Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: OMGSRoqIoLBgo/2SgK+f6st4/bBrpZpFRGnKDyaqwe4=
Subject key identifier: DD:6B:11:84:59:99:14:4B:A3:8C:31:9A:5B:87:21:0A:F5:E3:5F:04
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 0197B6A04FA20622E3876A32D76F41704762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 0911
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: MGSQkz8n5hbizQLkOfH97bcYKPIJ7mesNfA/37C+IgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4f:a2:06:22:e3:87:6a:32:d7:6f:41:70:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=dd6b11845999144ba38c319a5b87210af5e35f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:0a:fa:8f:a9:54:1e:62:a6:82:c1:f1:40:
0b:f2:fe:90:56:df:2a:af:19:8c:ed:55:06:b5:d3:
4b:f9:2f:0e:f7:fd:3d:a0:6a:28:6d:94:b9:97:0e:
68:bc:34:29:98:1b:c0:e0:70:76:75:c8:d7:37:a6:
e2:08:66:89:ca:65:a6:8e:da:4d:99:08:87:b3:72:
bc:1a:64:9e:3b:d8:9c:2c:ee:30:48:51:b1:40:75:
3c:fc:68:9d:75:ba:09:90:10:0a:ee:79:47:4f:02:
78:cb:7d:86:fb:15:7d:a5:ba:cc:d3:ea:a7:b1:53:
2d:92:12:95:c6:b7:e8:b0:d7:e3:dc:33:d0:55:a9:
75:3a:94:f0:d2:0c:9c:f3:ed:8a:67:d1:54:a6:19:
05:91:eb:85:22:58:bd:b8:8d:ef:ee:48:58:14:98:
3c:6d:4c:eb:e9:00:57:85:85:2b:47:59:2b:2e:c3:
5c:e2:48:22:9e:17:49:c6:87:da:10:7f:c8:0c:9b:
b8:a3:ff:fa:e8:a7:4e:0c:18:10:a9:3b:40:79:6a:
dd:59:3f:84:e3:54:a4:d2:cd:6d:65:16:6a:b4:69:
1f:83:4e:de:10:22:03:6b:af:6a:b7:9c:3e:38:9e:
ad:30:4d:13:64:28:8b:51:24:68:2a:e4:b1:17:92:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:11:84:59:99:14:4B:A3:8C:31:9A:5B:87:21:0A:F5:E3:5F:04
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:88:0b:cc:69:49:28:b3:dd:aa:0e:6a:30:eb:6e:38:5d:07:
d7:fa:d6:3f:1c:64:1d:ef:ab:03:a7:55:36:dc:db:d4:89:df:
f3:34:7a:2a:23:ad:43:83:a1:29:84:d4:21:9b:a7:a9:32:52:
f4:60:ff:eb:bc:d4:7f:b8:5e:2f:8a:b7:d8:5e:16:2a:5d:58:
99:f0:40:4d:9d:02:88:f3:25:b6:c0:48:b8:f1:45:9f:6e:62:
5f:61:ea:b4:08:a3:a7:bb:c2:59:f3:73:ba:3c:d1:cf:b8:4d:
76:57:1d:b7:c0:28:98:de:8e:d7:00:b3:02:be:c0:63:e4:3a:
62:93:db:2f:c7:0b:2a:2d:f6:e8:d1:f8:30:e9:35:99:97:77:
d1:e3:0c:72:91:01:ce:f3:30:18:f9:e8:c4:be:87:c3:cb:57:
96:be:6f:cc:e7:76:a5:81:4c:17:03:f0:2d:74:2b:d0:dd:74:
53:fd:55:56:a2:d4:eb:75:bb:8b:96:91:d8:20:8c:6e:e4:7f:
36:4d:f5:1e:e9:84:41:63:ab:33:46:27:84:a5:69:94:07:4a:
37:94:fc:fa:fd:47:65:48:d0:4a:46:6a:67:ba:31:9c:62:70:
e2:ce:2e:7e:6c:ca:7c:48:26:23:16:e5:bb:f5:c5:11:11:d4:
95:7e:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client