Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: TbsARnL0Hg+jZvw45YshKKvjVhUDxuEP0wNURO7FHXY=
Subject key identifier: 48:6B:BB:63:58:26:DA:F1:65:C6:06:BA:53:B4:34:66:DE:F7:16:FB
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 0197B7455BC2805CBF0D7EA11F3596B581FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: 0186
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: OQXtk0QvL5lARG4za+ZmE4NszmzXBY3GRhfmGXqYTi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5b:c2:80:5c:bf:0d:7e:a1:1f:35:96:b5:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=486bbb635826daf165c606ba53b43466def716fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:80:62:99:0d:ef:ea:10:07:2f:69:45:bd:
4f:52:24:b9:00:ac:14:1f:4a:97:2b:32:3d:b2:b1:
86:4d:aa:41:f4:9d:fc:ac:4f:28:1d:66:dc:92:8f:
9e:2a:9e:99:4e:65:20:b2:cd:0f:74:0c:ad:00:d8:
de:ed:5a:fd:f5:4d:14:43:c9:1d:3a:d5:c7:c9:59:
a6:75:b7:24:1b:9a:b2:b8:be:a4:66:34:65:c5:53:
4b:6e:ce:af:be:c1:35:5d:e8:36:b8:48:6e:c0:c6:
7d:94:21:9b:84:f9:39:46:a1:ae:2e:e2:32:37:c3:
65:a1:88:75:43:8b:08:c6:1a:a4:f3:82:b6:25:79:
e7:38:53:73:90:bf:1a:89:0a:3c:b4:5c:32:3e:bf:
9b:d3:e6:9e:fe:64:eb:ff:90:58:3e:3e:6e:46:ca:
40:f1:c7:c5:6f:20:f9:64:31:56:9b:bc:06:09:0a:
78:5f:9b:32:e5:1e:10:49:21:34:db:3f:f2:df:6f:
46:cf:f3:e8:26:e4:14:0a:ca:b5:e8:1d:af:75:1d:
db:d5:71:9c:8c:6c:00:96:91:c5:f2:5c:d6:be:bb:
46:3a:6c:6e:6c:df:a2:73:89:e3:3f:b6:80:68:b5:
8a:f1:83:74:e7:86:d6:85:64:da:27:e9:95:99:81:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:BB:63:58:26:DA:F1:65:C6:06:BA:53:B4:34:66:DE:F7:16:FB
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:91:5e:b9:26:c8:50:eb:23:4e:a8:be:79:65:0a:2f:b6:
d0:c7:6c:ef:8d:41:d8:2d:57:19:a4:76:be:51:15:fb:97:67:
36:81:30:02:95:91:9d:61:e5:ca:f2:f5:e6:35:9a:c6:48:99:
1e:f0:e0:bf:8f:73:5d:0f:a9:99:56:49:77:00:38:76:e9:1d:
a6:96:a7:0b:bc:f1:00:c6:fd:22:84:da:15:3e:25:a5:c6:55:
67:31:8c:35:8b:98:ce:cf:ae:a1:88:91:f5:7f:20:ea:bc:f7:
7d:c4:0d:72:73:89:67:2f:48:27:67:be:e8:9d:5e:0e:82:03:
0c:ee:f1:d6:17:b8:68:fa:96:fd:b4:ca:df:65:52:6e:5b:ed:
61:75:db:ec:b0:22:cf:7a:2c:e4:7b:75:96:b2:3e:b9:ea:80:
72:96:5f:c4:b4:2d:cb:e2:0c:74:ab:dd:88:99:b7:19:f7:96:
f9:fd:e0:e1:d5:1f:25:54:c7:d6:d5:3d:1a:d2:55:17:7a:02:
bf:30:6b:a7:ed:af:66:61:7a:f7:97:ef:57:ba:6c:b7:a0:0f:
22:9b:48:26:fc:be:05:a4:c7:f6:4f:40:fb:a8:32:41:0c:32:
ab:02:b5:85:50:e9:ab:db:42:1c:28:17:cc:66:fb:bf:e6:30:
f3:60:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:13 2025 by rpki-client