Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: JR/q5cDAQWh43Zru0c/q2TCN3ovDBIYKYwOCRnvcoDY=
Subject key identifier: 75:D7:77:25:53:3C:EB:F4:C4:F1:16:27:0F:B7:8D:94:BA:1F:F0:94
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 0197556C93FB8C5E56D04D3C51AD86CAEDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 1174
Signing time: Mon 09 Jun 2025 16:01:08 +0000
Manifest this update: Mon 09 Jun 2025 16:01:08 +0000
Manifest next update: Tue 10 Jun 2025 16:01:08 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: XtM+t9hbXPQb9uRP20wXgq9FJ/UksmLURbhyKBDkunQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:93:fb:8c:5e:56:d0:4d:3c:51:ad:86:ca:ed:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Jun 9 16:01:08 2025 GMT
Not After : Jun 10 16:01:08 2025 GMT
Subject: CN=75d77725533cebf4c4f116270fb78d94ba1ff094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:d2:ac:55:ae:13:1a:5b:3d:0d:29:2a:f6:
c8:e4:9b:60:47:b5:c7:00:b8:40:8c:f6:27:8a:da:
a3:5b:46:98:f4:d8:63:9f:0b:7d:b2:99:d2:b8:8d:
2b:96:74:46:e9:dd:a3:82:d7:df:28:d9:62:ee:84:
b1:e4:aa:b9:6b:7b:d7:9c:31:0c:66:33:bd:3f:b2:
57:62:23:84:ae:64:3e:e4:1b:0d:45:f0:ab:95:1f:
e6:0c:5c:fa:ee:2e:a5:00:1c:3c:5d:14:85:2d:7d:
12:44:3f:64:b8:31:57:92:58:7f:7d:08:f5:d8:c0:
5e:04:45:2c:09:98:ad:e6:61:02:2b:34:59:7e:21:
f8:6c:09:33:42:1b:7e:c9:ff:9f:46:7e:a3:e8:65:
f1:f4:e4:07:de:39:f5:93:a7:02:c2:4e:78:1f:9d:
95:a2:72:7d:52:77:55:a5:91:b0:96:41:f6:e5:c4:
76:c5:9d:c3:a5:64:ee:83:9f:fd:29:a2:d8:3d:27:
bc:9f:59:68:0e:66:44:31:2d:9f:05:ba:a4:2d:19:
cc:ab:22:26:22:ad:d2:1c:46:48:9d:87:7f:7c:85:
5c:c9:f2:15:c1:f3:4c:1a:02:6e:4e:38:aa:bb:e1:
e3:97:e7:bd:b6:98:6d:fc:02:10:5b:98:a5:41:45:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D7:77:25:53:3C:EB:F4:C4:F1:16:27:0F:B7:8D:94:BA:1F:F0:94
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ef:7f:82:cf:44:62:3a:64:00:02:da:c5:e4:c8:b3:db:bd:
b7:3f:3f:2b:84:05:6a:37:f0:d5:b1:f0:ab:34:eb:42:3f:3f:
ee:07:b4:79:4a:7f:ef:b6:be:e3:36:9a:d8:b0:60:b3:b2:84:
e7:96:29:30:73:48:58:82:db:85:af:89:8f:e9:50:0f:72:3f:
7e:3a:9e:5e:2d:4f:47:25:25:e6:38:7e:71:8a:f2:39:c8:dc:
c3:b1:a3:25:ca:10:ee:57:25:89:dc:83:d1:19:9d:2d:28:80:
6f:32:ac:7b:24:3a:5f:0d:ea:f6:c5:bd:e0:d8:79:c7:a6:05:
ab:05:b3:2e:2d:a6:53:93:44:1a:a3:ca:1e:cc:c3:8a:e4:f5:
a6:84:f9:c1:7c:11:5e:1d:8e:8d:44:df:8a:ce:9f:11:34:b1:
09:a5:b2:2e:aa:43:d5:7d:8e:d1:1d:82:12:1c:4d:80:50:cc:
a9:61:3f:3e:3c:d7:cf:48:1f:dd:2d:40:41:1e:af:59:61:53:
9f:26:10:8d:d8:57:30:4e:1b:57:c9:1f:34:7b:02:d1:b1:90:
98:a2:21:53:1d:66:a5:3b:bb:ac:91:df:25:40:72:ae:96:b8:
64:c1:17:0a:8c:ef:70:7d:51:a7:34:a4:28:8d:2e:85:b1:27:
8c:e2:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:40:01 2025 by rpki-client