
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: wQjLCizaPXmz0tPfOxj2pBj5Jijm8HH1AekR65epqAA=
Subject key identifier: 84:48:A7:C2:D9:17:41:79:CC:BA:EF:B4:4D:23:23:61:68:02:BF:D1
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 01987418CF1A4193D990527905A64A3BCCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 11C4
Signing time: Mon 04 Aug 2025 08:00:39 +0000
Manifest this update: Mon 04 Aug 2025 08:00:39 +0000
Manifest next update: Tue 05 Aug 2025 08:00:39 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: mqPvaXojHnzRs3LQ65G0+7j7hpnr3bBazVetzOHGwa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:cf:1a:41:93:d9:90:52:79:05:a6:4a:3b:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Aug 4 08:00:39 2025 GMT
Not After : Aug 5 08:00:39 2025 GMT
Subject: CN=8448a7c2d9174179ccbaefb44d2323616802bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:2c:28:a5:10:d9:bf:45:e7:8b:21:70:b4:
46:62:f8:44:53:cd:32:a8:5b:58:a2:7e:71:8d:16:
f1:e4:a1:51:5b:63:5e:17:b1:9c:bc:ae:8f:e6:11:
3d:87:6c:86:37:f5:b8:bb:f7:a3:29:97:9e:15:eb:
90:6b:da:58:90:a8:09:79:cd:8f:86:52:bb:f4:b0:
0c:20:ee:06:e1:b8:a0:c9:39:98:0c:59:8d:04:e2:
10:25:8d:d3:c6:a1:5a:33:4e:7a:13:e1:aa:35:1d:
6f:78:20:69:ba:13:86:cc:09:73:4c:e6:39:5b:73:
a5:2d:23:5a:4b:31:b5:1a:f3:8f:13:1b:c9:da:68:
7c:08:d2:79:1c:74:86:af:5f:2b:77:65:73:7d:57:
01:78:90:29:10:71:9d:3f:d2:59:80:28:f6:f0:b2:
cf:ef:97:dd:de:91:ee:f5:29:16:84:97:4f:eb:b5:
36:10:0d:4d:26:82:9e:67:66:3a:22:d9:48:8b:43:
f3:44:61:ff:55:11:f9:4f:dc:a1:0f:99:7e:21:4e:
b7:02:c7:61:7a:df:bc:f6:fb:61:08:53:aa:13:4e:
f0:41:9b:db:d7:c5:69:9a:50:39:f7:27:cb:71:6c:
f5:e2:f7:96:a4:19:df:73:ef:51:ad:2a:a8:0c:53:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:48:A7:C2:D9:17:41:79:CC:BA:EF:B4:4D:23:23:61:68:02:BF:D1
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:78:81:0b:34:b6:8d:07:22:3f:67:fe:65:46:18:ef:c2:cd:
df:e4:87:b3:f7:33:78:7a:f9:d8:10:59:bf:86:4e:b4:75:b1:
9c:89:4f:e7:ad:1a:91:ab:0d:09:51:4a:29:83:23:71:a9:88:
72:22:0a:05:b0:a7:65:e5:4c:45:c3:2b:10:98:a5:71:54:37:
1f:23:31:de:db:d6:6c:22:bd:06:fd:31:3a:ae:e3:1f:0c:18:
a4:73:17:38:8f:df:d8:60:0c:dd:7d:5c:f7:79:14:60:c4:cc:
90:2f:d3:ec:83:a6:45:88:fa:8f:b7:18:58:8c:a4:f8:bf:be:
65:69:e1:46:b1:32:2c:0d:50:57:78:be:9a:ed:bc:e0:51:f9:
5a:e3:6f:e1:89:14:30:06:7d:0f:c2:2d:6e:59:df:77:32:ab:
ae:74:1b:23:27:c3:98:99:c8:39:25:f8:d0:8a:ab:68:7c:0f:
12:c6:e2:c9:ca:2d:29:1e:d7:99:3b:fb:74:db:4a:7e:c3:f2:
a3:15:14:49:11:e5:65:1a:e4:6a:18:ea:b0:d2:ec:1a:00:81:
95:40:e9:75:f9:4d:77:7d:50:b3:67:04:bb:a3:53:a7:60:60:
3f:9f:41:41:17:3a:23:b2:cc:ab:00:b0:c3:d2:e9:2f:97:2f:
e6:66:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:48 2025 by rpki-client