Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json)
Hash identifier: Kk4erPg/b6NNBoTCbVWumwNyJD28aq21Nqu8C65Ru9s=
Subject key identifier: 3C:65:E2:87:96:57:07:A7:C8:53:7C:92:76:13:B1:00:5C:66:A3:02
Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Certificate serial: 019923A074670DAA6FDCE84EF380D824234F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
Manifest number: 0398
Signing time: Sun 07 Sep 2025 10:02:22 +0000
Manifest this update: Sun 07 Sep 2025 10:02:22 +0000
Manifest next update: Mon 08 Sep 2025 10:02:22 +0000
Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: MiEQfRha87DCWvsTVf9IAhVUJEEGd3V8t3r5CKVms6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:74:67:0d:aa:6f:dc:e8:4e:f3:80:d8:24:23:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Validity
Not Before: Sep 7 10:02:22 2025 GMT
Not After : Sep 8 10:02:22 2025 GMT
Subject: CN=3c65e287965707a7c8537c927613b1005c66a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:16:6c:44:49:71:2e:fc:62:94:c8:35:48:
ed:58:29:28:77:6b:27:99:ba:55:62:30:d6:f1:97:
eb:11:b5:06:5e:7f:d7:f3:5d:6f:7f:73:d7:a1:87:
23:6f:e3:2e:cc:f9:6a:2d:b2:a9:ad:56:f4:e7:e8:
8d:49:e4:77:9a:76:1f:ad:ec:6b:a5:be:8a:5d:4e:
90:4a:03:85:c1:62:e5:db:c2:76:5f:78:13:ac:29:
78:4a:4a:49:9d:8a:57:23:6e:5b:97:10:c0:f6:52:
b7:ca:d3:af:75:c8:d5:31:3e:dd:53:87:32:fe:fc:
34:e8:e7:5d:61:2b:d2:cf:4b:77:50:ad:29:02:e5:
12:f8:55:1b:07:a2:56:93:16:71:f0:0e:d1:85:10:
6b:cd:d9:48:ee:9d:a3:e1:8e:3b:46:96:e7:24:02:
bc:a1:77:4b:88:1b:4e:8e:ca:be:98:fb:48:81:93:
fb:8b:94:6e:48:b5:32:3a:e6:84:97:c2:91:ec:7f:
51:f4:fd:91:c6:51:74:6b:39:3b:44:0a:ff:5d:d5:
55:c6:cf:f7:7e:ee:34:93:4c:42:37:74:fa:e9:dc:
11:0e:53:38:b9:e8:cc:90:eb:48:69:de:85:99:09:
66:65:f5:fc:64:97:d3:ac:7a:7d:e2:5a:79:ad:8b:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:E2:87:96:57:07:A7:C8:53:7C:92:76:13:B1:00:5C:66:A3:02
X509v3 Authority Key Identifier:
keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6a:e7:e8:12:b1:26:d0:fc:fd:d1:e5:73:64:7c:51:af:d6:
49:b1:af:6a:da:1d:1a:8f:32:19:99:d2:8f:c0:a6:3a:bb:39:
07:6f:41:5e:88:2a:6b:fa:db:01:56:ed:1e:2e:eb:1c:30:a9:
db:7d:18:26:ec:f4:c4:fa:79:53:aa:21:74:b1:91:12:05:42:
ac:c5:69:56:cf:c6:42:e3:f8:9b:cc:15:da:72:93:4b:38:68:
88:08:a7:67:a9:d4:1b:1a:50:38:2f:57:43:5f:c9:41:2c:fe:
9c:bd:a4:fc:e4:27:11:4b:37:a9:97:75:59:c7:ee:5c:24:8b:
b7:f0:d3:13:da:0e:ca:d4:a2:a8:29:44:82:4b:ac:e1:f1:af:
59:7d:1f:39:88:c2:bd:cf:c0:e9:bf:15:30:b4:8e:48:ff:be:
21:ab:68:ac:82:4c:86:6d:4c:34:d3:86:4d:ef:7d:13:ec:36:
e9:9c:80:b9:fc:76:4d:51:84:88:c0:40:40:8d:74:bd:f7:9b:
82:d8:46:d3:c0:fc:51:8b:cb:fc:cc:70:8b:ce:11:20:44:2c:
7d:31:77:10:5f:4f:16:e0:2b:ef:48:e8:a2:68:3e:83:5a:4e:
80:dd:7b:9f:4b:95:6c:01:44:39:55:2d:4b:04:6c:c2:0b:db:
fa:e3:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:48 2025 by rpki-client