
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier: ZOGWjxIpfjr2JzKSRR5xBk+qPWVViUUsh8tGY0rkrpE=
Subject key identifier: E3:92:46:99:63:B3:8A:79:2A:E8:84:96:66:28:3B:33:F0:34:9F:9A
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial: 01974BC43503809554D0C03A0BF1B19EE6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number: 0BED
Signing time: Sat 07 Jun 2025 19:00:39 +0000
Manifest this update: Sat 07 Jun 2025 19:00:39 +0000
Manifest next update: Sun 08 Jun 2025 19:00:39 +0000
Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: /zDTPtys2PlqPEg5ydaUtYtRIggxrr/pxNbVXimtOIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:35:03:80:95:54:d0:c0:3a:0b:f1:b1:9e:e6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Validity
Not Before: Jun 7 19:00:39 2025 GMT
Not After : Jun 8 19:00:39 2025 GMT
Subject: CN=e392469963b38a792ae8849666283b33f0349f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:41:c8:f9:b8:56:c2:3d:e7:bf:c9:81:02:
c3:5a:ab:c3:e5:d0:9e:46:2a:17:58:52:bd:b9:80:
d3:bd:59:6c:71:a0:b1:09:de:b8:d8:0f:9f:a1:b5:
e5:1f:e7:42:d4:a1:ac:3f:8b:b1:3f:e1:62:8e:cd:
d1:97:86:3c:96:33:8c:ea:66:9c:b5:fe:46:df:69:
ef:5a:8b:f3:9b:32:d4:dc:f3:a2:e7:47:c7:bb:c2:
ec:6a:09:6d:ba:4e:4e:55:87:fe:84:f0:c5:7c:87:
8f:b9:fc:2d:7c:08:28:33:42:e2:9b:ad:c7:e6:f7:
e5:d2:01:6c:77:a9:d3:83:60:74:3c:03:b6:68:22:
bc:72:b1:fd:d3:c0:dc:d4:56:65:f3:5b:4d:43:86:
68:96:cc:87:23:3d:f0:c0:e3:13:20:0c:a6:88:72:
fc:cc:88:cf:bb:5b:d8:f0:0d:e7:56:96:96:df:96:
5e:d3:0a:ba:d5:5f:ee:30:87:1c:ef:53:fe:0c:39:
dc:91:bc:0a:ab:84:8c:28:ba:3f:38:7c:92:f1:6d:
43:5d:63:0f:45:31:2c:d9:7f:ff:42:a2:38:28:db:
c8:db:fe:9e:11:54:52:ab:07:50:a6:20:17:c9:c8:
52:88:f0:e0:a7:a4:a3:1d:cc:2f:2f:9f:01:e6:ff:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:46:99:63:B3:8A:79:2A:E8:84:96:66:28:3B:33:F0:34:9F:9A
X509v3 Authority Key Identifier:
keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:70:f2:6d:2e:2b:ba:68:6d:82:ca:a7:b4:33:13:fe:77:
f0:41:a6:db:13:e8:67:f3:54:e0:a9:e3:bc:9e:48:1f:4e:d3:
3a:9a:74:eb:96:92:f2:e2:40:12:a2:cc:e6:5a:d3:b1:b2:44:
5f:1d:57:24:11:ed:58:a1:e6:55:ae:34:cb:26:d4:27:f1:e8:
02:76:ed:9c:c8:ea:97:44:c3:7d:cd:36:ed:68:9b:ca:2e:44:
a9:00:36:69:fe:70:53:11:33:eb:7e:29:d3:11:3a:68:88:45:
b4:f7:b3:fe:54:11:36:b5:47:d5:9a:7d:29:75:29:5b:ac:19:
e0:48:2c:fd:34:33:49:0c:d0:56:20:a9:05:9a:4a:11:1c:29:
f7:98:b2:4f:35:8e:8a:cd:2a:03:9d:44:77:7c:2e:bf:de:c2:
8b:ba:18:35:c3:fb:e7:7f:1a:7b:72:40:23:b0:e9:d8:10:ec:
2e:fd:2a:66:bb:cd:d2:3f:aa:e9:50:35:3a:7f:46:70:76:8d:
f3:fe:2e:dd:6e:a4:66:2d:e6:81:69:41:dc:96:87:0b:53:d7:
7d:5a:d7:39:04:2c:d5:91:35:45:fa:95:0b:7a:38:01:2b:b0:
b6:50:fb:fa:7c:03:46:47:dd:ac:44:1e:6c:12:ff:da:47:20:
9b:d4:af:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:34 2025 by rpki-client