Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: GVOCv7VYMXM2dZxnSjcmVRP8eu+eHMrakPaySkjzYj0=
Subject key identifier: F5:27:1F:2E:5E:21:E7:1A:BC:E7:27:58:BB:F8:A0:DF:12:E4:9D:61
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 01988B1028573F1E70D48B849BB24B1AD5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 1346
Signing time: Fri 08 Aug 2025 19:02:28 +0000
Manifest this update: Fri 08 Aug 2025 19:02:28 +0000
Manifest next update: Sat 09 Aug 2025 19:02:28 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: 57kSI60DFjXTdTmgbLkDQ63WOP2rn+XOatVoMCcJ1qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:28:57:3f:1e:70:d4:8b:84:9b:b2:4b:1a:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Aug 8 19:02:28 2025 GMT
Not After : Aug 9 19:02:28 2025 GMT
Subject: CN=f5271f2e5e21e71abce72758bbf8a0df12e49d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:34:1b:d8:95:71:d2:33:61:19:6c:9f:4f:
d2:32:21:fe:54:f3:d9:73:d1:b5:10:96:43:b3:fa:
fc:cf:69:a9:4c:1c:fb:3c:d0:e2:b2:cd:0e:83:6b:
10:be:42:a6:a5:f5:26:99:e7:42:90:1e:84:46:8f:
3b:8a:84:2b:48:6c:5a:78:01:ee:86:23:16:d4:e3:
f4:34:42:e0:31:10:7a:c0:03:f1:09:c6:ff:df:4d:
b9:82:47:ff:65:0e:ff:ee:96:5e:ed:1d:2c:05:7f:
71:78:ab:fa:70:94:9e:4a:f2:8f:62:07:ff:f2:2f:
6c:d6:ee:eb:e8:8d:22:ec:f7:40:eb:71:d4:8c:d5:
39:df:35:02:ac:ed:04:03:80:0c:6c:d6:8a:da:ab:
c8:6f:99:13:b2:6a:ae:73:6e:17:86:19:f0:47:25:
da:c3:9b:88:22:3e:fb:2e:6e:d8:ad:93:11:10:c6:
77:82:9d:db:29:28:7a:2e:35:ea:68:df:34:0a:5d:
c8:65:de:d0:00:37:91:a0:09:5d:b9:e7:82:79:b4:
e4:8c:12:ad:21:c2:e8:26:4f:25:36:e5:b0:8d:67:
0e:b7:66:9f:b5:f5:6f:b2:95:7b:30:a7:56:f4:dd:
fc:ee:d0:f8:80:ef:f4:08:83:92:e0:f0:91:5a:d5:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:1F:2E:5E:21:E7:1A:BC:E7:27:58:BB:F8:A0:DF:12:E4:9D:61
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:58:8f:b0:5f:84:08:2f:d3:af:36:fb:1e:01:5b:74:de:f7:
ba:84:57:86:68:c2:41:c6:10:11:b1:e2:c6:03:d0:93:12:59:
3c:e6:95:3c:fb:60:9a:59:47:71:10:8e:92:e2:70:f0:64:88:
78:17:a1:af:9a:65:a4:45:0d:75:e1:e1:cf:ab:d8:f3:40:00:
c1:fe:ea:b4:37:c8:b4:87:31:21:38:cb:23:03:5c:12:a3:96:
79:ba:66:d8:06:39:ca:48:71:5c:ae:c6:9e:57:fd:f4:8d:42:
c2:81:c4:da:3f:6f:ab:96:13:de:b2:ba:aa:a2:31:2c:bd:4f:
63:ec:a9:bf:2b:91:2b:df:28:b7:e2:78:e0:4b:a4:4a:8e:40:
55:ed:8b:fc:58:72:74:64:e6:94:72:fb:dc:fa:6d:e2:09:6a:
20:a8:8d:fc:6e:88:67:0c:0d:e9:be:42:d1:3a:70:5e:8e:36:
cb:ff:2b:6f:06:cd:a4:dc:ea:e2:7e:24:03:5e:92:ca:f9:dc:
68:e6:d4:4b:ec:85:b5:5c:20:db:bb:a1:19:d3:67:77:fe:62:
51:5d:44:d2:65:6d:02:26:65:cd:d0:89:9a:68:b2:be:36:ae:
1b:ff:e0:44:cc:8f:15:4c:9b:f0:73:73:b8:9f:62:c2:eb:53:
a2:e8:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:40 2025 by rpki-client