Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: x2XJMT+11QJPJYiaqWMJXrdtqEk+eLqNSCcNKBvxfeY=
Subject key identifier: 87:4A:A8:99:E7:75:71:23:E5:59:23:8F:2B:2C:D2:36:63:C9:50:CE
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 0197B77C6BE15B2A85DB841785797E2C369A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 0DCB
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: NxWvT6hvphz0+UZGT+iBx9kT9JCbNRF3MPdmTz+yBfU=)
2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6b:e1:5b:2a:85:db:84:17:85:79:7e:2c:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=874aa899e7757123e559238f2b2cd23663c950ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:94:34:24:a3:fb:8c:23:8f:eb:2a:b1:68:
86:92:34:3b:ae:9f:f9:cb:a7:b5:dc:a8:77:b2:39:
c3:49:34:b0:64:a2:2b:4d:8a:33:a7:d8:aa:f5:aa:
b7:8c:2a:50:9a:ea:b7:66:c1:d8:bb:9e:21:f4:5b:
7c:8f:3b:04:36:1f:3a:30:3a:4b:36:a6:b1:f0:c8:
5a:e1:23:ef:de:97:0d:bc:ad:cb:f5:92:04:4c:f3:
a3:5d:5a:35:7c:64:ed:46:22:9e:99:16:a9:da:38:
74:27:9d:f8:5b:31:ff:97:a0:6e:54:d9:6a:6a:3d:
6b:0f:8b:6f:72:f6:d7:30:4a:3a:8f:21:89:bb:17:
54:a0:6e:ee:57:66:ef:5b:e5:1e:6e:1f:ea:45:38:
ef:ad:92:cb:27:ad:17:c3:4d:a1:e6:23:1e:2a:b3:
c9:0d:b1:e5:a9:64:f9:1f:16:00:22:40:54:5e:b9:
8a:41:26:d1:61:24:c9:47:de:1d:6a:9a:8f:d7:b2:
af:40:4d:79:7a:9a:cb:0e:61:09:b3:d6:33:8a:b5:
f0:01:89:53:f2:71:72:e7:27:47:4f:e5:14:24:66:
c7:cd:04:de:d1:32:46:9f:34:a7:7b:5d:59:0a:ba:
21:69:52:a5:c3:02:1e:1a:1b:29:f0:a6:a6:9a:17:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:A8:99:E7:75:71:23:E5:59:23:8F:2B:2C:D2:36:63:C9:50:CE
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:18:f0:e2:c1:67:a8:49:26:c0:88:c7:c1:d3:88:ed:6c:d6:
4e:95:fe:f1:d0:ea:af:b3:7f:cb:8b:10:37:71:41:51:e6:b3:
d1:99:99:81:4f:0b:79:d6:a9:9e:f6:f2:e1:a2:86:e9:b5:4f:
c1:3a:2c:38:02:59:43:51:cb:c6:00:61:38:68:10:46:4e:a3:
fa:dc:65:95:b3:c9:14:5c:2c:22:73:d9:97:fe:07:d2:89:6c:
82:f5:52:44:c7:c2:04:da:cd:d7:95:81:45:0a:42:24:01:4a:
de:cf:8f:93:97:06:24:d9:41:d2:87:ad:fa:53:9c:d9:bd:48:
59:2c:ce:7c:cf:61:46:f0:55:dc:25:59:01:e1:b5:b0:7d:f1:
80:5c:e9:2a:69:17:7f:eb:05:4f:0d:bd:3e:34:e2:17:4f:45:
a8:42:07:58:98:f0:c0:85:f1:f7:0b:1e:f1:ae:ea:bf:70:d0:
f2:06:13:80:60:65:ab:4e:7a:dc:9d:29:95:a1:90:8f:c5:69:
4f:75:ea:1f:52:20:31:a8:e4:96:db:56:c5:c9:48:e7:31:71:
58:e2:5e:67:00:4b:fd:54:40:50:48:32:27:4a:17:e1:1e:ec:
59:a4:24:3f:09:c4:32:61:6a:ae:32:7f:b4:18:25:fc:08:15:
a0:45:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:17 2025 by rpki-client