Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: hsof+VTO+0WVPDPvxIO4HKU34+aAiiqLO1WqUFVZNDs=
Subject key identifier: D3:F5:C4:C7:72:98:36:C1:12:4C:C9:9C:90:F6:C4:AE:E3:8C:E9:08
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 01976F2C65EEB01073A13DE1A9C5978F962C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 12B3
Signing time: Sat 14 Jun 2025 16:01:09 +0000
Manifest this update: Sat 14 Jun 2025 16:01:09 +0000
Manifest next update: Sun 15 Jun 2025 16:01:09 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: 6uE7wXfhW6Klhkb0NMpn/hbnRS7ck7gKNM9nnAyI7iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:65:ee:b0:10:73:a1:3d:e1:a9:c5:97:8f:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jun 14 16:01:09 2025 GMT
Not After : Jun 15 16:01:09 2025 GMT
Subject: CN=d3f5c4c7729836c1124cc99c90f6c4aee38ce908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:b3:7a:73:9d:60:a3:ec:f4:2e:53:f8:39:
30:d1:18:9a:2f:6e:2d:a1:d9:79:0d:98:6b:58:a6:
b8:0f:e2:ba:5f:f4:35:80:6b:38:26:bf:6b:74:a0:
9e:5f:a6:20:cc:b8:95:41:d7:7d:30:ee:e1:60:9c:
f4:1a:9f:c4:07:84:41:92:f6:7d:92:f9:63:f2:11:
83:04:e6:33:c1:ca:0d:5f:e6:dd:0c:bf:bc:97:c3:
1f:fb:b1:d8:ce:a9:f9:2a:87:bb:5e:b1:18:22:7f:
a2:74:d3:40:4a:77:aa:76:c4:b3:6b:98:5b:a2:d9:
bb:14:c9:93:3f:e0:3d:a5:f6:73:72:f7:f0:5e:86:
4b:aa:02:23:61:56:54:c7:1f:d7:4c:a8:17:88:73:
1f:de:e1:e9:fb:44:78:19:db:4f:4c:4c:f0:da:49:
65:aa:7d:b9:bc:65:90:b8:7b:3a:fe:47:bd:bb:6e:
22:11:e5:41:d0:35:c0:a6:b3:12:b0:66:c6:d8:db:
63:72:45:7e:84:71:68:65:9a:eb:85:69:8e:bd:c2:
e0:24:43:64:4a:8a:1b:d0:6d:13:16:32:ef:49:ed:
c4:fa:82:a0:87:bf:a5:19:45:93:b6:dc:e6:de:04:
db:72:77:4e:e2:e6:c9:c3:21:d9:51:7c:31:d5:ef:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F5:C4:C7:72:98:36:C1:12:4C:C9:9C:90:F6:C4:AE:E3:8C:E9:08
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:f6:fa:72:e4:a3:4d:f6:3b:b3:9f:a2:a2:ef:96:bf:7d:
e4:69:46:99:a5:30:06:08:d2:7d:73:30:14:39:7a:a2:3e:ac:
8c:3e:52:f0:37:77:94:b0:41:c5:06:e9:f7:c8:ae:d4:15:5e:
3a:7a:de:27:1b:6e:2c:1a:fe:dd:ef:f9:57:40:ea:49:82:52:
5c:fb:00:79:d8:c9:5e:43:c7:85:06:65:70:be:8b:b6:a7:9b:
40:d2:ef:f1:a2:96:30:cf:05:74:bf:cb:26:50:1f:73:3b:a4:
02:1a:2f:e5:54:e8:db:6a:b1:f6:3b:a7:51:01:5a:fd:35:dc:
1f:02:a2:c6:60:8b:95:33:dd:c9:b8:19:a8:92:b1:9c:8d:3e:
8c:6f:a9:b9:71:ed:37:43:8b:3b:ce:2b:46:37:03:b6:1c:03:
ed:82:2f:fc:45:38:01:cd:13:9d:c3:85:98:66:04:95:45:e7:
68:8b:e6:e9:eb:ec:4e:f4:1f:d3:9e:d2:72:a1:ee:a1:08:0b:
f8:ac:9b:52:e5:33:fd:20:3a:82:88:f9:cf:0e:5f:72:17:2e:
73:10:99:14:c9:37:b1:7d:87:24:dd:86:34:bb:ea:8a:f5:f2:
70:8f:08:2d:7b:83:ea:48:52:4c:a3:c7:93:c5:d0:55:8c:93:
8b:71:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:43:23 2025 by rpki-client