Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: S86/5yGHzS4njaVEjOB6gaf2Kt6jve6e2ssiR24O3ng=
Subject key identifier: 21:03:CF:5A:73:B0:B3:DC:0E:B6:E6:F8:47:08:DC:12:4E:AD:05:6C
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 01984777090DE3684BF6634F8C0D2D7C31AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 0287
Signing time: Sat 26 Jul 2025 16:00:40 +0000
Manifest this update: Sat 26 Jul 2025 16:00:40 +0000
Manifest next update: Sun 27 Jul 2025 16:00:40 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: fmSRvvQ2w15Nw7hpIw5PSLkPudv9WoNJkmnZOF+8Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:09:0d:e3:68:4b:f6:63:4f:8c:0d:2d:7c:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Jul 26 16:00:40 2025 GMT
Not After : Jul 27 16:00:40 2025 GMT
Subject: CN=2103cf5a73b0b3dc0eb6e6f84708dc124ead056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4f:3e:fd:19:e9:14:70:86:02:2a:e6:9f:3c:
a9:4f:46:e1:67:62:fa:77:ba:11:8f:fa:cf:38:b9:
ff:31:58:95:c5:ad:84:fc:45:a9:53:e9:63:b5:e0:
e0:3a:0c:d7:b9:d5:96:ff:eb:a7:05:90:9b:54:ad:
31:b6:1d:62:f6:8b:ed:2d:25:54:3c:32:bb:4a:1c:
33:6a:f6:a5:48:a5:64:94:d8:63:d5:e3:e6:e5:b1:
06:9f:ca:3b:94:05:26:82:eb:50:3f:45:1b:5e:e2:
36:f9:cc:36:34:c2:08:fa:23:38:77:ad:1d:66:66:
b9:fb:67:63:62:74:9e:6c:ed:0f:0f:80:48:59:2d:
a5:76:00:b1:2d:c4:f5:d7:f8:7b:24:f5:86:62:30:
ce:6e:7b:4b:2a:9f:44:8f:a0:76:96:29:8f:64:82:
af:cb:ca:4a:b4:1b:f4:7b:61:3a:51:e3:ec:60:90:
17:b9:cc:e3:82:93:a8:2e:20:8a:2c:ba:c0:fd:ac:
ab:cf:a9:85:4b:cd:68:42:f6:7d:60:a1:c9:2c:23:
70:2c:17:54:45:2c:45:ae:d8:ad:72:c6:65:b0:48:
75:c7:cd:1b:09:5d:61:4a:01:af:5e:e3:b4:13:34:
93:43:53:3e:23:61:47:d0:f7:b2:52:58:b0:c2:2b:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:CF:5A:73:B0:B3:DC:0E:B6:E6:F8:47:08:DC:12:4E:AD:05:6C
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:28:ce:ed:64:a0:cd:2d:0f:7e:80:31:17:a3:19:66:81:
8d:f7:c3:88:dc:d7:8c:14:32:36:89:57:75:7f:9a:26:7d:74:
01:1f:88:b3:d6:17:e3:df:ca:cf:31:f9:31:2d:e0:4f:f5:e6:
1b:7f:b5:7c:3d:41:3a:87:0b:42:58:d1:cb:7d:90:a3:d1:c3:
60:fe:fd:3a:26:8c:d4:b2:a0:a2:f8:5c:81:8c:2b:ca:98:df:
f2:ab:3e:bc:2a:fc:52:6b:54:bc:eb:22:89:0e:ca:83:10:81:
ef:d0:67:bf:42:0f:cf:aa:7e:fa:db:a0:89:4a:32:b1:a9:52:
39:01:42:3c:00:71:dc:64:c7:48:51:a6:fb:7d:0b:c3:df:c8:
ee:27:55:0e:f2:44:4b:b6:89:ce:b4:e1:01:7f:8e:dc:8c:dc:
88:b2:e4:f8:28:5f:6b:3b:7f:bf:46:81:14:21:d0:48:1b:1a:
be:92:c9:b1:1b:6c:e6:d5:b1:18:17:8c:fa:7f:c7:1b:75:c0:
74:72:6c:11:82:b5:ab:a5:a3:34:20:18:1e:ef:e8:1c:a6:cc:
74:51:a5:e2:20:85:92:98:eb:16:3e:26:44:4b:f1:d5:8c:0f:
a2:65:db:4e:07:9d:d3:8c:eb:30:72:d8:7c:a4:d4:b2:bc:81:
ce:3e:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:40:35 2025 by rpki-client