Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier: OwXwc3DanH6RuDliEVwIBGq50ps6/I/wWMVURLX7aqE=
Subject key identifier: D8:AC:BE:7E:BE:C4:6A:55:EF:BF:D5:74:26:02:E8:6C:DA:EC:D5:FE
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial: 019A72263D1E680D8361D3768D00FBE09492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number: 0C06
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: G+hAQ1szEfY4CyBdJXZcRdRvCuBxYlc5oNNMnr9mHIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3d:1e:68:0d:83:61:d3:76:8d:00:fb:e0:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=d8acbe7ebec46a55efbfd5742602e86cdaecd5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:7e:b9:a7:91:86:2c:27:b6:01:20:63:fd:
8d:f3:c9:b0:2b:2e:49:cf:ed:3c:00:7b:e2:ba:7e:
96:7d:9a:7c:3d:f8:9d:18:57:b5:73:07:8d:db:a7:
19:13:f2:e3:b2:d4:d0:73:6a:51:83:f1:af:07:70:
93:12:27:41:63:29:e5:cb:cb:03:d5:6e:37:34:37:
3a:27:12:b5:e7:9b:84:cb:28:cc:2a:dd:53:cb:d2:
4e:52:22:ee:7c:6c:4a:99:21:bc:e2:6c:3d:0b:73:
44:15:c1:ae:b2:fb:f9:58:de:9e:09:98:3c:87:63:
33:94:d1:bf:4d:f9:9a:0b:bf:09:40:05:3d:e5:0b:
b9:55:fd:a6:62:70:67:68:bf:11:82:1e:f5:62:36:
9c:84:e4:91:32:50:cb:ce:a8:fe:0a:ce:33:e7:55:
45:57:48:ee:d3:3a:1d:b9:e5:fc:2e:4d:b1:37:80:
c9:1c:5b:d3:9b:ed:f7:2a:e7:e1:88:83:f9:0e:3f:
c4:8d:26:06:aa:03:0f:21:41:1c:db:a1:11:d8:34:
a9:6e:dc:d2:9b:f4:07:f0:5d:9e:43:68:bd:f0:28:
3e:36:3e:8e:21:03:98:ea:02:08:7f:07:36:2f:12:
a0:1f:9d:4e:7d:cf:71:c1:6f:df:14:17:04:3b:0d:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:BE:7E:BE:C4:6A:55:EF:BF:D5:74:26:02:E8:6C:DA:EC:D5:FE
X509v3 Authority Key Identifier:
keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8f:61:c9:3d:95:67:5b:c7:e5:f2:35:aa:0d:df:b8:d3:87:
08:7b:aa:14:df:a4:29:67:d4:33:a5:b7:8f:7c:bd:35:98:db:
ef:f6:6d:61:eb:ab:ad:e2:fc:df:cd:aa:6c:e4:64:92:d8:f9:
6b:cb:a4:d4:b8:c2:fd:20:5b:c9:be:37:2a:8e:e0:1c:7d:ad:
1d:30:83:a8:b0:d0:9d:e0:52:18:e1:38:b7:67:6e:22:90:a6:
64:fd:c2:04:48:0b:4b:84:2f:2e:73:55:13:48:e4:e1:ad:e9:
0a:d3:32:e6:b1:1d:ca:6c:16:3d:68:f2:2c:3f:79:40:2d:95:
6f:2b:da:ff:58:39:d2:09:12:6e:59:34:4f:18:f1:bb:aa:f1:
c9:89:18:ac:16:56:b6:34:27:96:86:e8:bc:b3:ac:77:bf:4e:
89:d0:5f:9f:85:d4:1b:3a:78:6f:1f:f6:b4:b8:c0:32:b0:71:
60:d6:44:8b:ef:7a:1b:5b:6b:db:3d:08:74:54:5b:f4:15:0b:
42:c6:e6:84:37:e4:6b:52:e2:75:17:0e:26:dd:ba:2a:5f:2f:
77:e9:7b:ed:5b:5a:a2:c0:44:2b:e5:1c:77:46:da:e1:15:78:
52:00:82:1c:7c:cd:6d:f4:52:5d:9f:15:27:60:09:9f:af:71:
7e:4e:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:20 2025 by rpki-client