Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: 9Jm7LHArYS7VQj4RZYJIJJhL/YfuEVEJS7t0mQOmx4k=
Subject key identifier: 3B:DE:2A:34:08:A1:28:B2:29:70:0F:DF:36:B2:DA:DC:A4:07:44:53
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 019A71B8738F28577051B3C8AA6494F4D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0DB2
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: 52Y5VymIJpGE0rFtty9zxwwGeJHA+IHVlh2MOBeVdxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:73:8f:28:57:70:51:b3:c8:aa:64:94:f4:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=3bde2a3408a128b229700fdf36b2dadca4074453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:39:72:ce:01:26:0a:96:28:01:b1:5b:d5:
90:6a:32:d3:99:0b:7c:2e:d8:a1:02:01:1c:8e:de:
78:53:97:61:b3:3d:b1:20:e7:a1:9e:4f:bd:a1:b2:
f9:b6:bc:33:fd:e9:31:a2:80:71:93:2b:4d:c9:4d:
23:a6:b7:2b:e3:67:0d:de:a0:5d:e4:ae:39:dd:59:
2a:6f:05:94:cb:a8:c9:85:f4:6a:53:d3:18:29:10:
08:dc:b6:31:b3:6f:57:04:67:13:8e:76:3f:98:e7:
0e:4c:59:ad:a6:ed:cc:c9:44:88:26:17:2f:17:5e:
f3:88:b6:8a:a0:4c:15:0f:19:fe:14:ae:77:28:4b:
74:a5:2f:85:ce:d8:38:68:c3:bb:8a:80:3d:82:11:
cb:42:b7:55:d5:ba:ca:a1:a9:59:ea:b2:fa:7d:f8:
7c:05:f1:fa:81:8d:ea:63:eb:f5:7c:37:ff:38:a5:
b4:5f:2d:26:09:7c:ab:7d:64:e6:09:e8:2d:b6:ea:
33:e2:de:a4:08:c9:0c:df:f7:61:78:db:7a:7a:e1:
61:5c:93:ed:e8:c7:b7:40:e6:6f:25:80:3a:c6:c9:
f4:f7:8c:3f:d8:18:91:a0:03:9b:c6:f8:86:e0:86:
55:4a:aa:e4:cd:61:34:a0:e8:3a:4b:18:ab:d3:83:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:2A:34:08:A1:28:B2:29:70:0F:DF:36:B2:DA:DC:A4:07:44:53
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b0:f0:43:ee:3a:89:42:06:69:fe:ec:e3:6f:49:07:00:87:
91:1d:58:18:80:76:c1:d5:9f:a0:08:82:4b:a0:6d:2f:b2:aa:
b3:6b:12:1f:9b:fd:a0:cc:5d:d2:5d:4d:b1:5e:79:3d:11:fc:
a7:86:fd:b3:3f:f2:2e:e4:10:e6:f8:c6:8d:16:fa:cf:75:11:
4c:47:40:6d:aa:3e:29:da:22:fb:bd:82:6c:c3:84:d6:62:07:
1c:5f:79:e8:dc:2b:17:0b:a6:2f:72:a9:11:18:53:00:fd:c4:
da:76:41:1b:74:b6:77:47:23:92:cc:12:cb:f4:b8:1c:40:4d:
99:23:a8:82:00:a3:4b:14:18:0b:4b:29:bf:f8:67:93:d9:ec:
8a:df:94:3e:ae:42:0b:a2:06:76:18:53:cd:43:90:0d:be:ba:
8e:95:05:53:70:3b:89:12:72:2b:0a:5e:32:21:a5:38:3d:50:
7e:2e:01:7d:4d:45:d9:24:4e:af:1a:4e:57:7c:81:49:c9:fe:
7a:92:53:07:95:d6:0b:fb:31:9c:8c:d2:8f:4d:9e:67:13:d5:
09:1d:c0:ac:31:93:41:a3:f1:2c:47:6c:05:e1:78:0a:68:f4:
62:8a:68:33:8b:32:b1:30:e5:65:07:c9:58:d1:71:d9:2b:a5:
1e:98:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:24 2025 by rpki-client