Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: M4AszB2q/9rVJHVx9ip4OQu3TTmR5xuTKYUfTyHsyBg=
Subject key identifier: C6:31:67:18:C5:ED:C6:97:26:8B:54:A1:1D:C7:D2:F4:E8:DF:52:2E
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 019A4EF5E91154DCC04E778DE1219A3FE03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: pEST96eED8X0EDplG5zaQC7Ju7ywQsOv7dIe+vAWDHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e9:11:54:dc:c0:4e:77:8d:e1:21:9a:3f:e0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=c6316718c5edc697268b54a11dc7d2f4e8df522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:5e:da:e0:3d:75:4c:e8:9f:30:44:33:e0:
66:36:ab:4a:25:01:5d:d8:f8:cf:bf:54:92:68:6d:
09:73:04:11:f5:1b:95:a1:94:6e:f5:fa:2f:e6:91:
16:c6:03:57:4f:ae:ff:b2:c0:03:46:4c:18:75:54:
b4:b2:a1:eb:c5:ec:f6:87:ec:58:2c:79:76:63:0f:
91:17:73:a0:a2:d2:51:e0:73:33:92:3a:d4:06:ce:
1e:74:2c:a4:f8:26:17:af:aa:0a:e1:45:5c:52:5d:
c1:89:ff:13:d4:cd:11:5d:55:3a:fc:c5:d0:c3:04:
ee:3c:4a:ae:57:8d:f4:63:75:f3:41:6f:a7:68:82:
e9:e8:6b:dd:e6:69:ea:f3:11:1c:ed:d1:4c:04:0d:
fd:e1:b4:c9:cf:52:7a:16:77:52:56:1a:95:fb:93:
47:eb:0d:97:e6:fb:5d:52:16:d0:7c:3a:22:eb:96:
37:68:5f:f8:b5:80:b3:39:93:9c:06:96:e0:07:4b:
9f:40:d5:1d:d3:3e:f2:51:43:7b:3b:0a:ec:5c:ee:
e2:6f:a7:38:13:7e:77:83:3e:1f:6d:3b:9d:b1:25:
24:94:5f:4e:c7:f5:0f:62:08:04:e0:34:3f:bb:52:
0f:fa:47:20:71:38:bf:2b:aa:e5:a8:d9:00:6a:5f:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:67:18:C5:ED:C6:97:26:8B:54:A1:1D:C7:D2:F4:E8:DF:52:2E
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:cd:c9:74:40:f5:f2:29:7f:20:49:ab:48:4d:ac:a8:f3:
d7:a5:af:c7:10:6e:1e:ba:ce:bb:ce:6b:e7:43:34:ab:b8:5c:
67:02:58:8c:19:e8:e7:4f:da:e7:3a:54:ee:a4:f6:c0:69:36:
10:33:c5:4c:fe:f4:59:e1:fb:06:c8:23:27:02:07:47:6e:42:
86:fd:e0:fa:35:ff:63:67:fe:1c:49:9c:6f:18:b5:7f:df:44:
56:78:8e:40:2f:7c:23:67:3f:2f:e0:e1:72:8c:83:c8:ef:5a:
7d:ac:bf:d9:94:b6:63:ba:74:f3:6b:1d:21:81:70:f6:37:06:
39:d0:62:6e:2e:0f:c4:ed:78:bd:6c:26:54:7d:07:9b:83:d2:
b3:d8:b3:70:e6:cd:43:36:2a:e9:d4:25:a9:36:4a:74:b0:b1:
56:4c:a2:3b:c9:d3:c7:43:77:3c:85:55:66:8b:c6:1d:69:f1:
f7:b4:47:4b:66:03:9e:94:87:f5:07:08:50:de:23:65:44:00:
e1:21:cb:23:63:f5:a2:b2:1f:b2:60:ac:99:f4:63:bb:90:0b:
b3:6e:bc:ee:f0:78:c6:fd:4b:8f:10:ee:cb:53:60:c0:d7:ee:
78:b0:13:5a:8e:5d:60:7b:fd:fb:da:be:80:7d:0f:49:44:f2:
0e:63:1b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:53 2025 by rpki-client