Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File: HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier: RpuOa+9lS5PI1V9VtKckra+9/RwUDyV9dOci8gW8B7s=
Subject key identifier: 24:6F:10:79:5E:A9:D5:C4:4E:D4:D5:F2:FF:88:45:98:F3:CD:5F:39
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial: 0198D472AE8458EE4B1FA57CF00656AD2999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: lrpiEn8oBo989hJ0A8lSqBc4G/d5hnLTlwceBChUwm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ae:84:58:ee:4b:1f:a5:7c:f0:06:56:ad:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=246f10795ea9d5c44ed4d5f2ff884598f3cd5f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:af:14:f0:69:0d:e0:8d:29:7f:ef:2b:b2:
40:ad:ae:ff:ba:88:53:72:de:2d:60:ab:1d:ec:36:
28:69:74:14:c6:5a:4c:9d:d2:18:4a:d0:d5:18:b2:
47:5c:95:1e:0d:11:14:1d:12:6e:00:62:cb:7b:0e:
11:b9:0c:87:ad:a9:10:88:85:97:d1:51:d4:94:d2:
60:ce:2a:ab:c2:24:11:64:15:14:9e:cc:19:15:c6:
1a:f3:f0:c7:34:63:43:11:7e:d1:12:49:47:4f:48:
7e:a7:a4:50:3c:59:4d:5c:51:30:5e:31:68:06:6d:
86:60:3e:96:c6:b0:8d:12:9c:6b:b5:e7:c1:73:92:
37:60:48:ad:10:5f:b0:b9:d2:a1:45:9a:69:e5:ef:
21:9f:a1:e1:26:9a:6f:77:9a:79:0f:d8:8c:aa:b9:
ea:0a:45:e9:ad:3d:3d:27:b6:d7:41:35:79:e6:b3:
a4:f4:5f:56:67:97:8a:f1:63:58:e8:d6:76:7b:d4:
ff:a1:74:03:bf:6b:79:9c:26:f1:df:9f:b8:ed:65:
46:94:ae:48:67:22:ba:75:e4:c6:42:39:18:32:55:
5d:95:16:e9:af:3f:9b:ca:74:d0:ab:a2:72:07:5a:
1d:7f:2a:02:04:ae:2a:7e:58:1e:a9:72:b5:b6:33:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:10:79:5E:A9:D5:C4:4E:D4:D5:F2:FF:88:45:98:F3:CD:5F:39
X509v3 Authority Key Identifier:
keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:45:a3:ac:36:1b:c7:1f:8f:02:b6:15:c9:a0:60:6c:ef:
68:8a:9f:2e:ba:44:c2:9e:ee:41:e5:0f:d9:ac:d2:69:f0:63:
79:a3:29:94:b0:3f:d8:74:0d:44:15:52:92:76:19:19:4e:bb:
f9:57:3d:2c:f9:af:99:71:70:8b:2b:d2:6b:f8:1c:e8:f1:14:
05:a2:82:f8:18:24:ad:19:a5:0f:5a:75:57:71:27:dd:50:0c:
63:a7:bc:22:21:24:ab:4d:e7:c5:0b:bf:72:45:00:00:a2:d3:
52:c2:fe:d4:8e:4e:7c:92:8e:40:e4:e2:28:22:ae:53:c9:d9:
02:78:46:c6:3e:72:b3:23:80:18:04:c0:9f:70:1b:40:32:cb:
89:3e:78:a1:a4:c3:3a:6c:d4:dd:16:33:bf:34:cb:fb:9e:59:
1b:b0:d3:7c:8c:09:02:44:cf:7e:4c:54:1f:1f:e9:8d:8c:87:
dd:9d:99:77:5c:d2:67:7b:14:98:12:eb:e7:c6:26:7b:22:2a:
3d:b3:a2:90:e1:89:8f:1c:87:81:90:ef:0f:57:4c:af:2d:0d:
c5:1c:d2:8e:ca:80:8d:71:98:07:72:28:02:6a:af:f0:a8:f3:
ef:4d:73:b6:cd:76:c1:ab:b9:c9:4a:3f:21:7c:c9:cb:2a:53:
fe:85:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:44 2025 by rpki-client