Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
File: hyDPLDSRRvabop66wMiCKIEcovE.mft (raw, json)
Hash identifier: e//jpJdoem8bJeyKVihw5hIH8pW16ZSbrsfdP9+O2ks=
Subject key identifier: 16:38:8F:EE:34:EE:F4:32:7B:73:F0:79:50:A6:BC:B7:25:4C:9C:A3
Authority key identifier: 87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
Certificate issuer: /CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Certificate serial: 019A71B83BE7B1815102CA617E1CC6C0A67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
Manifest number: 0AEB
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: hyDPLDSRRvabop66wMiCKIEcovE.crl (hash: s6g5fUcXfCqi9XwHR5KJVy6swfBJtjIUllhDx9HDk+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3b:e7:b1:81:51:02:ca:61:7e:1c:c6:c0:a6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=16388fee34eef4327b73f07950a6bcb7254c9ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:6a:82:cd:94:8a:29:84:85:8e:27:78:a1:
af:69:b2:b9:9f:7e:06:ff:bb:e6:d4:27:a5:c7:df:
e7:79:0c:88:05:35:9d:e6:ff:d0:0e:5e:55:93:87:
6e:91:50:48:13:78:8b:80:04:48:02:15:f3:0d:e9:
f0:4f:b1:da:5e:a2:89:44:a8:55:d1:c3:86:01:13:
18:c7:68:1e:d6:e9:2d:97:76:18:9c:b2:cf:2e:5b:
3e:8a:b0:d6:58:88:78:b8:c9:bf:3b:de:aa:c7:38:
b5:13:41:bf:eb:0c:ef:15:f0:0f:39:e2:b1:51:21:
63:61:08:0a:a8:c5:55:89:a4:5e:16:07:f0:3b:76:
d5:a3:a9:2a:0e:c5:86:09:d5:0a:4f:ef:e2:2b:7a:
33:57:44:cb:b7:65:c6:65:04:bd:98:cf:7a:28:e8:
c3:c3:40:c2:93:d4:67:65:9d:e8:ff:c5:62:66:e6:
b4:4c:e6:7b:c7:15:c7:4e:cf:fd:32:de:fd:8b:5a:
5a:c0:48:e6:93:ad:0e:ef:30:05:ac:cf:27:f7:f5:
dc:d7:33:fd:51:2a:89:85:81:57:ca:0e:ce:91:48:
9b:53:e0:b4:38:fe:a7:71:13:ab:48:a7:0b:3d:81:
d5:8f:74:96:ef:cd:d6:59:03:1f:7b:83:bd:2b:6f:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:38:8F:EE:34:EE:F4:32:7B:73:F0:79:50:A6:BC:B7:25:4C:9C:A3
X509v3 Authority Key Identifier:
keyid:87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:54:2b:9f:74:ac:65:13:51:15:05:15:6b:65:c2:74:d4:
81:5c:ae:89:87:59:e2:d5:8e:15:3f:50:e9:8e:73:11:bd:09:
d1:28:22:be:b0:72:a8:07:80:15:d1:69:63:38:92:db:8b:5e:
15:7b:44:78:7b:99:21:55:4b:e4:2f:8b:95:c6:73:70:39:4e:
a7:d6:c2:3f:d7:60:12:9b:b1:c6:c5:23:6d:27:ba:61:62:08:
37:4e:4e:50:ed:6a:70:a6:d1:64:cb:b6:ca:38:89:bf:7f:5d:
06:03:27:58:a5:76:dd:18:7c:59:8d:a8:68:30:4f:94:c9:b4:
3d:f6:e8:a4:98:ba:f0:24:b8:4c:fe:a3:ff:0d:a2:05:36:84:
5d:05:95:bd:5f:cc:f6:8b:97:27:98:1e:a5:70:0d:22:e6:c3:
71:95:33:cf:7d:80:a2:ae:3b:4f:b9:2d:b8:a4:09:c6:1f:a4:
8a:b7:f8:04:55:a0:8d:c5:08:e6:52:13:3a:15:b7:c2:51:6b:
fc:b5:a1:47:c3:c3:05:33:72:92:7a:0a:ca:ee:97:f0:ba:05:
1e:0d:88:1d:b4:5f:cc:ac:09:d0:f5:dd:80:fc:af:72:92:64:
2a:3d:12:8b:5d:d5:c2:92:5f:d8:63:39:dc:e9:50:50:d0:2b:
d4:d8:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:19 2025 by rpki-client