Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: 6vHGv0/pJk88hqguMz1oRHMPLuUgebNOr67sg+Io4pY=
Subject key identifier: 3B:F5:71:88:6F:B1:1F:C3:3E:B7:E1:67:02:F3:7F:81:31:6A:5C:B4
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 01976F2B9F10B3B9FCDC12E9C38F426DE452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 1342
Signing time: Sat 14 Jun 2025 16:00:19 +0000
Manifest this update: Sat 14 Jun 2025 16:00:19 +0000
Manifest next update: Sun 15 Jun 2025 16:00:19 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: lqxuDouv6CVlCr+ygeEXwGezeNg4vmA+bo54mj1Up5A=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:9f:10:b3:b9:fc:dc:12:e9:c3:8f:42:6d:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jun 14 16:00:19 2025 GMT
Not After : Jun 15 16:00:19 2025 GMT
Subject: CN=3bf571886fb11fc33eb7e16702f37f81316a5cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:57:cc:97:db:cc:f5:6d:4b:10:f1:3e:b6:
38:4b:cb:43:88:d1:30:82:77:3f:04:cf:a3:db:43:
62:4b:96:b4:09:34:8a:29:e4:ba:cd:e4:1c:bd:6f:
c6:a5:8c:a5:11:62:e1:8c:db:2e:b4:b0:49:15:ad:
a2:e3:75:cf:2f:54:f8:ab:88:f6:83:78:ae:7d:23:
e7:90:ef:b3:c8:88:e1:bd:fc:fb:9a:51:f8:cd:39:
29:fd:58:23:24:d1:63:d3:f9:93:e1:5f:a8:35:ec:
e4:85:85:67:02:5a:da:b1:d7:dc:5a:51:99:bf:3a:
d4:62:b7:6b:f1:e4:45:88:4a:4e:d6:d4:5c:2a:77:
02:75:cb:5c:15:47:19:29:2b:c9:a1:98:61:8d:5f:
18:f9:24:35:fc:5c:62:3c:1b:6f:63:a2:29:e9:7e:
68:06:07:39:59:3c:d5:3d:6d:f1:54:cb:9c:95:6f:
9b:11:05:b2:a4:de:b3:a5:fc:9e:58:46:93:80:c8:
47:d4:51:9a:44:56:6c:92:90:7d:ab:0b:f4:30:46:
a3:de:f9:14:7d:ba:8e:b4:6a:04:54:66:1f:0e:b9:
e2:d0:b2:14:5f:63:cc:a9:03:65:b9:ca:fd:7e:3b:
8e:57:44:8f:b8:2f:82:2b:c2:37:f3:b7:9f:93:0a:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F5:71:88:6F:B1:1F:C3:3E:B7:E1:67:02:F3:7F:81:31:6A:5C:B4
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:da:05:af:f2:26:b6:ea:08:6b:e9:30:9d:41:79:42:a8:02:
29:94:1e:1e:03:4d:79:57:42:b8:52:6b:08:ad:cc:bc:29:39:
b0:64:13:39:4f:56:09:cb:ce:2f:da:1e:14:d8:f1:9a:98:7a:
01:07:f1:23:8b:f2:7f:f0:cd:a5:a1:6f:e2:bc:89:d2:5b:a0:
a1:3d:ce:db:54:d7:cf:10:73:01:0b:6b:30:23:1e:a9:97:01:
aa:15:92:2b:45:9a:73:bd:52:c8:dd:24:be:b3:c6:26:90:a4:
60:ca:60:39:89:0b:7e:34:f6:14:1d:71:91:0c:c3:d5:9e:09:
6b:43:4d:0c:9a:e9:07:eb:60:a6:d4:f5:52:99:16:fd:84:bc:
ef:ed:7b:18:4a:ba:31:4e:12:e2:8e:59:50:2e:0a:19:83:d7:
27:71:85:93:98:a3:d7:58:04:8d:75:66:eb:f6:a9:a5:1c:e1:
27:ed:68:3e:5a:6c:35:46:5a:50:55:d5:3e:fd:a6:21:26:98:
b7:a0:06:64:b8:0e:1b:5a:ae:39:5f:25:83:bd:e3:6a:35:21:
a7:99:f6:19:98:81:b2:37:d1:04:83:50:5f:e1:95:06:61:13:
ea:9f:a1:15:58:c0:23:30:95:bb:6a:20:e5:a2:1a:c1:00:7b:
0e:0f:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:38 2025 by rpki-client