Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
File: HHOn_DBLwC2AdEdtB121zc0tq94.mft (raw, json)
Hash identifier: APQLdQwzignPIeMrNoOfavfbzJbmERKDXcpn0zaiJPE=
Subject key identifier: F6:B7:6D:D3:F5:0C:0C:37:82:FD:EF:4C:1E:57:AC:40:77:F1:E3:13
Authority key identifier: 1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
Certificate issuer: /CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Certificate serial: 0196BB92AB83864F753AF9BEE9A634001A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:01:13 +0000
Manifest this update: Sat 10 May 2025 19:01:13 +0000
Manifest next update: Sun 11 May 2025 19:01:13 +0000
Files and hashes: 1: HHOn_DBLwC2AdEdtB121zc0tq94.crl (hash: fY0bCX905YdxnVigHIJ8NIEQJh+d0Qi64KKFmqR0dWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:ab:83:86:4f:75:3a:f9:be:e9:a6:34:00:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c73a7fc304bc02d8074476d075db5cdcd2dabde
Validity
Not Before: May 10 19:01:13 2025 GMT
Not After : May 11 19:01:13 2025 GMT
Subject: CN=f6b76dd3f50c0c3782fdef4c1e57ac4077f1e313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:9a:58:b2:ef:cf:59:bd:fd:2c:f8:60:50:
db:75:6f:4a:20:27:90:59:ab:1d:11:40:c0:74:51:
43:93:54:7f:fc:4d:2f:79:9e:49:5c:0c:0b:38:db:
d4:62:1f:cd:ee:ec:38:6a:33:d5:1d:a2:49:23:f1:
94:12:b2:64:9f:0b:7c:53:9d:b8:e7:65:fc:ea:61:
ee:4b:68:25:cd:8c:2d:7e:08:e4:6f:2d:8c:0c:74:
84:21:9d:d8:10:1a:9d:95:09:f6:31:e2:90:93:b2:
44:73:b5:0e:ce:f9:29:3f:84:a3:fd:f4:28:60:36:
7d:5d:08:14:83:2c:09:93:c2:16:b9:6a:e0:6c:ee:
9a:b3:c0:b5:8b:4c:54:a7:24:16:fa:0d:7e:bf:e3:
62:f4:f8:94:a4:5b:9a:48:ae:c8:76:13:4b:dd:9d:
75:86:95:f8:d3:f7:37:31:01:6a:58:a2:ed:41:29:
18:39:26:84:dd:62:5e:88:de:9d:fc:2b:a4:05:1e:
bb:98:7d:8d:e3:41:6b:c8:1b:70:ef:24:3f:52:65:
c2:d2:bf:b8:d0:68:e6:60:ed:5d:a4:49:b6:ef:41:
69:84:2d:bd:3f:f5:ec:9e:a9:89:63:05:4f:25:01:
27:8a:20:99:0f:fd:4f:e0:4b:ed:29:62:a2:d9:9c:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:6D:D3:F5:0C:0C:37:82:FD:EF:4C:1E:57:AC:40:77:F1:E3:13
X509v3 Authority Key Identifier:
keyid:1C:73:A7:FC:30:4B:C0:2D:80:74:47:6D:07:5D:B5:CD:CD:2D:AB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHOn_DBLwC2AdEdtB121zc0tq94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/810c72-d416-4a14-8aca-a8faeeb7ee52/1/HHOn_DBLwC2AdEdtB121zc0tq94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:19:bf:68:a9:14:78:43:5f:e6:28:8f:17:fb:36:80:f8:
d2:a7:1f:ab:26:41:cc:b0:36:08:f1:e1:fb:74:f9:f4:73:76:
63:ff:f0:e7:06:2c:31:af:69:9b:10:1c:06:55:26:4c:6d:1f:
bf:5c:13:e9:1d:91:9a:f6:d2:b9:b7:71:6b:88:c8:0e:52:a7:
0a:22:fb:e8:f7:a8:e8:f4:19:96:db:84:e5:67:dd:b2:ef:ae:
cd:c9:8d:c3:ed:13:8c:8a:d1:06:ee:00:0b:8d:f5:b5:06:d6:
33:4f:c4:80:48:41:69:22:54:8c:0e:0d:5b:7b:4c:94:59:f8:
31:6f:e9:1f:8e:51:a0:20:bb:8e:25:fa:c1:d6:94:57:e6:54:
7e:10:43:79:47:7e:aa:6d:5e:25:88:ea:56:de:92:80:49:a7:
8f:ec:84:a6:1e:1f:72:4d:70:ee:14:71:90:87:d4:de:40:1b:
5f:f5:d6:bb:e2:48:33:0d:07:f8:e2:74:76:f6:97:db:04:c2:
3b:d4:e9:4f:c4:9d:85:e4:33:23:3d:b4:3b:da:fa:fc:65:72:
75:c4:58:a3:d9:37:9e:6c:b3:55:91:c9:e0:f4:c2:27:1b:38:
e8:35:43:cc:51:83:56:37:75:57:c9:3f:10:db:88:44:00:c9:
a8:73:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:24:25 2025 by rpki-client