Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: irH6+7r03RxCn0nZXNoCiWn5ws7zEHwRIng/LV/WIVE=
Subject key identifier: 87:61:85:52:3D:23:43:59:08:BF:42:7F:87:0A:80:0A:02:F0:BE:CE
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 019923A053E448C4799AB12CDD680C72FF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:13 +0000
Manifest this update: Sun 07 Sep 2025 10:02:13 +0000
Manifest next update: Mon 08 Sep 2025 10:02:13 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: RfNgnBa9pMYhSe7Y8AtJhSa4d9UBBbA1Cxv9LL8RFQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:53:e4:48:c4:79:9a:b1:2c:dd:68:0c:72:ff:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Sep 7 10:02:13 2025 GMT
Not After : Sep 8 10:02:13 2025 GMT
Subject: CN=876185523d23435908bf427f870a800a02f0bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:a4:72:cc:a7:b1:62:a3:86:9d:d2:d7:be:
ad:f1:36:0a:ed:3a:fa:b3:ec:6d:c7:aa:95:f1:1b:
70:92:55:a6:ff:02:43:69:4a:34:f0:aa:8b:86:89:
2e:53:79:44:d3:f2:d4:19:19:6b:54:b7:92:15:9c:
fa:5a:0e:26:cc:ad:35:8a:a1:35:81:18:48:93:f4:
45:ec:d3:6b:2c:92:cd:53:d8:a2:3d:70:a7:e6:3e:
41:86:5d:5e:1a:68:79:cf:34:d3:74:84:cc:5d:dd:
6f:7f:ac:cc:96:fc:ee:f0:d9:37:d1:e5:f3:46:71:
c1:47:4b:5d:de:7f:0a:5d:d8:35:1b:22:31:7e:59:
71:88:f9:74:8d:b2:68:83:99:aa:1c:a2:57:79:fc:
69:2d:f7:fe:b6:d7:3c:c5:06:07:21:b5:97:c5:48:
05:b9:98:e8:28:e2:3d:d5:8f:47:b1:3a:6d:fd:fd:
e5:b2:96:d4:4d:6b:ac:0e:3e:dd:79:75:48:a3:c8:
6f:0c:ab:f9:cb:91:b4:68:4f:f0:bc:fb:cf:69:b0:
29:e9:af:19:56:b7:6b:b7:0e:f7:02:de:9f:b0:3e:
34:47:4d:ca:d4:c2:40:d8:10:b0:6f:3e:f9:02:05:
77:ae:cb:d2:30:b6:7b:4a:22:87:78:4c:c2:7e:7b:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:85:52:3D:23:43:59:08:BF:42:7F:87:0A:80:0A:02:F0:BE:CE
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9e:23:f6:51:38:23:bc:52:96:c2:2c:ec:b5:8b:57:75:19:
e3:02:96:fb:f3:a0:79:75:9c:ae:7d:e7:21:e1:eb:23:64:af:
cb:0d:a0:8d:cf:c2:65:d0:a7:a8:a5:1c:2e:3d:44:c7:05:4b:
e7:cb:32:a7:aa:d2:6a:a2:9a:fe:69:f4:e0:bd:58:65:3c:69:
40:5d:c8:27:50:e3:49:69:2b:7c:35:9b:70:81:bd:e8:3a:91:
4c:b5:59:40:9e:10:b9:91:f0:e2:aa:89:a8:ac:59:be:ca:88:
05:d1:5e:5f:aa:22:d9:71:6a:5f:db:d1:fc:dd:85:c2:70:06:
a1:e9:e3:9b:33:08:20:df:05:24:a0:e6:e6:05:86:f0:1f:de:
3f:a0:97:ad:5d:4d:22:3f:95:b5:85:27:a3:6e:c4:63:bb:28:
df:12:54:c3:94:20:28:ae:be:79:43:ad:0e:0c:03:83:e0:a6:
df:62:77:87:f0:a4:89:38:75:aa:13:c6:53:97:50:20:d2:24:
d7:71:07:85:98:7e:5b:e2:d9:d8:98:b6:53:45:ea:c1:a3:6b:
07:cf:9a:1a:0e:5e:f9:7d:2b:13:8e:70:03:fa:d7:5d:e8:b5:
e8:63:45:36:52:c0:a6:11:e5:82:1b:52:61:e7:8d:3d:b4:71:
79:b6:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:51 2025 by rpki-client