Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: aMorApQpTYO0snM//1UEndbT8moFOgKsAJfPZj0ZrJ0=
Subject key identifier: DD:E9:FD:D0:9A:A4:85:00:1A:C3:95:FA:A5:06:5A:AB:49:2C:BD:C8
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 0198D6980E23E85FC0FD7A2DCADDE7502CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 11F7
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: kmb1mSjpjyiGs5lG0W3T9OJF2HLmXK8C7oBesuGxI2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0e:23:e8:5f:c0:fd:7a:2d:ca:dd:e7:50:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=dde9fdd09aa485001ac395faa5065aab492cbdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:df:58:03:76:e0:b8:1b:75:e5:b6:1f:77:
80:52:2f:ee:9f:83:76:f1:bd:bc:29:95:16:8e:1a:
ce:32:aa:b2:13:32:67:ab:98:be:b9:ce:73:29:a2:
e6:2b:86:76:c5:c4:ee:c5:b4:b1:e0:49:18:e2:5d:
68:d0:2d:03:b7:e1:9f:71:31:68:dc:6a:ab:36:d3:
0d:1e:26:ea:a4:e6:4c:24:4c:9a:fd:5f:0e:2f:1b:
fc:b6:83:c3:01:42:b0:38:ae:cc:b5:4c:71:2b:d9:
76:6c:69:47:6d:95:25:e5:6f:7b:5b:c2:51:81:91:
91:e2:85:7d:1f:d8:a8:eb:99:7c:40:55:62:85:fa:
ec:e2:16:50:26:5f:13:05:5b:88:11:c6:67:f5:5d:
32:98:53:ec:d1:d7:47:d1:c8:02:92:56:3d:fb:e2:
12:d3:79:1f:b0:c4:02:48:35:f8:1f:c2:ef:50:fa:
71:34:12:a4:e3:2b:4a:2c:63:97:53:2a:5c:d0:e7:
a7:14:74:3c:b9:c2:81:21:a1:b5:78:50:31:55:a0:
31:37:f6:42:ea:65:7c:a5:87:32:96:1c:50:d7:29:
5c:00:8b:a3:3d:89:39:bb:2f:14:06:9a:51:df:11:
e0:63:7a:68:3b:af:7d:34:15:f5:9a:3f:ae:ab:5f:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:FD:D0:9A:A4:85:00:1A:C3:95:FA:A5:06:5A:AB:49:2C:BD:C8
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:28:97:93:fd:d0:6b:d4:0f:d4:da:7b:4c:b0:59:1c:18:76:
81:02:bf:47:23:f5:b1:6b:be:ef:69:72:cc:c6:d8:88:da:2a:
b8:6e:39:ce:4f:04:79:3f:39:e8:95:d6:17:8b:96:9e:fe:b8:
f1:4e:c3:e6:2f:cd:08:21:1d:bf:44:97:a9:bf:8a:ab:9d:82:
c1:11:04:8e:7f:1a:91:e7:34:36:58:9c:5f:6a:80:8b:23:e6:
ee:46:c5:52:d9:61:31:ea:0c:4b:6a:60:bf:1a:c9:16:a9:4b:
71:9d:1b:56:5a:fb:86:d9:82:f2:b5:a3:60:67:24:f0:e4:d4:
d2:21:19:cc:f4:27:f6:be:00:07:8d:71:cc:20:fe:ab:5e:0b:
49:0e:40:48:43:82:2c:b7:d7:fd:de:4d:91:b5:59:bb:4b:83:
5f:1a:86:59:52:ce:5d:2e:22:83:fe:20:65:f1:45:95:7a:34:
9a:23:e3:28:63:6b:49:7e:d5:ca:ce:06:f9:62:e6:0a:88:12:
20:6f:06:cf:31:5f:aa:41:e7:d0:58:ec:28:1d:6d:80:5c:ed:
4d:8e:08:09:7e:1d:94:ad:a4:89:75:57:90:4a:66:35:22:d4:
97:ff:38:48:e3:f2:c4:4f:ea:8a:b9:2e:6f:0a:1b:c0:3b:94:
73:5a:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:44:50 2025 by rpki-client