Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: 8Nuaj5hw0zi3m2lQyQbFZPRsN306qbdNSy0Sz7eGz34=
Subject key identifier: E4:E8:A5:69:48:55:38:9A:C2:86:CE:66:B7:94:A7:5C:8F:B2:DF:3F
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 0198D65F56C1E7774D469F16C1CFFE4088FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: 02D1
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: 6leIbZXd0IpBVbaBT0lJMroibH4zfoL4IXl/WnjzAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:56:c1:e7:77:4d:46:9f:16:c1:cf:fe:40:88:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=e4e8a5694855389ac286ce66b794a75c8fb2df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:89:d5:62:2c:29:ad:f8:3c:32:be:34:6c:
20:73:76:4e:ca:fe:63:d9:79:6a:4b:db:fd:9a:02:
54:8a:2e:c2:b9:d7:65:e5:0b:77:1a:12:4a:e4:a4:
a5:30:a6:34:bd:17:9a:70:e5:97:ef:87:fa:85:95:
09:e9:63:18:8d:8a:d6:41:52:58:bb:e5:2d:0a:e5:
6b:c0:7b:53:21:fc:9d:c3:33:29:45:14:52:9b:6f:
4c:d2:2c:e0:09:35:6b:b0:9d:5f:52:d3:8a:59:e3:
13:ad:17:e2:ae:92:12:8e:dd:81:b8:59:10:ba:91:
02:e4:ec:9c:6f:17:75:f1:5b:4b:fd:fb:5e:ba:55:
ba:38:67:db:40:8a:e2:0c:e3:fc:d4:c4:9f:eb:e2:
d8:6d:84:01:a4:00:57:87:45:a1:a0:ff:5f:54:43:
2b:63:ba:6e:62:f7:36:5f:ec:b7:7e:e3:75:42:9c:
23:30:60:bf:59:bc:16:96:da:28:72:4f:d1:b1:ba:
d7:0b:11:ab:94:40:e7:2b:c6:3b:eb:8b:bf:72:90:
8e:d5:be:c4:d7:6a:71:2d:42:91:65:31:37:15:62:
12:c2:5f:f7:96:88:62:06:e9:0f:b5:ef:6b:b7:29:
64:26:ed:f7:59:46:40:a6:55:a3:ec:0d:14:86:0b:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:A5:69:48:55:38:9A:C2:86:CE:66:B7:94:A7:5C:8F:B2:DF:3F
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e0:61:dd:a5:60:b5:6e:25:06:01:99:23:2f:c5:ad:f8:2a:
03:1e:2a:e5:c0:71:ea:04:e7:57:6d:33:d2:53:08:45:b8:4d:
12:68:06:30:c4:d8:82:c1:28:a6:d2:ca:ca:ed:c6:85:07:1a:
94:8d:c4:5b:ce:99:1e:e8:7d:a4:a9:26:0b:83:3f:04:7e:a9:
23:5e:ed:6f:93:43:39:67:5b:15:7e:70:59:5c:b1:4b:c8:24:
ee:2f:b2:ae:de:0a:37:70:18:bb:e9:b5:6e:2d:59:69:1a:f3:
c7:fc:d4:d2:e2:c2:c9:29:b5:a7:ea:01:1a:6f:c9:9b:93:22:
9a:0e:ac:e8:d8:1b:9f:e0:20:49:ce:dc:6b:2d:74:e3:7b:f7:
4b:ee:34:fc:f9:c3:e8:d6:42:0d:c4:b3:54:12:82:f3:43:35:
74:23:23:95:05:9d:e8:46:30:6c:5e:e2:f6:0f:fb:b8:34:c8:
b3:4b:5d:9c:58:58:5d:c5:61:d9:f2:50:76:1d:f1:75:18:2f:
6d:6c:0d:de:86:9e:a6:4f:06:a9:40:53:71:26:c4:36:04:fe:
ba:0d:45:a7:3b:2a:88:9e:01:e0:f1:96:06:2e:3b:83:3a:b6:
08:c4:e3:c8:db:c0:33:59:d9:c3:60:a8:80:2e:98:5a:76:69:
92:7f:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:01 2025 by rpki-client