Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: wf82iRIfyA/hyT8r2ZkrZz72xU3ephjTlp4R+4YZGFM=
Subject key identifier: FE:4E:06:83:42:80:29:BD:6A:52:4B:C2:EC:EA:60:89:A2:EF:23:5C
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019873E3ACFC1C21AE365F84438C598EDAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 13C9
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: Y4oiHlGHbQQURzzB1lzvH80uPcUD3yKfcePKqz4uP68=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ac:fc:1c:21:ae:36:5f:84:43:8c:59:8e:da:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=fe4e0683428029bd6a524bc2ecea6089a2ef235c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:5f:08:89:92:c4:d9:9b:f0:c6:31:a8:8d:
fa:30:23:45:59:75:50:3b:62:df:93:2c:0c:57:20:
52:eb:22:0e:97:ef:68:98:e0:69:e8:b2:4a:f4:26:
9d:59:e8:85:8b:bd:5c:96:99:3f:08:e4:f8:a5:da:
84:b0:dd:a6:27:1d:f8:a7:24:40:fa:3d:69:54:7e:
77:99:79:91:d5:19:6a:9b:4b:3d:2f:76:79:c9:b5:
55:86:5b:76:19:92:72:d7:23:4f:c1:02:bf:b0:45:
e0:b6:84:7a:98:a6:24:ad:5e:0d:bc:b1:54:d8:97:
1e:9e:3c:25:74:2a:f1:68:18:99:74:54:5d:ec:60:
41:c1:86:a1:43:9b:10:47:7b:f5:a3:a1:85:cc:61:
12:03:cc:e1:49:be:ff:8f:b5:6a:21:10:2e:d4:af:
fb:70:dd:28:51:d8:48:e5:5d:36:04:7b:b3:69:e3:
f4:3a:5f:fb:74:e5:7e:88:fd:9e:47:5f:b1:80:2e:
74:a9:72:05:70:7c:fb:c2:28:91:de:66:74:44:e0:
64:86:87:0c:7a:46:bc:5e:8a:fe:a8:8f:75:12:62:
83:b0:c0:58:5a:1d:04:50:22:59:07:a6:bb:84:35:
0c:56:1b:39:2b:20:61:6d:04:f6:d6:19:7a:14:55:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:06:83:42:80:29:BD:6A:52:4B:C2:EC:EA:60:89:A2:EF:23:5C
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2b:40:d0:4f:70:9a:b6:9a:97:74:75:c6:eb:f1:80:9a:b8:
9a:a9:3e:b5:49:ac:aa:98:4f:54:9b:45:01:f7:7a:c3:6e:f4:
62:aa:d4:13:c1:4b:31:fa:25:44:a3:13:e5:cb:b1:7a:55:ef:
a9:14:1c:a9:a6:a7:0e:64:dd:2b:b4:7b:ab:4d:b3:77:33:dc:
e8:44:83:0a:a6:91:59:69:31:39:77:f2:14:32:ed:b3:c5:38:
f7:2e:c8:e0:20:e9:5c:e7:4e:b1:65:3c:3e:cb:ff:2a:45:0e:
2c:9f:f6:b1:fb:d7:a1:84:b0:ba:36:98:e7:e9:7d:48:eb:19:
bc:b0:ec:26:63:e7:95:e6:74:6f:95:d4:51:0b:7d:93:44:cf:
db:d8:bb:f7:33:96:d2:09:f7:1c:12:b8:46:c2:53:6e:f3:4c:
05:70:8c:af:9f:0c:cf:51:38:e5:d0:b2:a1:23:a6:93:42:ac:
4b:93:ee:67:62:ef:e5:9a:c6:f8:ab:99:7a:eb:da:c1:87:d0:
c8:7d:fa:59:1b:7d:22:8d:1c:9a:3c:e6:d4:20:84:10:e8:f3:
12:74:09:49:fa:39:4e:09:5f:3d:ae:27:b8:7f:e4:26:b9:f9:
78:39:f9:e2:f6:af:ae:5b:56:20:6a:21:d5:7f:29:5f:84:77:
2b:0d:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:55 2025 by rpki-client