Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: LSQa6jdCGQjGOQHB15KZNLZYteVyo0E7udq2Bg/4gSc=
Subject key identifier: 81:28:BC:3E:0E:84:DA:E9:E9:23:AA:98:68:6C:B1:D3:E4:F8:DF:9D
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 019921B173494919E6DEC6C406FED6DA6D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:41 +0000
Manifest this update: Sun 07 Sep 2025 01:01:41 +0000
Manifest next update: Mon 08 Sep 2025 01:01:41 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: /NOkqDT/zEtPGjza8HCds/s4jCiqtJwlImoYVSZ7Kf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:73:49:49:19:e6:de:c6:c4:06:fe:d6:da:6d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Sep 7 01:01:41 2025 GMT
Not After : Sep 8 01:01:41 2025 GMT
Subject: CN=8128bc3e0e84dae9e923aa98686cb1d3e4f8df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:f6:4b:c9:68:16:5b:38:a7:33:62:67:77:
97:1c:71:06:69:01:79:c8:ed:bf:f7:05:ae:e3:c9:
49:e2:00:ad:14:6c:6f:d0:07:d9:8b:95:6a:d6:c6:
a9:ee:43:78:f9:dc:27:23:7c:08:ae:c3:0a:1d:2e:
2f:91:71:c8:20:5b:a8:36:86:f5:8a:0c:d1:1c:0a:
76:d6:52:f9:7e:4d:cd:6c:b4:f5:99:0d:2d:c0:a9:
7b:cf:20:20:53:ec:c8:76:b9:16:ab:7d:64:8d:f7:
c2:9e:ac:89:42:ef:9a:89:df:a0:67:32:0d:e6:7a:
7a:74:5f:18:c1:3f:fd:7b:81:a5:5d:ee:a2:b0:96:
88:d9:e8:da:64:bf:cf:3f:be:11:f4:9f:bc:a9:2f:
81:a2:05:06:50:d7:67:7a:69:d6:43:a3:74:e1:ee:
08:b9:f0:24:34:59:78:b3:9c:46:9d:d7:38:d9:cc:
5a:63:7b:ac:30:51:62:b9:10:45:00:7a:3b:b9:b6:
23:ff:cd:51:ef:ed:1f:0f:60:e8:d8:6b:2e:2e:9e:
24:f4:8a:da:44:9c:9b:1d:f7:3d:a9:ea:52:fa:9b:
4b:d2:04:98:e4:fa:41:aa:9a:2d:fe:52:32:b7:c9:
06:f6:11:b4:87:51:4a:1a:e1:18:30:3d:39:20:0b:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:28:BC:3E:0E:84:DA:E9:E9:23:AA:98:68:6C:B1:D3:E4:F8:DF:9D
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:84:74:43:fc:e3:37:6e:b2:70:37:78:ce:53:ac:50:e5:a3:
28:62:61:1a:74:46:d6:a0:22:35:90:fc:96:bb:f0:89:75:e1:
bf:6b:2e:de:37:62:29:8f:1a:00:1d:28:0a:6d:d5:99:94:98:
99:82:b1:f8:11:28:ad:16:41:1a:fc:16:04:9a:a8:12:cf:aa:
c2:35:d4:e0:d0:f8:ec:3d:b4:6e:7c:d8:a4:bb:41:19:b5:a1:
92:c6:94:33:bf:b5:0d:71:a0:9d:92:2d:dd:ee:f0:18:51:58:
25:7e:7b:b3:9b:17:b1:28:12:37:ec:d9:79:8f:d7:58:45:92:
ce:96:05:bd:fd:53:7c:d0:ba:48:49:6d:c6:da:f6:56:0c:8d:
88:ad:2a:f8:37:20:0b:05:be:85:5a:2c:0c:73:e2:a3:2e:83:
c2:3b:84:b8:16:b2:b5:52:b4:ca:a2:fc:b8:73:d2:2c:20:91:
17:1c:2e:7f:38:01:5c:65:c6:b1:84:4e:34:f3:b7:77:ea:f6:
1a:82:b7:55:58:be:c0:b0:5c:30:60:76:b4:ea:c5:ed:7c:c0:
20:df:aa:21:fb:70:e2:e9:22:9d:b4:05:50:be:04:a5:a9:87:
35:dd:6f:54:15:2a:3c:bb:78:4d:ad:40:2c:9f:12:7b:c8:61:
4a:2f:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:45 2025 by rpki-client