Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: 9kbjiFQbtjYl+ndUYyCR3KXmdkLbv1hZc30/JA5AJBc=
Subject key identifier: 27:76:3D:2E:5C:08:49:E2:D0:DB:1D:CB:CD:83:F4:78:2A:1C:87:75
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 0197C914B6A188D82011879B45C716032195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 35
Signing time: Wed 02 Jul 2025 03:01:07 +0000
Manifest this update: Wed 02 Jul 2025 03:01:07 +0000
Manifest next update: Thu 03 Jul 2025 03:01:07 +0000
Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: w1UXpDZo4jPaaCjLY/Mbg9vK7MSWaCcOgKq/jQ1I2J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:b6:a1:88:d8:20:11:87:9b:45:c7:16:03:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jul 2 03:01:07 2025 GMT
Not After : Jul 3 03:01:07 2025 GMT
Subject: CN=27763d2e5c0849e2d0db1dcbcd83f4782a1c8775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:8a:9d:ff:4a:e5:24:aa:f8:90:56:4b:a1:
93:5b:bf:81:91:3c:dd:da:ee:07:6b:9c:58:10:d7:
0b:20:a6:ee:fc:8f:9f:8a:82:db:98:da:1f:e8:1b:
cf:81:e0:5b:c8:49:17:ea:5b:9c:48:c7:8f:ef:36:
57:6b:c1:5a:2e:8f:51:4d:39:7c:33:ec:93:7d:6c:
6e:a3:90:05:af:77:83:bf:1f:3e:de:3d:38:2a:a5:
69:25:e0:d6:d4:63:9e:f8:c2:98:0c:9c:6f:30:31:
4d:a9:0f:9a:c7:22:1d:2b:fb:7f:61:b1:cf:ba:bb:
89:a6:12:b4:37:f7:9a:38:a0:39:35:7c:71:02:87:
4c:32:d4:ff:d6:6d:65:bd:28:7a:8d:bf:d8:04:d3:
69:42:1a:fa:a1:30:c7:45:60:7f:a5:60:4d:b7:58:
4e:3e:d4:85:d3:d6:e5:7b:14:a8:23:aa:97:a7:8a:
c8:97:0d:7f:42:11:f9:82:ac:54:81:1a:84:0b:5d:
83:8d:f3:8c:6e:21:d6:b0:fb:e8:f3:37:56:5e:da:
ec:de:8f:80:a2:ea:62:4b:e7:18:8d:f2:09:0d:79:
90:5c:da:a6:21:f9:2f:c2:83:42:20:cb:38:4a:4f:
ae:8c:b6:62:86:56:0e:33:23:5b:69:c8:d6:d3:48:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:3D:2E:5C:08:49:E2:D0:DB:1D:CB:CD:83:F4:78:2A:1C:87:75
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:05:54:d7:90:d0:4f:64:87:ef:01:b3:0e:f3:8e:72:f0:
b9:7f:ad:bd:6e:df:1e:56:b5:73:ba:2e:6a:57:9b:38:84:f8:
3e:af:6c:d2:aa:6a:2d:32:03:22:03:77:66:7e:20:d6:b4:69:
31:5d:7c:ae:3b:c7:ba:64:c9:a5:a4:56:5e:d8:81:b3:0a:cf:
ed:12:53:b4:5e:1c:fa:87:f0:11:fb:e5:7a:62:76:12:41:bb:
2f:28:6f:99:5f:92:40:f6:a7:90:b9:e5:c1:d3:cf:82:94:03:
77:95:1a:d3:cb:ad:7b:31:16:bf:64:22:f4:b4:60:3c:b8:2e:
a2:17:dc:a8:1a:f8:06:a3:23:b1:62:9e:e7:ca:79:d0:22:d1:
c1:8e:dd:22:f2:9e:c7:b1:2b:93:bf:fb:67:21:56:40:1a:b5:
d1:d8:b3:af:64:ad:ad:47:97:5f:10:f4:2d:3e:18:c7:cc:26:
4e:f6:14:05:a9:8d:a4:2b:34:a3:a1:e8:78:8f:d8:42:85:b1:
1b:37:6b:be:6c:9c:3c:8f:33:4c:04:4f:fd:39:92:74:b7:97:
07:4b:27:82:61:91:5f:56:72:19:be:00:55:cc:cd:db:d2:12:
e6:6f:d0:ac:63:b2:2e:c6:d1:f5:d5:34:d6:c1:cb:39:86:a5:
a6:cb:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:46:14 2025 by rpki-client