Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: tbuL+UW+i0YKKiXiZurjPAJru9XliRAXHkfp6KSKcDU=
Subject key identifier: 47:B8:D1:51:50:E2:14:8B:6D:EF:2C:AC:E2:6F:46:42:89:77:D1:70
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 0199375D69A01B36FB0465FD82DB00F85468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 04DB
Signing time: Thu 11 Sep 2025 06:01:32 +0000
Manifest this update: Thu 11 Sep 2025 06:01:32 +0000
Manifest next update: Fri 12 Sep 2025 06:01:32 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: tUKpCe+AGwiWTpoFTigYliTgWp4WGTpMBX3c91DCsEc=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:69:a0:1b:36:fb:04:65:fd:82:db:00:f8:54:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Sep 11 06:01:32 2025 GMT
Not After : Sep 12 06:01:32 2025 GMT
Subject: CN=47b8d15150e2148b6def2cace26f46428977d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:48:77:6c:05:1b:f0:24:0f:60:23:81:af:
6c:26:d2:4e:bf:57:f8:20:89:9c:36:1f:46:5f:80:
ed:b1:1d:3e:b1:46:2b:1a:e9:e7:1e:52:fb:f8:dd:
c7:f2:c0:ce:f2:fe:ac:e2:20:f6:c2:33:f2:c2:c3:
4a:04:ca:81:ac:5d:c6:c4:58:6d:10:a6:97:63:c7:
5e:eb:3d:56:9e:51:39:5a:cf:a5:96:3e:d6:55:e4:
19:72:eb:11:1f:d3:e4:97:7a:bd:f4:5b:2e:aa:58:
68:99:46:0a:56:65:9b:93:b5:d6:5b:68:4a:37:9b:
1c:63:4a:87:e1:78:7e:0a:54:16:d5:46:77:8c:f6:
90:50:72:d8:8f:f0:87:0c:b3:12:f9:03:d2:9f:1a:
64:65:bc:34:69:a7:d8:8e:12:5f:dd:81:06:4e:3c:
7b:c3:3e:49:5b:c8:5e:64:f1:dc:fc:c8:8b:14:17:
cf:e7:1b:aa:75:1a:ff:4a:83:36:19:f0:82:7c:ef:
5f:f5:6b:0c:e9:ba:7c:ef:97:40:a7:fa:58:4d:7e:
cb:81:41:66:5f:cc:ed:17:9b:39:dc:28:1c:fc:1b:
3d:81:f4:87:d7:ff:31:11:1a:f3:10:2b:4b:d4:88:
dc:5e:c0:d5:31:55:af:48:f5:02:a7:62:c7:29:9d:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:D1:51:50:E2:14:8B:6D:EF:2C:AC:E2:6F:46:42:89:77:D1:70
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f0:1e:7a:15:2f:47:02:39:fe:42:d3:78:39:92:cd:a8:23:
e3:e8:71:4d:27:e9:e6:15:06:85:be:62:7a:aa:9f:aa:f6:6e:
c1:6c:c7:af:7c:3c:51:9b:33:5b:07:5a:92:b8:ba:ba:01:73:
ce:c8:5c:c6:eb:6a:08:4e:c3:66:fe:20:18:e1:56:0a:2a:f6:
30:bf:f8:91:ac:01:a1:2a:75:3a:6a:3f:1c:e7:b9:f8:d5:1a:
41:fa:8a:68:5b:c5:e1:f9:66:b0:31:18:36:e6:88:d2:47:76:
ce:a8:bf:0f:f7:0c:5e:5f:41:94:8b:31:4e:16:89:9a:6a:6e:
6d:06:98:a2:cf:5d:f7:a4:14:3a:d3:82:59:97:23:a8:04:33:
be:86:b2:b4:e7:6c:10:e6:79:bf:95:93:fd:cd:c0:65:5e:77:
6c:51:ba:ff:51:98:83:77:7f:51:64:31:02:29:6b:17:f7:05:
2e:ce:70:5f:72:04:11:bb:30:c6:01:01:48:47:a5:a2:17:0f:
08:37:13:63:ad:fd:e3:b3:38:11:06:4d:32:d0:65:e3:f4:05:
e9:cc:98:be:e6:38:d8:e8:2c:ce:0d:09:ef:47:46:6c:34:32:
bc:41:e2:78:91:f5:69:b7:8e:0d:5a:d6:d2:86:12:a1:22:a1:
38:5e:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:09:09 2025 by rpki-client