Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: b55VDSF464J2KXPQm/e5ShqI/1ax3bwUwBPqgXAOYUo=
Subject key identifier: 02:3D:23:B5:56:E6:A3:50:C3:79:04:FF:6F:E7:E3:59:9A:DA:EF:C3
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 019768BC5A7DD54EB6A05256EB36D19D98E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 117E
Signing time: Fri 13 Jun 2025 10:01:03 +0000
Manifest this update: Fri 13 Jun 2025 10:01:03 +0000
Manifest next update: Sat 14 Jun 2025 10:01:03 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: 0VYChnOZ+kTucFkD548v7ugl66HvOawrhQPL4AnfXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:5a:7d:d5:4e:b6:a0:52:56:eb:36:d1:9d:98:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Jun 13 10:01:03 2025 GMT
Not After : Jun 14 10:01:03 2025 GMT
Subject: CN=023d23b556e6a350c37904ff6fe7e3599adaefc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:d3:d4:bd:48:7e:68:24:2f:35:01:56:61:
0e:cc:24:db:84:3e:e5:1c:04:36:48:f2:65:ac:b8:
4f:f5:8a:3e:84:41:5c:52:fa:5c:56:17:21:95:d5:
5a:d9:46:5e:fa:36:c7:68:3a:f5:8a:ef:d8:91:80:
c3:ca:36:69:a0:9f:23:5c:3c:6f:dc:fa:aa:48:a0:
30:68:2d:4b:02:75:75:59:4d:7f:68:ad:2a:a5:f0:
0b:15:b6:1f:b7:bf:0b:62:64:5b:f2:c4:6c:83:cc:
dc:29:4a:49:af:81:2e:88:82:b7:7e:9f:53:57:cd:
ca:ec:01:21:b5:4d:e6:44:f3:49:a6:9d:0e:a4:6a:
f0:f5:b0:8f:ba:c6:dd:5e:87:f9:34:c2:24:a3:da:
7c:a3:27:b7:f2:d9:b6:f5:0c:dc:08:cc:d5:cb:22:
43:91:db:a5:e4:65:0f:7d:6e:09:92:cf:6f:c9:87:
fa:7a:82:ea:31:16:7b:8e:8e:57:0c:d1:7c:c5:5e:
f9:60:6a:e4:7b:87:cc:af:32:f2:05:2b:b0:2a:4f:
06:9c:22:39:58:db:f8:d5:53:70:80:84:d4:b0:d0:
9a:1b:4d:a9:f8:f9:06:01:31:99:6e:eb:0e:d9:53:
ab:59:e4:4f:ac:0e:a9:a7:6d:12:8e:ab:fa:20:4f:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:23:B5:56:E6:A3:50:C3:79:04:FF:6F:E7:E3:59:9A:DA:EF:C3
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:2f:f4:0e:b0:30:ad:e1:6e:45:f5:56:a3:7a:98:4a:6f:
92:7e:9f:75:4b:33:15:a4:0e:fe:b7:4e:d5:85:5f:18:a2:70:
62:e8:e1:9d:ce:31:69:b9:00:07:59:85:17:a7:b6:19:2a:6e:
ac:df:1a:51:e4:52:df:c6:ed:09:d3:59:8c:15:05:40:4b:68:
0d:2b:20:be:0b:37:18:b9:37:54:c3:62:71:d0:06:bd:cd:07:
78:e9:e2:0b:dd:95:d4:46:67:53:49:da:68:b0:63:86:29:a5:
9d:c2:d5:92:77:45:b3:7d:ea:69:ca:9f:e6:cc:cc:43:6d:06:
f1:cd:ed:17:67:d8:bf:18:83:b6:6e:18:7c:f4:d1:ae:c4:79:
71:bb:16:fa:a7:47:5f:9c:d6:6b:bd:55:ed:13:fe:e5:fb:38:
3a:ef:2f:6e:4b:ce:92:c3:ae:75:52:19:56:d2:6d:9e:ca:bc:
89:59:1d:eb:b6:1b:b0:d1:ed:2d:d6:7c:aa:83:a1:6a:92:30:
9d:cc:22:cf:c7:b9:c4:10:cc:cb:13:d4:8d:95:67:31:89:a9:
d9:7f:8a:fc:07:d1:3d:05:d3:fb:8a:e3:c7:62:8b:32:6d:ba:
10:63:ac:b0:73:6d:46:b1:79:31:2f:97:7e:11:9b:26:78:ac:
56:05:8c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovFp91U62oFJW6zbRnZjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTdhMGUyZDZlNjA3MmU4OGQzNzc0ZGQ3Y2NmYmYwN2Ex
Yzg2MzIwHhcNMjUwNjEzMTAwMTAzWhcNMjUwNjE0MTAwMTAzWjAzMTEwLwYDVQQD
EygwMjNkMjNiNTU2ZTZhMzUwYzM3OTA0ZmY2ZmU3ZTM1OTlhZGFlZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0vT1L1IfmgkLzUBVmEOzCTbhD7l
HAQ2SPJlrLhP9Yo+hEFcUvpcVhchldVa2UZe+jbHaDr1iu/YkYDDyjZpoJ8jXDxv
3PqqSKAwaC1LAnV1WU1/aK0qpfALFbYft78LYmRb8sRsg8zcKUpJr4EuiIK3fp9T
V83K7AEhtU3mRPNJpp0OpGrw9bCPusbdXof5NMIko9p8oye38tm29QzcCMzVyyJD
kdul5GUPfW4Jks9vyYf6eoLqMRZ7jo5XDNF8xV75YGrke4fMrzLyBSuwKk8GnCI5
WNv41VNwgITUsNCaG02p+PkGATGZbusO2VOrWeRPrA6pp20Sjqv6IE+txQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI9I7VW5qNQw3kE/2/n41ma2u/DMB8GA1UdIwQY
MBaAFIYXoOLW5gcuiNN3TdfM+/B6HIYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5Njgt
ZWJkYzMyYTZhYjI3LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yZDE4YWYtNTg5Mi00MDdmLWI5NjgtZWJkYzMyYTZhYjI3
LzEvaGhlZzR0Ym1CeTZJMDNkTjE4ejc4SG9jaGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXQv9A6w
MK3hbkX1VqN6mEpvkn6fdUszFaQO/rdO1YVfGKJwYujhnc4xabkAB1mFF6e2GSpu
rN8aUeRS38btCdNZjBUFQEtoDSsgvgs3GLk3VMNicdAGvc0HeOniC92V1EZnU0na
aLBjhimlncLVkndFs33qacqf5szMQ20G8c3tF2fYvxiDtm4YfPTRrsR5cbsW+qdH
X5zWa71V7RP+5fs4Ou8vbkvOksOudVIZVtJtnsq8iVkd67YbsNHtLdZ8qoOhapIw
ncwiz8e5xBDMyxPUjZVnMYmp2X+K/AfRPQXT+4rjx2KLMm26EGOssHNtRrF5MS+X
fhGbJnisVgWMVg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:07:08 2025 by rpki-client