Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: uTGsWIiPnwNbjsLhf625VNEz9O08puSCc0osKn6fw7c=
Subject key identifier: CE:C5:28:8D:7F:D7:B1:E3:65:F8:65:BF:CD:6A:2B:A7:BA:2A:7D:76
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 0197B6A07427C79AE3D706FC491137AF553C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 023C
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: aKJMNGlvSuqiLbrNmMQ3H3YXKP6IfMb88tTn9giNwu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:74:27:c7:9a:e3:d7:06:fc:49:11:37:af:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=cec5288d7fd7b1e365f865bfcd6a2ba7ba2a7d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:1f:8b:b3:b0:de:8b:35:35:74:9c:57:6c:
8f:b7:d9:ef:31:e7:50:e2:75:61:21:86:84:79:49:
03:04:a1:53:4d:b0:d9:76:84:d0:b4:a4:2a:b8:05:
44:63:32:a0:09:78:e4:67:95:ee:e8:67:16:d0:f3:
81:25:1e:9b:e1:ac:07:a5:2b:52:02:f4:61:57:93:
c2:87:e1:36:25:5c:84:e1:55:c1:6b:85:e6:64:e5:
f0:7c:b2:90:ac:0a:2f:39:bb:73:fb:a5:48:37:99:
9a:eb:46:21:eb:32:e4:b1:d7:59:cf:dd:57:de:ed:
6d:c7:a5:5c:96:77:3b:f1:8c:81:3e:24:7a:66:7c:
6d:71:91:ad:e9:70:ed:e6:8e:c9:f6:14:b2:36:41:
70:84:97:4b:dc:32:ab:17:ce:44:af:8c:84:b9:0d:
c7:ce:cf:f1:bc:ae:39:c7:85:df:cf:e6:20:09:f6:
c5:a3:d3:12:7c:19:8f:f8:ec:1f:bc:70:95:bc:6b:
e7:5d:de:99:97:ee:33:23:4b:49:cf:d7:13:2a:a5:
4c:a6:a4:e2:62:c1:19:b5:ca:5c:37:cc:2d:5a:7a:
9d:27:68:40:7e:48:a6:91:e7:ed:37:33:dc:3c:b1:
85:c8:d4:5a:e3:af:7e:5a:6e:d1:53:e7:3d:23:7c:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:28:8D:7F:D7:B1:E3:65:F8:65:BF:CD:6A:2B:A7:BA:2A:7D:76
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:bb:87:f8:d5:b5:e4:b1:c8:f4:a8:2f:28:f8:0f:6d:7d:a5:
6e:b5:f3:ca:bf:20:51:5f:ee:04:4e:9e:83:b8:a7:7a:ad:14:
f8:da:77:cc:c8:72:6f:8a:b5:86:4d:63:ab:fc:40:e3:41:cc:
22:12:0e:44:d2:c0:bb:ee:d7:55:60:96:ea:b7:9b:92:0f:60:
9e:22:f3:6d:d0:c4:6f:05:54:61:08:7f:6b:f4:bd:f3:54:7a:
7f:da:49:0a:87:29:ec:d5:f3:89:97:6d:24:10:b7:48:89:bb:
51:d1:9c:e1:c8:b1:14:9b:1c:19:0a:bf:f9:d6:53:c3:3b:91:
4f:2d:ea:9f:6b:a5:9f:2c:20:a9:98:31:91:c9:2b:b1:3b:ef:
a7:74:fb:6e:d3:01:f0:eb:6c:3a:91:3d:9e:c9:82:5b:93:03:
62:83:15:a9:3e:3a:18:7d:f7:88:69:9d:ec:c8:8a:92:da:5f:
f5:a1:1f:cc:93:47:3a:2d:b4:c3:f2:14:59:6e:22:e7:e9:6c:
d1:33:df:3a:b6:2b:b9:7c:63:97:2b:d3:f5:db:c5:16:20:24:
18:3a:10:24:96:72:c7:2a:58:c7:7e:c7:49:e3:0c:b8:26:3c:
12:28:62:22:1a:47:83:5b:ae:d2:b8:48:1e:f5:e0:f6:8d:15:
6c:97:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:44 2025 by rpki-client