Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: kOqOWWUYCyKZb5h2nB193AMgnkCwevKS28qs72oVe7g=
Subject key identifier: 75:21:D6:76:FA:9F:ED:8E:8A:F8:CA:84:FA:17:7A:3D:E0:2D:9D:C6
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 01976BBD4460FCC8397DAB62EF6901CDA840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 00:00:55 +0000
Manifest this update: Sat 14 Jun 2025 00:00:55 +0000
Manifest next update: Sun 15 Jun 2025 00:00:55 +0000
Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: yJrnpEyGYmiaBuyfMxnjFXwRr87/EWRj3NxqoZO85A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:44:60:fc:c8:39:7d:ab:62:ef:69:01:cd:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Jun 14 00:00:55 2025 GMT
Not After : Jun 15 00:00:55 2025 GMT
Subject: CN=7521d676fa9fed8e8af8ca84fa177a3de02d9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:98:11:60:52:67:01:3a:a2:b9:7e:5c:c0:
e8:66:ee:11:68:ec:33:8b:ca:84:2c:74:fe:d1:39:
07:a9:97:d1:1e:2a:2d:34:7a:6a:2f:9a:16:dc:67:
44:f5:4f:4f:63:dd:04:2e:54:b9:70:35:1e:02:97:
56:c1:24:a8:3c:61:ab:0d:d4:8f:03:e0:b9:ea:88:
c7:0a:22:62:65:a1:83:6c:1e:41:41:fc:98:21:04:
af:e2:50:07:a1:45:3b:99:57:f9:27:54:f1:6b:39:
db:e8:5d:f0:98:a8:5b:cd:b5:03:a2:76:b7:5a:02:
37:a0:f8:a6:58:33:6c:79:b7:09:ff:20:20:69:81:
6d:06:50:a4:be:89:c4:39:f6:f7:2d:04:34:db:63:
33:10:30:75:bf:d4:42:0e:4b:b5:70:57:e4:f1:a6:
d2:8b:4a:bc:af:0e:fa:72:a5:f4:c2:89:6f:38:31:
d2:fa:2b:89:30:ab:4e:04:12:06:f8:86:9a:13:f3:
2c:1c:99:21:6b:92:83:e5:8b:91:e4:b1:a9:7c:21:
6a:df:85:a3:81:08:5b:b3:d7:57:ce:ed:eb:58:1c:
e4:a2:e4:d7:ea:a6:58:89:4b:e1:65:11:3d:42:8a:
dc:8c:41:90:93:29:f9:2a:19:20:18:84:59:cb:24:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:D6:76:FA:9F:ED:8E:8A:F8:CA:84:FA:17:7A:3D:E0:2D:9D:C6
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:b3:21:76:3b:80:f6:b4:fe:2f:e6:5b:0e:b8:92:7f:f7:
94:35:38:ad:53:18:bc:a7:84:c7:a7:51:e2:c4:cc:7a:6f:dd:
b4:f5:43:6f:b2:d8:ef:57:fb:39:7a:ec:a9:1e:7e:ce:f7:7c:
58:a8:7f:32:2f:40:b6:52:d4:52:a8:7f:d5:78:52:e7:1d:5d:
86:91:bb:a1:13:8a:cc:30:18:af:2e:51:ad:59:8d:2e:7a:7f:
1d:bc:5d:15:d4:ff:0d:f7:de:82:c4:d9:f6:0a:4f:8c:7c:e0:
b1:48:22:9b:b2:bc:44:3a:50:40:89:09:13:52:1e:f5:e3:ac:
41:4e:fb:35:ea:6b:5a:d3:d1:2f:2e:5e:21:19:d3:21:91:41:
3d:f3:1f:37:6d:8f:85:0e:1c:95:46:29:00:1d:0c:28:2f:f2:
8a:0a:cc:17:30:6d:c9:28:c7:f8:a4:2a:49:7d:6e:61:82:19:
11:18:ba:31:53:d2:dc:aa:4d:62:9e:b8:47:bc:35:0e:af:89:
9e:62:5e:9f:16:d3:02:b0:c7:5b:57:39:76:72:8f:3a:22:49:
d7:32:b8:50:01:16:71:18:41:17:dd:d3:b8:d5:98:b9:5e:02:
42:f6:b7:c5:63:44:98:21:7b:46:b6:15:22:d2:bc:fd:22:88:
94:52:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:10 2025 by rpki-client