Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json)
Hash identifier: ee2xd0KwdyrQGW8nkbFBGuTsM1EjGV6B6t3vaL8/n8Y=
Subject key identifier: 06:C5:19:BE:3C:C9:8E:14:35:AB:C1:4E:01:BB:FB:82:34:51:9C:1A
Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Certificate serial: 019A71B90168C4D3222BCDED2C1AC812ADA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
Manifest number: 0445
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: mciRklEittx5GXBCQewvMqsQDS4cFn8amRTL5CVh+wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:01:68:c4:d3:22:2b:cd:ed:2c:1a:c8:12:ad:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=06c519be3cc98e1435abc14e01bbfb8234519c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:13:c6:ce:7a:cc:66:7a:14:28:70:ed:ef:
6c:52:22:1e:f3:c7:56:f9:2f:56:c2:36:c6:ee:84:
f8:4f:1d:d9:7e:07:b8:bf:ff:d6:c1:79:f1:32:8e:
41:0b:e6:ed:36:ab:9d:5d:af:74:2f:3f:5d:f2:b3:
87:bf:16:d4:f1:6f:7a:2d:f2:92:4c:08:19:6c:65:
dc:76:ca:da:85:32:9e:d0:4f:c2:e7:7b:d4:fa:ad:
48:00:db:51:80:b4:47:f9:8e:98:2b:54:18:e3:bf:
cc:75:3c:af:17:38:94:38:a4:57:da:23:51:d2:dd:
c8:31:72:56:85:0c:62:79:7d:b9:14:1c:26:d9:72:
48:3c:35:a4:40:5e:ed:07:d0:5d:7c:4d:38:b5:62:
5e:a8:75:1b:51:8c:89:60:51:03:a0:d4:8d:70:e6:
53:a3:c0:c8:45:98:1c:27:b9:1f:db:68:5b:2e:a2:
98:73:9d:fc:86:69:c7:30:fc:7c:f6:c0:d0:ea:29:
8b:4d:cf:60:db:cb:33:bf:a3:5d:3a:0d:40:58:d5:
f3:f9:f9:7e:75:82:88:10:50:e1:96:6c:ba:06:f7:
18:9b:a6:31:3c:23:2c:22:20:e3:d7:b1:27:b9:47:
ff:5c:08:f0:6f:77:3d:c5:0b:cd:70:65:fe:47:52:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:19:BE:3C:C9:8E:14:35:AB:C1:4E:01:BB:FB:82:34:51:9C:1A
X509v3 Authority Key Identifier:
keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:25:7f:2a:1b:06:a9:b2:a6:c8:21:17:d0:c9:1b:9e:7e:7d:
1f:43:7e:b9:f9:7f:91:1b:e2:8e:34:97:c2:01:92:74:6a:36:
ef:e9:bd:ea:df:7d:88:01:4d:ac:20:bb:37:c7:c1:3c:b6:72:
a1:10:d4:19:ee:36:be:a7:6b:f3:49:fa:23:c4:3c:20:10:17:
ff:06:9c:bb:46:47:d3:f1:4b:85:9b:89:be:f4:1a:09:0a:2d:
60:cd:c4:0b:6e:4f:0f:23:e5:3c:a5:b9:66:fd:49:23:cf:b4:
08:e3:a8:38:a0:e9:00:1c:2d:3b:c1:e5:12:56:be:90:23:bc:
5f:24:d3:ec:1c:7a:07:84:e1:4e:d7:9a:f2:6a:57:69:74:32:
01:c2:37:0c:44:d9:0d:b2:8d:e1:7c:80:f1:25:21:33:57:ff:
ec:21:23:86:6c:f4:65:0f:7a:40:5c:70:b0:55:8c:6f:d3:aa:
1d:b7:b4:7d:57:13:3d:cf:03:c4:9a:53:fd:c6:ee:3a:b9:b7:
ea:b3:29:fa:29:de:a0:a9:5e:ab:56:ed:55:bc:13:97:8d:6a:
3f:4e:05:c0:31:6d:7e:c2:ff:be:98:b4:87:c0:6d:ee:4f:81:
ee:ee:3d:5c:df:0c:7d:05:0a:ff:04:96:37:a5:22:ba:a8:4c:
34:b4:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client