Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
File: hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft (raw, json)
Hash identifier: pxgc63Y3etV6dL9+fsWgjjXZl95R3FonTsx1WqYBJpw=
Subject key identifier: 12:02:A0:96:91:4E:29:39:2B:75:46:06:E6:DB:67:85:91:76:20:74
Authority key identifier: 86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
Certificate issuer: /CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Certificate serial: 0199FBEBAB78C1816D33DDE07BD851D30CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl (hash: pKj3zTxu14Mec0y4wZpr+CzImYtUE2LANJDsgKT1qy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ab:78:c1:81:6d:33:dd:e0:7b:d8:51:d3:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8619fc9099ce23ea5a3a8f199c53f91428878705
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=1202a096914e29392b754606e6db678591762074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:55:e8:f7:24:86:bd:36:37:a7:03:7a:a9:
f0:c1:00:10:5b:8e:6e:00:3e:68:94:28:3a:9b:b5:
5a:9e:44:f9:43:fa:2c:4b:f4:d1:a5:8e:8c:7b:e7:
e1:3f:1b:53:5a:eb:0b:cf:ce:0a:8d:2c:6b:e0:25:
01:6d:90:79:51:64:56:7a:4d:2f:94:b6:d3:81:7e:
0a:cb:37:a3:35:45:ec:12:51:6a:94:dd:5a:e9:1e:
ed:5d:4c:58:28:59:f1:ca:65:fd:a6:71:0f:65:39:
2e:c9:4e:5f:e8:61:87:49:e6:da:03:d5:cc:aa:b2:
f4:66:b6:da:aa:14:b3:54:e4:b6:3e:c8:05:68:99:
0e:1f:5c:0b:0e:1b:d5:bc:eb:8c:65:4b:54:3c:b1:
1a:39:8e:13:96:3f:5f:98:51:db:5f:1e:cd:58:f1:
62:a6:75:d1:42:62:7a:2c:00:69:39:b2:58:22:16:
7b:c1:27:90:18:eb:40:e8:62:73:cd:c1:f7:cd:93:
0f:d5:16:fb:f2:cd:fb:e8:58:a2:9c:03:9c:8e:4b:
e5:a4:30:2f:fe:d3:b8:0b:58:39:bd:f5:7a:df:e9:
7e:4c:0e:a8:ab:29:a6:8f:da:48:15:8d:e6:92:82:
05:67:0b:dc:4f:ed:8c:68:31:e2:57:cc:3b:bc:21:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:A0:96:91:4E:29:39:2B:75:46:06:E6:DB:67:85:91:76:20:74
X509v3 Authority Key Identifier:
keyid:86:19:FC:90:99:CE:23:EA:5A:3A:8F:19:9C:53:F9:14:28:87:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhn8kJnOI-paOo8ZnFP5FCiHhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ccf3b0-adfd-4ff4-aef0-b3f9910ee90d/1/hhn8kJnOI-paOo8ZnFP5FCiHhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:17:9e:b2:62:10:33:53:14:73:a4:fa:7f:9f:a2:1a:5c:
81:e4:d6:79:d3:13:e6:55:97:81:4f:06:79:bf:b9:42:13:41:
07:43:3f:73:cd:e6:27:64:ac:fc:ee:80:fe:9b:25:35:30:c0:
15:0a:9a:d9:62:a7:6e:e7:a0:05:28:f2:37:e0:b0:35:c7:f3:
59:e7:81:a8:45:6f:6c:59:7b:fc:08:bc:72:ee:95:e1:8b:6a:
58:04:3c:34:59:45:39:fd:56:0f:e4:cf:96:bc:11:b5:83:0a:
62:d8:59:58:45:72:b6:77:cd:8f:17:17:27:fc:3e:e3:37:0a:
0f:e9:15:ad:81:f0:c9:e9:05:1c:bc:7d:ef:8b:20:98:d0:6f:
aa:95:f7:d3:6a:d9:ce:35:f0:39:04:de:06:fd:69:80:97:f9:
bb:6f:f6:b7:00:83:cc:47:54:c0:44:c0:c9:af:2e:6d:1e:ce:
39:25:21:5b:36:82:c5:07:3f:8e:7b:fd:78:78:08:3d:0f:93:
d3:69:ee:23:83:67:b9:f2:c5:73:07:ee:f5:ac:85:12:c1:eb:
0e:1c:90:78:18:ae:2e:5f:e3:36:ed:c9:b1:87:67:f6:31:62:
2b:10:e5:04:df:39:76:64:26:d1:cb:41:8b:b6:80:59:c4:76:
17:1c:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client