b1:4e:a7:eb:20:e8:86:c5:63:
60:e1:9e:d3:d6:d9:f1:14:f1:14:44:b3:ab:2c:ce:
5f:4b:52:99:4f:3b:08:d2:98:57:a2:4d:98:cc:72:
43:da:a7:06:7b:bc:6e:da:4b:f5:98:51:f7:33:eb:
8c:0a:dc:b0:dd:a0:3e:1b:f8:f6:95:9e:f2:be:80:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:C6:FC:B3:04:B6:93:08:8D:11:26:E8:70:0A:93:AE:90:BB:56
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:01:4f:ab:12:ef:4b:80:22:e8:03:d5:16:f2:d1:8f:2a:e0:
be:38:e5:e0:3b:25:2a:9d:01:5d:02:aa:08:55:a9:07:8d:d4:
72:a1:8f:3a:8c:d4:3c:55:79:3b:b3:2c:18:63:19:d6:8e:15:
35:4e:10:1e:a2:e8:5d:10:33:00:33:ae:c8:27:17:9d:61:1f:
10:f4:54:2b:97:31:cd:6b:4f:80:8b:67:b4:2d:a3:74:38:9a:
60:7d:1b:08:38:fb:97:da:c9:4c:64:a6:d5:f4:38:54:ec:47:
b3:2c:d1:56:44:a2:8f:95:06:a8:32:ce:d1:71:27:12:ce:47:
db:16:78:c9:03:b2:f3:c3:f7:9b:d0:19:36:eb:12:d1:ce:07:
ae:d1:2e:fc:49:2f:28:5d:b0:65:7b:33:4b:03:f6:1a:63:bf:
92:d4:6e:d1:54:f1:11:ae:d5:0e:b1:dc:85:f1:0e:9b:9b:f1:
8e:ca:84:0a:6e:df:53:96:b4:2e:09:88:56:2e:b9:70:de:48:
04:05:8b:20:67:a9:f7:d5:1e:fa:6a:aa:50:4c:fe:1c:10:d3:
79:a0:cc:23:ab:c6:5e:70:e2:02:eb:cc:22:48:2f:57:12:8f:
37:fa:3f:a8:65:e8:da:4a:cc:4f:f9:94:0f:44:0a:b9:a7:e9:
ee:16:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client