Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: iRDkSKpPM9qmkjqA3B29m/VaqjRjF0cFgkmyoqvHeZA=
Subject key identifier: B4:78:73:7A:30:C2:19:51:1E:0B:1B:0A:59:D1:41:6B:D5:8B:60:95
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019922C38130A3743BFBC50635B75E08DFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: E8
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: 5zTHN1aiHgVQVwQD9/gPCMffKfA2tdqegGyjiW7rDAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:81:30:a3:74:3b:fb:c5:06:35:b7:5e:08:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=b478737a30c219511e0b1b0a59d1416bd58b6095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:b3:79:ba:9b:c6:d6:c7:de:56:bc:96:a4:
35:79:4a:e9:20:31:b1:01:ee:9a:6e:96:ee:69:f7:
2a:61:01:35:99:aa:5d:ee:7d:16:5e:a9:5d:10:61:
33:6a:91:f8:3a:aa:47:99:f4:7e:12:e3:b0:be:26:
8d:ef:e3:4a:37:69:81:c2:db:92:41:28:c0:d8:f6:
ed:7d:6b:23:49:cf:90:4d:0c:92:03:ac:dc:c5:61:
ed:f6:55:66:72:bf:f5:0e:fd:30:24:02:fd:fe:c9:
1b:4b:0e:61:62:9f:2c:16:f2:74:16:c2:e5:89:21:
68:fb:be:9f:7c:56:d6:73:39:dc:6f:87:42:cb:1a:
a5:2d:22:c3:49:d5:2a:8b:17:d6:e1:f6:38:28:e9:
51:42:2d:8b:e2:8f:82:4e:cd:70:57:29:97:3a:76:
5e:6c:54:d9:f5:58:4d:ae:bf:47:e2:9a:e6:35:85:
6b:a7:b4:14:e1:db:6d:29:62:e0:e2:7a:62:8a:45:
b8:5d:20:f2:cb:4f:b9:7b:a8:71:c5:fb:c1:8e:00:
1b:1a:1a:2e:58:94:9d:d5:aa:b6:1b:a3:eb:ca:83:
8b:70:7f:0a:a4:ac:f8:4a:32:62:51:25:75:91:fc:
4a:60:15:c8:99:5d:cc:25:d9:6c:9e:64:ce:a6:f1:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:73:7A:30:C2:19:51:1E:0B:1B:0A:59:D1:41:6B:D5:8B:60:95
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:61:72:56:43:98:20:12:57:eb:ca:5a:a1:8f:51:fd:9f:
a9:db:34:33:c8:4c:61:51:dd:3e:1c:e2:7a:77:bc:ad:7a:fe:
92:15:23:bb:11:54:71:8a:99:98:82:c9:80:c6:e3:c8:c3:5f:
4f:09:f7:ce:1b:a1:88:db:dd:a9:80:80:63:50:d6:8e:ad:a0:
a6:09:c7:8d:8a:99:b9:e9:16:af:42:fa:2a:76:65:d3:04:88:
b8:d3:b7:4f:79:75:5a:7e:51:4e:6a:e5:04:49:75:d8:8c:46:
b9:c0:99:7e:c9:3b:39:aa:16:1b:77:66:c2:87:a2:71:18:25:
76:4f:39:27:18:a1:63:b0:0c:9a:43:44:0c:58:58:21:d6:61:
94:c7:57:b2:4f:0f:a6:35:d5:a0:9a:ca:54:35:90:e9:db:bf:
7d:76:79:9e:49:50:2e:db:ce:a7:e0:e9:f5:4a:b1:cc:1b:a4:
e1:3b:32:ad:74:66:97:f0:5d:8e:15:3a:ed:fc:e3:fd:2d:e8:
73:64:27:c3:41:6d:a8:b7:b8:40:4d:cf:05:d5:21:fb:3d:e6:
bc:94:40:54:94:f8:ec:72:b7:81:27:9a:9e:fa:bb:46:01:77:
df:92:e2:4f:6f:76:8d:fe:4b:92:d7:e3:a3:d2:bd:b3:2d:cb:
cd:0f:ae:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4Ewo3Q7+8UGNbdeCN/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy
ZjAzMjAwHhcNMjUwOTA3MDYwMTAxWhcNMjUwOTA4MDYwMTAxWjAzMTEwLwYDVQQD
EyhiNDc4NzM3YTMwYzIxOTUxMWUwYjFiMGE1OWQxNDE2YmQ1OGI2MDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNuzebqbxtbH3la8lqQ1eUrpIDGx
Ae6abpbuafcqYQE1mapd7n0WXqldEGEzapH4OqpHmfR+EuOwviaN7+NKN2mBwtuS
QSjA2PbtfWsjSc+QTQySA6zcxWHt9lVmcr/1Dv0wJAL9/skbSw5hYp8sFvJ0FsLl
iSFo+76ffFbWczncb4dCyxqlLSLDSdUqixfW4fY4KOlRQi2L4o+CTs1wVymXOnZe
bFTZ9VhNrr9H4prmNYVrp7QU4dttKWLg4npiikW4XSDyy0+5e6hxxfvBjgAbGhou
WJSd1aq2G6PryoOLcH8KpKz4SjJiUSV1kfxKYBXImV3MJdlsnmTOpvFBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLR4c3owwhlRHgsbClnRQWvVi2CVMB8GA1UdIwQY
MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt
NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1
LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1ZhclZD
mCASV+vKWqGPUf2fqds0M8hMYVHdPhziene8rXr+khUjuxFUcYqZmILJgMbjyMNf
Twn3zhuhiNvdqYCAY1DWjq2gpgnHjYqZuekWr0L6KnZl0wSIuNO3T3l1Wn5RTmrl
BEl12IxGucCZfsk7OaoWG3dmwoeicRgldk85JxihY7AMmkNEDFhYIdZhlMdXsk8P
pjXVoJrKVDWQ6du/fXZ5nklQLtvOp+Dp9UqxzBuk4TsyrXRml/BdjhU67fzj/S3o
c2Qnw0FtqLe4QE3PBdUh+z3mvJRAVJT47HK3gSeanvq7RgF335LiT292jf5Lktfj
o9K9sy3LzQ+uPw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:38 2025 by rpki-client