Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: I0hWSByM7Enk+2rsHxjCcDscrmHWqBPkdxfWJCkCX+c=
Subject key identifier: 75:2D:44:26:A9:DB:88:C0:2C:2D:C6:AF:F0:EC:D2:28:82:D7:87:9C
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019A64A1469802A45C6C7BA94FB3BAB13A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 018F
Signing time: Sat 08 Nov 2025 18:01:22 +0000
Manifest this update: Sat 08 Nov 2025 18:01:22 +0000
Manifest next update: Sun 09 Nov 2025 18:01:22 +0000
Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: qU9EykhWxrZV7fSYE3um1vjTOV6w4aVoBBYAE8Sqwvw=)
2: XsdhFSN7DeTh4eI00BDD4_zttPw.roa (hash: tFKcPxfIMyOctJnt0bo6v620CjrP47cFED0TLnvjy0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:a1:46:98:02:a4:5c:6c:7b:a9:4f:b3:ba:b1:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Nov 8 18:01:22 2025 GMT
Not After : Nov 9 18:01:22 2025 GMT
Subject: CN=752d4426a9db88c02c2dc6aff0ecd22882d7879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:4b:01:2f:ee:23:1d:02:eb:80:26:a8:2f:
b2:5f:a3:23:f0:ef:08:78:55:10:42:fe:56:19:e1:
99:60:36:f0:42:2c:e8:8f:ba:5e:77:0b:d8:f3:3f:
b8:d6:11:91:be:c5:a1:2a:b2:cb:49:2b:c6:f1:fd:
33:ab:ec:6e:51:22:e8:66:63:b3:ae:52:6c:17:9e:
16:89:d2:f8:c7:23:39:1d:6a:ef:20:8b:b4:8c:a4:
89:aa:e8:a0:16:cd:c8:09:04:fd:81:c5:c6:c7:13:
d7:8c:57:d3:3e:c2:5b:7e:6c:4f:6d:09:50:7b:c9:
9e:52:5f:8c:f8:b7:54:52:3b:be:e8:21:54:44:fb:
3b:45:e4:27:cf:36:6a:4e:ca:25:c9:02:1a:39:c7:
31:05:e0:54:f1:46:79:61:0d:49:2b:d6:86:54:d5:
ce:50:43:c6:d6:10:03:0f:0a:a2:f5:ed:43:2a:37:
d1:44:fc:91:64:8e:63:0f:84:08:37:09:60:3f:e3:
9b:61:68:21:14:7f:2c:f4:e8:cc:b5:aa:0e:65:47:
d7:74:6a:c9:b7:95:93:9e:6a:73:61:a7:df:80:b3:
9e:31:92:f6:d3:89:70:0a:46:c9:f6:07:c6:bd:f0:
23:47:8e:72:cb:a7:c9:8d:d0:67:84:97:45:eb:47:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:44:26:A9:DB:88:C0:2C:2D:C6:AF:F0:EC:D2:28:82:D7:87:9C
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:02:c8:21:6f:db:3e:3c:08:57:24:7c:34:08:67:a9:06:
94:b4:4b:6d:2b:e8:13:7f:10:60:59:eb:33:10:5a:12:17:ae:
a2:31:12:3c:d4:d7:5d:59:dc:62:57:7d:64:61:5b:cd:a2:49:
b9:7d:1d:0a:07:9d:df:ac:d2:6e:76:87:08:37:a5:58:a5:4d:
0b:fa:d2:37:93:7a:f6:82:85:16:aa:c7:da:57:72:cc:78:0e:
49:4d:5c:ee:1e:bf:f5:23:22:da:b3:12:0e:ba:a5:87:56:cd:
8f:89:be:7d:a3:10:d4:f3:d7:dc:43:ad:9c:67:ed:16:b0:40:
1c:b4:b0:2e:bf:42:96:02:e1:ba:02:92:0a:05:cd:d1:73:fe:
5a:f0:ce:cb:85:de:5a:9b:90:25:1a:75:0b:39:ed:6e:6e:fd:
01:cf:91:5b:ec:1e:4a:e8:a9:36:f1:47:da:4c:95:b5:47:b8:
f6:3a:6b:44:65:2f:89:b8:f8:69:82:ed:9c:b8:4b:57:f7:57:
84:11:a4:6f:71:00:1a:43:1a:f0:3e:56:8a:81:15:42:b5:95:
4b:d4:87:57:4b:72:59:53:05:cd:da:2b:87:09:9c:1b:b7:91:
f0:42:69:84:b5:c0:6c:fd:85:9a:8f:22:d6:49:33:68:a1:6d:
60:66:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 23:58:13 2025 by rpki-client