Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: 01iUoQlpIQPylWPfqNQI1cqJaYywNix6K4w+RiJ2fDA=
Subject key identifier: 3F:10:A8:BE:C5:A9:C5:E1:1A:30:67:8B:52:20:63:7E:14:AD:D0:59
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01976BBCD8F3E2718BAC44B8A6F33DC63CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 10FB
Signing time: Sat 14 Jun 2025 00:00:27 +0000
Manifest this update: Sat 14 Jun 2025 00:00:27 +0000
Manifest next update: Sun 15 Jun 2025 00:00:27 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: gOld4o3ql1rLLsRTaf6kJazsuphgNTurvSYcFAHKUBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d8:f3:e2:71:8b:ac:44:b8:a6:f3:3d:c6:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Jun 14 00:00:27 2025 GMT
Not After : Jun 15 00:00:27 2025 GMT
Subject: CN=3f10a8bec5a9c5e11a30678b5220637e14add059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:f5:d7:57:4f:ee:0f:24:1d:ce:33:b0:29:
bb:d9:ea:0e:4d:51:46:16:1e:28:de:60:7f:78:95:
c2:9d:b2:01:8d:17:b3:34:65:3e:a4:70:eb:21:4e:
ee:4d:3e:59:be:57:ea:f6:8f:0e:cc:b6:3d:21:43:
ac:84:66:41:26:b8:95:5b:ea:e9:ec:c1:38:b2:b0:
d5:93:a3:86:25:27:98:ae:9d:09:89:26:1e:cf:e7:
96:f2:3a:50:cd:58:67:cc:bd:5b:2b:fd:e8:2a:26:
30:dc:32:d7:4b:07:97:ed:7c:31:43:c8:99:b0:b8:
ec:4d:03:da:c6:69:d5:fa:c9:a0:fe:68:e2:6f:71:
ef:bf:0a:9f:48:67:e8:51:e6:f2:c6:b9:81:7f:33:
5e:9e:00:1c:d7:f9:7f:9b:15:e1:9a:93:9f:d7:ca:
2a:21:93:82:2b:c3:7c:45:8a:ae:29:97:34:5f:97:
62:a8:23:26:5d:6d:1d:e2:88:02:34:0e:20:ef:00:
cb:53:5f:69:3c:1b:f4:89:dd:82:a9:7e:29:67:6f:
f3:36:25:8e:83:79:78:99:ef:84:73:82:e6:4e:47:
21:30:a8:2a:28:2c:6d:2e:fb:3d:81:ce:40:82:87:
8d:91:e2:f1:56:a1:5f:52:eb:d6:4f:7c:f1:03:25:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:A8:BE:C5:A9:C5:E1:1A:30:67:8B:52:20:63:7E:14:AD:D0:59
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:27:42:38:1e:8b:e1:97:a1:83:ff:02:33:4c:9d:35:e6:fe:
e5:5e:6d:fc:56:9b:5f:e7:f9:75:aa:ab:19:ca:8e:01:6b:e0:
15:7b:64:58:ee:96:d5:d3:33:9f:bb:8f:a8:bf:2e:0b:0f:a6:
53:40:88:21:a3:12:db:d5:ca:f4:e6:61:d0:44:c3:35:08:22:
e9:0c:0d:67:12:bb:94:75:f7:69:e4:ca:74:a0:75:44:9e:3b:
30:8b:53:ad:92:d8:8e:37:6d:eb:fc:40:16:1f:62:a5:00:83:
5b:83:ea:c9:e0:7b:57:38:da:8a:7f:a4:67:ed:2f:44:80:47:
36:70:95:ae:85:02:a8:41:98:4b:9a:63:83:1e:eb:a3:b7:72:
ed:28:2e:4f:7c:5e:bf:8d:5e:de:60:df:a1:37:5e:67:1f:90:
5d:15:3f:9e:a5:49:b3:60:cf:84:4b:a6:ff:9b:47:4e:c1:f1:
d8:df:0b:81:23:ce:99:fa:83:b4:43:90:c7:45:4c:da:f1:18:
21:f0:1f:38:1f:a0:5a:c7:08:f7:a0:44:40:3d:86:d1:8d:56:
70:7b:43:e8:44:7e:f1:61:62:44:5e:23:4b:72:31:d2:40:a0:
ad:55:2d:e4:4e:c4:84:1d:7d:9e:ec:9a:9e:2b:28:f4:25:e9:
ea:cc:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:14 2025 by rpki-client