Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: LMNHp4umsXqu3xgVIuOHs3w/Csu+OxcDptYCRyQ+5ZI=
Subject key identifier: 17:15:A2:B0:9F:23:9F:5B:C1:A6:D2:48:EA:B6:93:E0:C4:DE:58:D2
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 0197B5C4828F20E19AD2351B4656FEA59E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 09:00:43 +0000
Manifest this update: Sat 28 Jun 2025 09:00:43 +0000
Manifest next update: Sun 29 Jun 2025 09:00:43 +0000
Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: OBUHBm3ygJKmjZbroDCy1T6r2RcCM+wk0X8pa6DW7zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:82:8f:20:e1:9a:d2:35:1b:46:56:fe:a5:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jun 28 09:00:43 2025 GMT
Not After : Jun 29 09:00:43 2025 GMT
Subject: CN=1715a2b09f239f5bc1a6d248eab693e0c4de58d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:c2:4f:a0:b6:22:99:52:73:c4:4d:71:1c:
a6:1e:8f:f5:45:e2:57:84:46:c9:e8:6e:69:11:bf:
23:a6:31:1b:17:5a:2d:1f:5c:ec:3a:88:0a:2d:13:
18:66:56:bc:17:ae:24:70:46:d8:20:f3:19:c1:b5:
ef:90:48:0d:76:f7:89:91:13:b2:44:d2:6c:19:08:
a7:6a:c9:ee:50:36:23:8b:f5:3f:8a:61:27:a9:8a:
6f:cd:6a:67:a7:82:1e:6d:7a:9e:fd:d8:d5:1e:e8:
fc:2b:ae:40:b3:dc:09:ec:ee:1d:57:11:23:fe:fd:
fb:56:94:fb:2b:ec:f9:c9:40:13:20:27:bf:d1:2f:
27:93:e4:6a:5b:4a:f0:39:73:c4:78:4b:ff:a6:86:
ca:17:45:f0:20:9c:6c:a2:22:12:c7:fb:fc:1d:bf:
78:80:7c:71:aa:77:73:36:d5:f8:51:fa:e8:5e:96:
e7:ec:cf:6d:6f:dc:e1:7b:d3:0f:80:a7:40:b4:94:
7e:dd:90:54:c7:b6:1f:4c:63:68:a4:bb:90:d2:84:
e7:da:9d:9f:14:97:0a:b5:47:08:49:db:97:e2:21:
ee:f7:5b:7c:44:e5:b6:d1:0c:1e:36:19:6f:e2:bb:
72:b5:eb:12:b3:ca:10:17:5b:72:d9:92:fa:0e:e8:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:A2:B0:9F:23:9F:5B:C1:A6:D2:48:EA:B6:93:E0:C4:DE:58:D2
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:3a:5c:74:57:82:d8:cb:52:e1:be:d4:27:8e:b3:c3:0f:
22:51:97:35:ee:bb:50:1d:f1:ee:77:f5:d4:dc:fe:da:cf:2d:
f9:ee:b0:e0:c5:a9:52:6e:65:b8:7a:fc:3f:fa:de:bf:0f:cb:
20:09:22:43:7a:3c:3e:c4:f3:21:aa:36:7e:54:b9:f6:10:bc:
4a:63:dd:d0:66:52:f5:fa:5d:a6:06:24:1a:e6:54:13:dd:d7:
de:b4:50:e1:72:1f:bd:f7:62:57:34:57:49:4c:85:c3:8c:b6:
cb:f5:0f:5a:ed:89:67:81:e2:d8:a8:3b:4b:1a:eb:c8:f0:ec:
f4:e8:c5:e0:c2:57:dc:d4:0b:aa:cd:c2:65:89:b5:c6:27:44:
60:5d:1b:7d:ec:b5:b3:fe:fe:97:34:e3:80:4c:f0:01:85:4d:
e4:c2:59:e9:c0:8f:fb:76:dc:ed:12:5c:90:8d:4e:7d:a9:1f:
e1:18:7e:b7:7b:b2:2f:b8:b7:57:d7:f0:a6:a7:ea:9c:6e:1c:
d9:f8:ee:96:62:36:76:78:ee:bc:e0:69:8b:57:97:31:49:01:
a8:bc:c7:e1:54:80:f7:91:13:09:12:d8:5d:4e:4a:7b:82:4f:
dc:4a:f0:97:02:80:d8:ff:77:b1:6c:d5:5a:9f:38:5b:71:02:
8a:4e:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:35 2025 by rpki-client