Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: k9ZyfBQFkMLe4T36VrFbYNHRm/bH5jMgWm34KrkZTOY=
Subject key identifier: 52:17:C6:9A:0E:D6:FF:BE:51:C1:FB:E5:44:8D:49:27:73:B1:BD:49
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 01974E578B76620780A460E90BCA9A80959A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:00:49 +0000
Manifest this update: Sun 08 Jun 2025 07:00:49 +0000
Manifest next update: Mon 09 Jun 2025 07:00:49 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: EsYO4+86wVLoKCL8I+07pbF4ilIRCP+aytIqlHkqzXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:8b:76:62:07:80:a4:60:e9:0b:ca:9a:80:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Jun 8 07:00:49 2025 GMT
Not After : Jun 9 07:00:49 2025 GMT
Subject: CN=5217c69a0ed6ffbe51c1fbe5448d492773b1bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:a9:8f:52:33:03:24:48:85:82:0a:9d:0b:
a5:87:fe:da:d1:57:2a:c4:2c:b6:57:04:3d:f9:df:
f5:01:44:dd:7a:1a:5a:1c:bb:5e:32:33:50:79:a0:
ad:9d:d3:d7:4a:34:7d:ee:e5:d3:94:44:a1:9a:57:
b8:92:b3:d2:4d:55:da:6e:ad:21:df:39:86:69:c7:
ca:d2:80:2a:98:19:10:16:b6:13:c4:8e:06:9c:bb:
58:74:f2:fb:26:1b:0e:88:10:9d:c9:c8:af:13:30:
8e:07:79:5a:71:12:cb:a9:1a:3c:6c:15:d7:10:69:
49:df:16:49:cd:e6:cc:72:7b:a0:21:50:64:57:f2:
36:53:59:21:46:e5:5f:09:9e:3f:39:25:3e:f5:ef:
60:c8:7f:61:63:80:f1:e7:fb:a7:99:cd:e8:83:33:
1a:d9:57:c7:3a:ef:2f:b1:e8:39:6c:21:96:ee:59:
08:d9:be:b1:f4:30:fb:58:d8:a1:eb:58:01:14:45:
3b:10:3c:a5:e7:d2:b5:90:8e:bd:92:cd:58:2a:a2:
0f:2c:41:1d:0a:39:b4:71:6b:23:ca:05:73:cd:db:
52:81:36:a8:98:36:8a:e3:d5:5b:c3:08:92:c8:82:
1c:38:84:fe:68:b0:45:d3:c8:2b:97:76:5d:f6:bb:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:C6:9A:0E:D6:FF:BE:51:C1:FB:E5:44:8D:49:27:73:B1:BD:49
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:3c:41:e5:e5:2c:14:ec:79:a9:f0:6b:a5:48:de:b3:28:
8e:37:b7:17:3f:6c:cf:28:2d:1b:51:10:51:3c:79:06:56:b1:
fb:2a:52:59:61:24:84:83:21:2e:40:ce:03:6b:55:55:f5:be:
07:36:3d:5e:bd:d8:07:49:bd:98:03:e6:22:5c:24:f7:63:28:
b2:7d:77:df:41:fa:30:37:65:5a:ac:39:b3:2f:5d:34:10:b8:
09:df:68:22:40:2f:1f:95:24:5b:c0:f3:51:fc:e2:a9:34:2f:
63:91:a1:07:b9:04:1f:b1:26:41:9b:df:ec:23:52:5a:65:c1:
36:5a:c3:d2:5b:3c:c8:36:ea:07:4f:2e:b8:80:0b:bb:2e:4f:
96:42:66:44:85:00:4d:db:fb:8d:da:65:6e:e1:68:66:5d:38:
46:b8:a6:fe:bf:dd:5e:88:56:9f:72:74:46:46:31:b6:98:ff:
69:a5:6b:f5:31:c2:c3:44:83:64:1a:60:0c:de:cf:be:1b:c8:
9f:97:23:4d:8a:79:74:b5:5b:ad:03:41:1c:2a:cd:b9:48:84:
b5:4c:08:a2:6b:3a:96:eb:e9:b5:75:06:07:f8:ce:4a:ca:f3:
2d:2e:83:b1:92:60:fb:77:af:df:db:6e:93:b2:e6:70:a0:0e:
e8:59:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:03 2025 by rpki-client