Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: JLAOhEX4o3IaPw/T37wuoVt4DOpsbOSNHFI+goFA5u8=
Subject key identifier: 37:AB:64:67:56:72:BC:BF:39:B2:CD:F5:E7:AB:A2:89:5B:48:B2:8B
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 01976D3DC309B8C5736286141C8B5551B8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:00:53 +0000
Manifest this update: Sat 14 Jun 2025 07:00:53 +0000
Manifest next update: Sun 15 Jun 2025 07:00:53 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: /2DaKbyC0fVwAJk8XaOjX2Y8Z8j+/W1mj8v4jZ8RF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c3:09:b8:c5:73:62:86:14:1c:8b:55:51:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Jun 14 07:00:53 2025 GMT
Not After : Jun 15 07:00:53 2025 GMT
Subject: CN=37ab64675672bcbf39b2cdf5e7aba2895b48b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:e8:30:2d:b2:5d:ff:82:ba:36:7d:5d:b3:
84:2f:8b:bd:5d:ae:91:33:a7:67:0e:64:67:47:80:
59:8c:32:01:02:50:cf:d9:a6:76:c2:68:58:e4:29:
11:d6:7c:d1:f1:84:a9:48:2b:1d:92:14:07:7b:d3:
1d:bf:77:8d:ec:96:03:a0:49:98:38:60:e6:11:9b:
4d:ea:80:ca:0a:fc:dd:f0:cf:1d:15:e7:75:29:85:
44:a8:c6:3d:0f:8e:0d:45:3a:6a:b4:3a:76:81:00:
97:8e:18:0c:bb:14:65:e2:63:5f:ec:39:bf:dd:67:
2b:9e:6e:5e:88:5c:3b:d2:7f:a9:ad:a9:8d:fd:be:
9e:97:bf:c4:ff:94:2f:62:0d:5b:04:96:f8:e6:93:
cc:fe:1a:e8:5a:6e:4a:66:5f:bb:62:d2:d0:2f:4f:
07:ce:d9:e0:15:dc:dc:f9:cb:58:eb:7e:05:da:d1:
81:9a:11:b0:68:33:19:fd:15:f9:b2:7b:1e:fd:b1:
18:96:e3:69:16:38:c3:40:ef:49:a6:58:88:a3:f3:
1a:16:61:12:f3:88:13:91:aa:da:cf:01:7c:d2:20:
c2:88:67:b8:0e:f8:20:ed:38:6e:91:ff:32:63:ff:
12:7b:57:7e:8b:6f:4a:af:a5:ba:3c:c5:44:c1:7d:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:64:67:56:72:BC:BF:39:B2:CD:F5:E7:AB:A2:89:5B:48:B2:8B
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:40:ff:27:b6:cf:75:18:1e:c7:66:84:7c:de:9d:ed:00:16:
0f:3d:e2:74:bd:51:e7:ec:a3:7d:bd:cb:3d:ef:46:f7:8b:bd:
69:00:52:54:f7:a1:23:48:86:2d:f3:f1:6d:56:17:07:de:eb:
e1:da:5e:84:9d:99:65:ab:22:85:c8:1b:d2:b7:40:de:12:6d:
15:91:03:0d:de:97:76:38:66:5a:75:4b:42:9f:cc:8b:f0:e4:
72:63:13:c6:75:85:5a:68:ab:fc:c6:5a:d3:6f:01:42:6d:a1:
08:bf:d5:6e:ff:c6:31:a0:75:33:37:f3:6f:de:fb:ad:b2:e6:
20:f0:1f:40:49:5b:a6:33:1c:31:01:f8:29:06:80:a8:2c:56:
21:70:2c:1c:75:65:78:37:ad:58:77:5b:15:b6:bf:7d:bb:a8:
41:48:d5:d3:0d:bb:96:65:b3:d5:9c:6f:5d:c5:38:10:7e:a0:
ac:a3:38:3d:ee:93:2a:76:11:2f:f7:fc:ed:d1:0b:31:8c:64:
75:c8:55:78:e5:be:1e:85:d5:10:1a:b5:19:6a:80:47:0c:82:
44:e0:ce:0e:86:cd:d5:5e:51:9e:97:a6:ef:6a:bf:0d:d0:a7:
b4:bf:e1:96:61:a9:41:df:c6:c6:35:1a:e5:af:87:c1:34:a5:
48:a9:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:10 2025 by rpki-client