Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier: fZH4flD++xm/pQ/3Rou3XdiPdsaGdlxX7TwSBrp337s=
Subject key identifier: 68:CB:54:C6:FC:01:54:C1:74:5C:77:E3:F9:02:DC:17:5E:6A:2D:0D
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial: 019A7112F363C22C84CC54FD9D4869D0714F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number: 0D8E
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: el/hO0f0LWU3NioQlT3rdVB48/3ZBC5PCFG5Mp9AIUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f3:63:c2:2c:84:cc:54:fd:9d:48:69:d0:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=68cb54c6fc0154c1745c77e3f902dc175e6a2d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:01:a6:69:4a:24:b7:99:1e:70:81:3a:fa:
72:8b:6c:22:79:5c:76:97:85:1b:d7:6a:4e:dd:b1:
9e:78:46:c9:9c:0f:02:8c:16:6a:80:68:eb:9a:aa:
34:d8:f7:48:fb:44:74:16:8b:68:ce:2f:75:90:06:
0f:88:f1:b9:c3:74:a9:b0:e4:d3:09:89:d2:d3:57:
42:3b:42:27:ce:2f:fc:d1:81:5d:b9:97:f5:29:3e:
03:a2:17:df:b4:fe:30:3f:9b:21:21:6e:eb:1c:41:
bc:7e:aa:b8:38:d1:a0:40:68:00:27:38:7b:97:04:
a4:72:38:2f:41:74:e8:bc:47:09:74:62:93:9f:59:
13:27:2c:2e:dc:ee:ce:8d:05:28:99:27:84:8d:44:
60:7d:01:34:38:61:8d:71:57:dd:d5:f6:ae:38:4a:
a3:a4:aa:a4:ed:56:4f:11:fa:ac:31:00:af:1c:17:
cd:66:ec:d4:14:87:a0:c7:5d:66:71:92:ee:84:10:
3c:53:c8:14:6e:12:11:15:e1:84:a4:38:8b:38:b4:
ab:a0:18:94:a2:84:40:d7:3e:06:b0:2c:82:dc:ed:
67:b2:0d:84:a8:4c:a0:89:33:75:d2:30:e5:db:6e:
4b:f1:4a:40:10:d9:03:dc:32:bf:ec:77:20:ce:15:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:54:C6:FC:01:54:C1:74:5C:77:E3:F9:02:DC:17:5E:6A:2D:0D
X509v3 Authority Key Identifier:
keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cd:c5:74:c8:ef:e8:8d:c6:26:20:6d:ff:51:45:de:07:07:
93:3c:b4:23:e3:c3:9a:f2:34:88:c4:8c:38:5c:02:d7:96:3f:
b5:87:e3:91:0e:86:9c:cd:bb:c4:a5:e1:f3:fb:7b:cf:5e:7c:
1b:02:94:e7:e6:07:d6:1c:69:fe:e5:fe:e7:7e:1e:29:cc:d7:
bc:e0:4b:4e:2f:0a:77:23:05:b6:6d:6e:8e:59:cd:57:06:41:
b4:be:b2:dc:6d:96:35:8b:9f:1a:4d:51:df:38:6b:99:e5:70:
9a:85:65:56:d1:22:4e:2b:ba:c7:82:f4:cc:7a:b5:d0:84:76:
1e:f6:4a:52:91:dd:82:60:0d:df:d9:b0:d2:7a:e1:f0:5d:fc:
a4:33:e0:68:21:5d:26:dd:86:24:f1:3a:4a:69:e7:92:99:6b:
30:19:bb:3d:ed:c3:77:7b:1a:52:90:98:17:c0:6f:06:87:b7:
61:05:ca:ae:bb:9e:46:dd:1a:e7:f1:fa:eb:c6:3f:29:a1:07:
b1:73:28:a7:c1:d4:e0:d7:09:70:ef:a2:73:3f:4c:72:36:86:
2d:ac:a5:cf:31:57:5b:be:8c:53:55:a8:f6:98:d1:f9:2f:f9:
b8:e8:41:58:2b:a3:73:b3:db:35:f8:4a:ae:5c:16:0a:9f:68:
0f:36:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:39 2025 by rpki-client