Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File: HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier: Qf72YwLvrFhVtZW4eqNZMZ429GcPn/HLBaogZAez8fQ=
Subject key identifier: BB:1D:4D:6C:CE:6B:8E:9F:A1:B4:EF:B6:33:FC:78:1B:F3:EF:53:4F
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer: /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial: 019A72257DC3D9E9CAF7B3DE0DDE3B8882B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: YfsjSNh+6hrz8MtYm23CkqI0rvwR6BkD1VHTV3+8D8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7d:c3:d9:e9:ca:f7:b3:de:0d:de:3b:88:82:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=bb1d4d6cce6b8e9fa1b4efb633fc781bf3ef534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:fd:8e:1e:fa:5e:e8:4a:68:52:be:1a:1e:
58:ca:a1:ed:8a:73:3b:f4:0f:1d:10:9e:59:1f:82:
fb:c5:b0:12:db:2d:69:12:5d:33:61:8f:07:5b:76:
c7:35:f1:e9:56:85:e8:bc:21:1b:07:d5:bf:cd:f3:
ba:9d:26:d6:ae:6e:b3:9e:94:3c:3d:a7:13:75:5e:
51:1f:64:df:10:78:39:e9:6a:ac:2a:8d:13:41:cf:
63:9a:7f:d3:98:0a:6b:c4:39:0b:dc:08:f1:a6:d6:
cc:d0:12:f3:e6:c8:7e:9f:d0:7b:ed:b7:6b:ab:6a:
c9:69:ec:88:82:75:9e:93:83:10:68:e9:6c:06:ee:
fc:cb:42:14:45:16:80:a7:ce:e5:b4:cf:3c:dd:cb:
65:7a:bf:f2:2f:83:f1:10:43:d8:e9:14:df:20:5b:
9d:78:5e:9d:96:92:ae:14:40:4d:4b:89:73:b0:8a:
ec:65:d0:5b:c1:7b:f8:4c:13:55:ab:8a:0b:a7:92:
17:36:c4:40:72:57:c6:35:5f:d1:01:ea:7b:9c:7e:
cc:17:8a:09:b5:ed:9b:b7:23:5f:87:31:86:d1:50:
9e:78:59:06:62:16:f3:2c:06:6a:a8:15:32:d8:45:
f8:f1:9f:03:88:ad:9c:cb:7a:be:3a:79:3b:41:e7:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:4D:6C:CE:6B:8E:9F:A1:B4:EF:B6:33:FC:78:1B:F3:EF:53:4F
X509v3 Authority Key Identifier:
keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:05:3e:30:7c:fe:dc:1c:3e:73:83:e1:32:54:b0:69:21:42:
e0:05:08:cf:d6:d0:ae:be:4e:c6:02:eb:d4:02:26:e0:52:5a:
ac:68:a2:36:2a:0b:df:ee:a1:95:0d:1d:b9:7f:24:8f:3b:63:
a0:9c:e0:80:e0:7c:de:bd:88:52:b0:39:cd:e0:d6:39:df:c8:
68:7c:2d:60:1f:1a:53:2a:89:67:da:22:43:bc:da:71:14:4f:
8b:47:86:53:33:0f:e9:0e:e8:d5:c5:c0:1c:97:00:0c:ae:27:
04:f0:4d:ad:79:4e:38:cb:d3:1c:bb:a5:ef:79:ad:9f:66:33:
ad:f7:e8:7d:a9:b7:9a:b1:a8:92:d0:44:66:a0:fc:1c:0b:4b:
9f:f6:43:d3:56:44:27:3e:e5:c6:8c:16:e1:11:f3:82:29:83:
c9:4c:11:35:4f:1a:70:20:35:10:31:d5:aa:5f:35:32:04:32:
9b:e5:05:38:e0:a0:10:23:6d:98:30:39:2c:a9:75:11:c9:6b:
af:22:65:ed:03:79:7b:85:00:a3:b4:95:97:55:e0:6c:3d:02:
41:5a:16:72:31:f6:49:5f:5d:c7:ad:2c:6a:53:e4:a8:52:df:
70:34:14:e8:54:cb:11:e6:c2:b4:d9:cd:8c:80:cb:22:65:3f:
ab:9a:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:38 2025 by rpki-client