Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: 3fYbe7i6o0+BO7b/DMWM8gQSaKwI9Bei4J6x1cS88Hw=
Subject key identifier: BD:E2:36:E6:0B:15:51:22:D1:7F:73:1A:B5:D9:05:9A:00:FD:D7:56
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 01989411E1D0FF5A6B0753189D18D0C61B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 1219
Signing time: Sun 10 Aug 2025 13:00:56 +0000
Manifest this update: Sun 10 Aug 2025 13:00:56 +0000
Manifest next update: Mon 11 Aug 2025 13:00:56 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: z9jD3p+UyLMXLfzrJTkZyW/IFSUwnuL+h0DiBQqF2Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:e1:d0:ff:5a:6b:07:53:18:9d:18:d0:c6:1b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Aug 10 13:00:56 2025 GMT
Not After : Aug 11 13:00:56 2025 GMT
Subject: CN=bde236e60b155122d17f731ab5d9059a00fdd756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:a9:83:2e:4c:66:64:a6:55:7a:a3:2c:42:
6c:9a:30:5a:34:12:42:f3:8d:f8:ec:d5:be:15:79:
b0:92:ec:22:9a:6e:63:2e:50:93:33:1c:b6:f2:25:
ef:f0:7d:b8:6d:88:7f:74:c4:c0:7d:14:9c:61:e1:
5a:6a:17:3d:de:4b:e2:8e:9c:3a:90:b3:a0:e0:93:
76:e7:af:96:36:09:55:6d:a4:b2:25:c7:50:cf:86:
04:56:c1:d4:71:1d:ae:77:d4:2a:7b:5f:ce:71:e5:
17:28:50:0d:6e:d3:f8:f5:83:3a:b7:aa:1e:b0:6a:
7e:31:09:41:7f:db:f4:7d:ac:15:e2:c0:31:37:da:
27:1a:cb:e5:a5:8e:e1:8a:09:6f:57:0d:92:1b:7f:
4e:39:8a:71:07:8b:d3:a6:d7:c0:70:f6:49:8e:fb:
17:c1:53:49:57:e8:eb:c2:ea:35:ee:1d:64:a1:02:
ba:fd:59:46:dc:5f:bc:eb:ad:fd:64:ee:3a:a3:7b:
71:68:53:50:12:17:96:cd:d1:d2:bd:7c:07:77:ca:
f4:83:25:45:1c:93:5d:95:f0:e5:a9:7f:12:da:d9:
33:12:39:93:cc:46:5c:40:3b:90:38:72:42:20:b0:
59:88:4d:1e:26:1c:22:cd:3f:15:85:91:77:59:bb:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:36:E6:0B:15:51:22:D1:7F:73:1A:B5:D9:05:9A:00:FD:D7:56
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:3f:4c:b3:31:9a:af:d2:71:8b:af:f1:9a:52:5f:6b:92:
cc:ff:31:a1:8e:a9:bf:4f:ea:df:e1:b6:27:04:f8:5e:91:cb:
7d:2b:f0:a5:7d:03:58:17:59:24:99:7d:fe:6a:3f:9f:62:c1:
f3:8d:96:b3:94:06:aa:d2:f2:3b:e4:b5:e4:f9:da:9d:05:4a:
0f:e3:ef:d0:36:e2:6a:7d:4a:1e:c3:eb:59:7c:df:de:75:d0:
82:0d:27:61:52:2a:43:2a:c2:09:ae:ac:10:01:aa:06:d2:8f:
01:c2:5d:09:cd:d6:58:25:d3:48:42:12:e4:24:81:64:5b:99:
a6:e2:43:b4:3e:fa:46:97:b1:ab:48:f1:be:81:ff:ec:75:a7:
1b:8a:c3:f8:b1:4d:a0:9e:1f:fc:99:0b:a9:36:69:51:dd:e3:
81:81:c8:a9:8a:1e:7e:86:3e:d1:8c:c7:91:ee:e5:d4:42:94:
60:db:ca:3e:35:07:65:03:10:43:5b:b9:95:72:48:e5:98:90:
7d:10:b1:6a:ec:6e:43:d9:75:34:70:65:e8:94:99:88:1b:d5:
24:d3:a4:cb:a4:a9:04:cc:5e:6a:9e:73:b3:17:c8:6c:01:15:
a2:74:7e:98:7b:3f:82:03:67:1c:82:f6:0e:c2:50:7a:9b:33:
dc:01:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:50:08 2025 by rpki-client