Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: YBXDVf2LHiYKvteJaQwSB6WLDU/m3tuXWutHXQc5kHU=
Subject key identifier: 1A:2B:FD:82:07:CA:7C:A5:DE:B6:94:7E:D1:5E:59:79:2F:DB:14:40
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019A22F7C3B395C3B09FDF52997EF5EBC893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0555
Signing time: Mon 27 Oct 2025 00:00:54 +0000
Manifest this update: Mon 27 Oct 2025 00:00:54 +0000
Manifest next update: Tue 28 Oct 2025 00:00:54 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: weIZMwAobXFPyjkvQ4YqIfUzKP1TTDRAE34JEGwOwXs=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:c3:b3:95:c3:b0:9f:df:52:99:7e:f5:eb:c8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Oct 27 00:00:54 2025 GMT
Not After : Oct 28 00:00:54 2025 GMT
Subject: CN=1a2bfd8207ca7ca5deb6947ed15e59792fdb1440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:b1:69:8a:e7:56:71:75:ed:f0:b4:94:e6:
a9:68:58:e3:66:a0:30:d2:37:50:57:2b:e3:8d:1c:
8c:de:42:68:6b:e6:e9:50:86:70:17:ba:af:ba:48:
70:2d:53:25:0e:b8:0a:fe:76:a6:fa:73:ef:00:3b:
39:62:28:62:06:9d:d9:97:3b:f4:51:17:e6:0b:97:
58:49:57:06:31:15:fb:eb:f3:3e:ee:1d:e0:24:98:
9e:19:ae:8c:df:55:ec:7a:4e:de:44:ca:92:35:fa:
db:8b:58:ca:cc:24:57:b4:5e:fe:6b:a8:43:2c:a9:
34:8b:0c:a3:bf:c6:5b:7a:b7:e0:34:a0:78:f1:53:
cf:f3:9a:da:fe:c2:a8:54:f1:3d:83:fa:07:ff:38:
59:cc:cb:88:36:26:7b:39:d6:2b:49:d4:6d:19:b3:
fa:72:1b:8d:c2:ad:0f:10:a2:b1:a7:77:93:1a:2d:
7d:d5:d0:87:48:0e:0d:a1:7a:2b:fc:ec:23:bf:48:
29:58:1a:84:7b:be:17:2f:45:e9:ae:73:04:9d:6f:
ab:e1:6a:1c:a5:ed:f6:8f:6f:e0:d0:ba:85:3b:aa:
2f:84:7a:bb:62:f0:e1:c1:f4:4b:5e:c6:67:61:d0:
8b:83:95:16:1a:0a:89:d8:13:75:b9:df:02:d8:74:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:FD:82:07:CA:7C:A5:DE:B6:94:7E:D1:5E:59:79:2F:DB:14:40
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:45:26:7b:c7:78:f0:df:b0:46:4a:c4:2a:1f:38:12:b1:04:
f1:e4:87:82:b0:09:8b:2c:17:83:0f:e6:10:aa:ff:cc:9b:61:
2d:e9:8e:58:94:56:91:c4:92:4f:cb:85:e5:49:6a:c4:96:53:
66:ea:a4:66:ba:b2:4b:9f:4a:2e:c2:3d:e9:d8:e1:4a:57:2b:
8a:ea:07:59:7e:4c:dd:6f:9b:e9:9e:d3:ae:cb:04:fd:e5:e8:
30:93:0a:66:08:72:54:f6:27:d2:05:0c:9c:a4:46:0f:a6:55:
f4:38:b6:35:83:7d:c2:21:1f:58:47:b9:6d:8a:6c:3f:8d:89:
b2:50:5b:f7:ab:a1:b4:14:9c:08:36:94:c0:e7:12:c0:28:c7:
fd:cc:c0:72:34:56:6c:ae:81:7d:13:a5:5b:aa:c1:28:20:e3:
e0:e9:94:83:fa:75:e5:3f:66:f8:06:ba:5f:6a:a6:6b:13:dc:
55:6a:0d:22:67:18:06:65:22:c4:38:22:92:c9:d0:52:8f:02:
c8:a7:33:e2:a0:40:4c:0c:53:a8:eb:c3:2d:b7:b7:7a:44:55:
7d:af:09:34:43:ff:e0:97:03:e2:e4:b1:eb:51:d0:67:f6:6e:
36:8d:45:25:59:17:eb:4d:00:37:63:9c:bf:1d:cd:45:7f:ef:
cb:fe:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:40:53 2025 by rpki-client