Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: wy0UZm/Ncp2k+3zcW2cNqpvWLCiBAN5tjOT56Q3KB9I=
Subject key identifier: D6:0D:35:2E:BD:0D:71:B4:01:E4:E7:CE:03:70:35:07:31:66:59:6C
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 019922FA95D1EB3ADFBE74577820F035D83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 1263
Signing time: Sun 07 Sep 2025 07:01:11 +0000
Manifest this update: Sun 07 Sep 2025 07:01:11 +0000
Manifest next update: Mon 08 Sep 2025 07:01:11 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: YP9UtNfCNw287gMHdStHe/89NUvbSw+N4UrDyVtBJ5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:95:d1:eb:3a:df:be:74:57:78:20:f0:35:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Sep 7 07:01:11 2025 GMT
Not After : Sep 8 07:01:11 2025 GMT
Subject: CN=d60d352ebd0d71b401e4e7ce037035073166596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:88:c5:67:68:00:29:2b:fc:f6:14:c0:ef:
59:e4:65:bb:51:af:e1:c9:3c:63:32:e3:24:5f:1c:
4b:6a:14:78:56:fe:3e:d7:34:fd:ef:ed:d8:64:46:
34:eb:27:2e:b2:d1:13:15:de:6c:6e:ae:78:8a:14:
0b:2e:4d:6a:ee:3f:2c:99:9b:a1:d3:03:59:bd:a0:
60:c5:51:62:d1:c6:33:1e:b9:4d:93:fb:f3:58:b1:
22:f5:16:52:67:6d:f8:ef:47:77:a5:4b:01:39:d6:
70:1b:43:08:06:b6:f7:a6:86:3d:03:0b:98:aa:7c:
b7:3b:1f:dc:83:3d:bd:e6:3f:5b:4c:25:f1:2d:13:
24:88:8e:0b:09:2a:33:0c:be:14:3f:e6:91:81:28:
14:87:3a:9d:25:40:3b:32:af:90:b4:c1:b3:56:ba:
3a:b5:99:e6:53:b3:17:5b:e9:05:3e:1f:a2:50:32:
2a:49:c4:87:0c:aa:cd:4f:cb:70:fb:9e:10:79:16:
97:e9:aa:2c:ef:25:da:ff:10:1c:03:ec:2e:1d:c8:
d2:e8:88:3d:7a:4a:08:e3:a7:7f:8a:68:36:46:b1:
22:ae:e4:4b:b9:91:2b:2b:9b:0e:14:9e:6c:a5:23:
24:2f:d0:ae:67:29:6a:78:e9:fb:c2:a1:74:a9:a8:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:35:2E:BD:0D:71:B4:01:E4:E7:CE:03:70:35:07:31:66:59:6C
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:9b:b4:fe:7e:83:10:fe:07:3d:b9:ca:63:13:55:17:29:
e6:c6:2a:c8:df:5a:e5:fe:26:d7:b1:1e:0b:d4:9f:29:a7:3e:
cb:a3:7c:5c:7c:26:20:b7:bf:79:19:ae:83:e1:6b:33:5c:9f:
cd:6f:6a:7a:3b:f6:8d:5c:00:d4:c0:bc:8f:e7:60:83:fa:ad:
b4:eb:e5:b2:92:87:b4:d3:eb:5c:93:07:b6:59:a9:5a:38:76:
44:5b:25:48:71:7d:62:df:98:6d:75:54:7e:e7:70:d9:a7:13:
4c:ef:b8:87:e8:db:64:11:91:33:a5:29:9b:c2:a4:d1:21:e6:
1a:19:26:ea:51:27:fb:c6:b8:fe:97:ae:26:56:b8:59:26:c3:
91:30:71:69:86:8a:b0:7a:08:c4:ee:d4:a2:5f:0a:58:b1:ea:
50:11:58:74:7a:6d:93:b9:41:fe:7e:72:2e:6a:48:41:ac:17:
5f:79:c8:9f:83:5d:20:3e:58:f1:68:c6:63:c1:c1:f9:f4:44:
c1:81:b8:14:14:6b:5b:93:03:fa:0f:41:d0:cf:98:09:1a:cf:
41:a7:62:57:f3:64:3a:e1:6d:98:b6:5a:6e:ca:28:00:30:f6:
7b:4b:de:e0:69:5f:c4:9e:2b:f9:e7:d2:35:d5:95:4e:cc:10:
d6:a9:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:04 2025 by rpki-client