Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: CRKZZcz08bKG1NV/27pZGMS6cjj5g3eehQd0LrDcmos=
Subject key identifier: A8:38:33:69:5E:47:62:3F:A7:90:EE:8C:50:E5:EE:40:AA:32:2B:03
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 01976E508EF709C97566B9E1E2F6EBE752DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 08D3
Signing time: Sat 14 Jun 2025 12:01:02 +0000
Manifest this update: Sat 14 Jun 2025 12:01:02 +0000
Manifest next update: Sun 15 Jun 2025 12:01:02 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: Tg0du2ekx84V//h8Iq5G7u2VDEuADz6Bh8hRsIoGBzk=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:8e:f7:09:c9:75:66:b9:e1:e2:f6:eb:e7:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Jun 14 12:01:02 2025 GMT
Not After : Jun 15 12:01:02 2025 GMT
Subject: CN=a83833695e47623fa790ee8c50e5ee40aa322b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fb:32:2b:83:a2:e6:c5:54:4d:6c:08:72:15:
ba:b1:7f:b8:63:3b:33:f9:01:ae:4d:70:cc:8a:1f:
1f:8f:ac:20:b6:ee:57:a9:37:52:23:7d:f0:a2:d4:
bc:96:eb:d8:b6:ab:71:a6:33:2d:bf:3d:4d:1a:d6:
fe:26:7a:a1:3c:df:1f:e6:47:d1:f3:24:4b:b9:c9:
9c:f2:a4:41:aa:2e:28:8d:54:50:e6:49:f0:79:b6:
2c:5e:f5:c1:3d:a8:f7:94:1d:d3:e9:3a:4c:d7:f1:
40:b9:ce:4c:a4:af:af:83:b1:6e:d6:f9:19:24:66:
47:9f:18:66:3b:60:19:97:00:83:55:cd:fc:e7:1c:
e1:e6:50:3c:ee:c0:e6:19:3f:aa:e4:6c:70:43:fb:
a7:10:42:f3:bf:9d:37:bb:cf:81:8f:cf:4c:26:7d:
e0:df:bc:5c:33:34:46:ad:06:b0:52:00:0a:38:c0:
dc:c1:34:b0:eb:98:ba:83:3a:34:63:cb:bf:78:16:
56:fc:42:89:3c:6b:94:04:ff:65:4b:49:3d:f1:65:
b6:d6:d8:1b:8b:f8:68:0d:d0:35:04:7b:6e:a3:d2:
e9:2a:71:68:70:0b:eb:55:da:7f:68:bf:ad:fb:e0:
b4:b1:4f:a2:74:c8:2f:fc:84:bf:39:64:18:f0:1c:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:33:69:5E:47:62:3F:A7:90:EE:8C:50:E5:EE:40:AA:32:2B:03
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:aa:c9:2b:79:d0:40:48:74:c5:3e:03:c4:88:58:5c:e6:
85:e3:4c:c2:97:df:44:f0:f0:37:6a:b4:0f:f9:8d:81:01:9c:
ed:29:62:f7:df:d7:5e:1a:62:6c:13:cf:4f:6f:36:f7:d3:80:
3e:d7:8c:26:c5:67:02:84:b7:94:00:20:b9:a4:73:2b:97:f7:
b4:58:40:db:f8:0e:b2:54:c9:5f:4a:70:ad:64:0a:85:cf:64:
44:dc:25:d1:ab:cc:36:d2:ef:6d:4d:46:2a:90:d8:2d:12:82:
07:c6:e9:01:a0:23:50:da:47:4b:fe:43:97:f8:bc:b9:68:0a:
bf:51:09:a5:ac:27:a4:25:4a:fb:27:03:36:c3:a2:23:a6:af:
74:e0:a7:52:f3:8c:a0:87:42:27:cb:de:29:79:19:e4:fc:8b:
3b:2f:de:82:8a:b1:6e:b1:8b:30:9c:8b:ed:85:9b:78:59:0d:
4f:a3:93:98:ef:47:7a:8d:3f:00:8f:2b:ce:67:07:73:51:97:
f3:42:f5:d7:0a:3b:ab:70:0d:1e:97:3e:fe:64:73:2e:0f:6e:
25:19:cc:a9:16:d9:18:0f:86:7b:20:02:35:be:f1:fa:67:a1:
9a:e7:a0:6f:64:db:22:0a:08:0c:19:fe:8b:74:cf:96:2e:cc:
8f:97:70:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUI73Ccl1Zrnh4vbr51LfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjUwNjE0MTIwMTAyWhcNMjUwNjE1MTIwMTAyWjAzMTEwLwYDVQQD
EyhhODM4MzM2OTVlNDc2MjNmYTc5MGVlOGM1MGU1ZWU0MGFhMzIyYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vsyK4Oi5sVUTWwIchW6sX+4Yzsz
+QGuTXDMih8fj6wgtu5XqTdSI33wotS8luvYtqtxpjMtvz1NGtb+JnqhPN8f5kfR
8yRLucmc8qRBqi4ojVRQ5knwebYsXvXBPaj3lB3T6TpM1/FAuc5MpK+vg7Fu1vkZ
JGZHnxhmO2AZlwCDVc385xzh5lA87sDmGT+q5GxwQ/unEELzv503u8+Bj89MJn3g
37xcMzRGrQawUgAKOMDcwTSw65i6gzo0Y8u/eBZW/EKJPGuUBP9lS0k98WW21tgb
i/hoDdA1BHtuo9LpKnFocAvrVdp/aL+t++C0sU+idMgv/IS/OWQY8BzRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg4M2leR2I/p5DujFDl7kCqMisDMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjCqySt5
0EBIdMU+A8SIWFzmheNMwpffRPDwN2q0D/mNgQGc7Sli99/XXhpibBPPT28299OA
PteMJsVnAoS3lAAguaRzK5f3tFhA2/gOslTJX0pwrWQKhc9kRNwl0avMNtLvbU1G
KpDYLRKCB8bpAaAjUNpHS/5Dl/i8uWgKv1EJpawnpCVK+ycDNsOiI6avdOCnUvOM
oIdCJ8veKXkZ5PyLOy/egoqxbrGLMJyL7YWbeFkNT6OTmO9Heo0/AI8rzmcHc1GX
80L11wo7q3ANHpc+/mRzLg9uJRnMqRbZGA+GeyACNb7x+mehmuegb2TbIgoIDBn+
i3TPli7Mj5dwyA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:38:28 2025 by rpki-client