Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File: HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier: 754+H2n48NPAtnqiO1X6RzbyP/oGcQ29yWDzWfFAgjg=
Subject key identifier: 72:01:97:A1:1A:FA:1F:BD:6A:01:E0:54:8D:9D:23:99:6D:74:E6:EE
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer: /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial: 0199221F4164D88AF0CF03AC8F32B96B95C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:01:37 +0000
Manifest this update: Sun 07 Sep 2025 03:01:37 +0000
Manifest next update: Mon 08 Sep 2025 03:01:37 +0000
Files and hashes: 1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: 7ucHhHY4JEVn/gNrL76jHWueAgTk/wgxM6eShjO8jtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:41:64:d8:8a:f0:cf:03:ac:8f:32:b9:6b:95:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Validity
Not Before: Sep 7 03:01:37 2025 GMT
Not After : Sep 8 03:01:37 2025 GMT
Subject: CN=720197a11afa1fbd6a01e0548d9d23996d74e6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:cb:4e:4c:4f:ff:58:01:bb:cb:a0:8b:5e:
40:a4:18:bc:29:de:2e:ea:9b:36:6f:23:27:49:33:
92:30:b9:b2:dc:b2:e8:20:e2:fe:60:fb:7b:6d:8a:
fd:76:f6:d3:32:93:ae:62:34:e4:fa:bf:f4:ad:a4:
59:97:3f:bc:b9:87:23:51:2d:00:45:04:c0:76:c0:
b9:f1:e4:c1:01:89:66:22:19:1c:0a:58:fc:42:b6:
e2:65:db:88:dc:ff:ba:c0:4d:db:82:9a:7e:c3:be:
b7:15:b2:68:ee:ca:63:78:08:cb:d2:ae:9a:6c:f3:
20:f9:78:3c:68:07:24:a7:d6:5e:ef:f2:b0:15:52:
61:12:28:08:a5:62:19:95:27:67:1c:02:c3:3d:ec:
ea:46:bf:89:2f:e2:bd:e7:fa:20:07:a3:0c:7e:f8:
cf:62:32:23:fd:c4:6f:1f:f6:72:c6:18:a0:53:7e:
b8:29:e8:02:76:78:c1:a7:4e:12:ca:c7:b4:33:cf:
5b:b2:3e:3c:1f:cc:d7:32:0d:e3:e3:01:60:db:dd:
75:63:85:2b:39:d1:66:28:c2:ab:1d:ff:18:a5:30:
a0:3a:95:ff:4b:13:f9:01:47:16:ef:b5:b8:38:00:
57:59:a2:dc:30:0d:30:d0:2c:f0:83:99:08:8e:fa:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:97:A1:1A:FA:1F:BD:6A:01:E0:54:8D:9D:23:99:6D:74:E6:EE
X509v3 Authority Key Identifier:
keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a0:46:66:0d:9c:8d:31:b9:05:f1:00:5d:ea:7c:08:ca:16:
40:c8:7f:a7:9a:b6:4f:ce:52:ab:2c:03:75:44:dc:90:7c:38:
ac:84:18:59:cd:77:94:e1:ba:11:40:71:d4:72:39:6e:b7:cf:
27:99:36:ac:6f:03:f8:28:a5:50:44:21:28:0f:28:f0:7c:61:
85:9c:8f:e5:eb:30:ce:74:48:7b:87:d2:3c:4a:48:c3:f6:7b:
9a:3f:4e:f1:0c:ac:04:2e:3f:38:c1:fa:64:94:86:95:02:b7:
be:77:d4:58:4e:11:15:18:df:21:1a:48:62:3a:41:22:b5:c6:
08:89:f7:6e:64:82:fc:a4:74:71:b6:65:fc:82:31:c5:44:a4:
4e:42:0f:ad:7c:ad:1c:a6:a2:b8:fa:40:cf:1e:03:60:a3:bc:
09:0e:f2:af:64:05:a7:2e:f2:93:b6:82:9f:30:79:85:61:68:
45:d2:c7:54:86:da:39:e4:fa:c2:84:29:7b:0f:7c:06:ae:98:
e5:99:91:41:f4:e0:e1:c7:2c:f8:c4:0e:c7:39:87:98:64:b0:
35:a2:04:71:ca:f7:42:45:85:30:29:bc:0b:a4:d7:6f:01:3e:
5c:7e:4b:13:1d:3d:65:bd:7d:74:c0:5d:f5:eb:be:2b:a4:53:
d3:63:e9:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH0Fk2IrwzwOsjzK5a5XCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYjJlMmU3MzU5YTgwMTYzMmE2NmQxMGI5NjFlNGYyZWM2
ZGZjNGYwHhcNMjUwOTA3MDMwMTM3WhcNMjUwOTA4MDMwMTM3WjAzMTEwLwYDVQQD
Eyg3MjAxOTdhMTFhZmExZmJkNmEwMWUwNTQ4ZDlkMjM5OTZkNzRlNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0/LTkxP/1gBu8ugi15ApBi8Kd4u
6ps2byMnSTOSMLmy3LLoIOL+YPt7bYr9dvbTMpOuYjTk+r/0raRZlz+8uYcjUS0A
RQTAdsC58eTBAYlmIhkcClj8QrbiZduI3P+6wE3bgpp+w763FbJo7spjeAjL0q6a
bPMg+Xg8aAckp9Ze7/KwFVJhEigIpWIZlSdnHALDPezqRr+JL+K95/ogB6MMfvjP
YjIj/cRvH/ZyxhigU364KegCdnjBp04Syse0M89bsj48H8zXMg3j4wFg2911Y4Ur
OdFmKMKrHf8YpTCgOpX/SxP5AUcW77W4OABXWaLcMA0w0Czwg5kIjvpJPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIBl6Ea+h+9agHgVI2dI5ltdObuMB8GA1UdIwQY
MBaAFB2y4uc1moAWMqZtELlh5PLsbfxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82ZmQ5YmUtOTY5NC00NjM5LTkwYzUt
OTBlYmQ3NmU5MWY5LzEvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82ZmQ5YmUtOTY5NC00NjM5LTkwYzUtOTBlYmQ3NmU5MWY5
LzEvSGJMaTV6V2FnQll5cG0wUXVXSGs4dXh0X0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaBGZg2c
jTG5BfEAXep8CMoWQMh/p5q2T85SqywDdUTckHw4rIQYWc13lOG6EUBx1HI5brfP
J5k2rG8D+CilUEQhKA8o8HxhhZyP5eswznRIe4fSPEpIw/Z7mj9O8QysBC4/OMH6
ZJSGlQK3vnfUWE4RFRjfIRpIYjpBIrXGCIn3bmSC/KR0cbZl/IIxxUSkTkIPrXyt
HKaiuPpAzx4DYKO8CQ7yr2QFpy7yk7aCnzB5hWFoRdLHVIbaOeT6woQpew98Bq6Y
5ZmRQfTg4ccs+MQOxzmHmGSwNaIEccr3QkWFMCm8C6TXbwE+XH5LEx09Zb19dMBd
9eu+K6RT02PpdA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:34 2025 by rpki-client