Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: 5Ory+j6r/rvRU27EQoYKzBEAZZrwBTfOHUhwEqSNvvA=
Subject key identifier: 5F:C5:F8:94:51:A0:93:5A:19:08:3A:4C:C3:53:0B:2C:AB:E2:8C:50
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019769CEDB0FE7B04C0B8CE19B00D146A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 12C3
Signing time: Fri 13 Jun 2025 15:00:53 +0000
Manifest this update: Fri 13 Jun 2025 15:00:53 +0000
Manifest next update: Sat 14 Jun 2025 15:00:53 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: W/UeZy5+xLlBhjT5gT9nycsFCIjHPWHcUxVuaDm3CJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:db:0f:e7:b0:4c:0b:8c:e1:9b:00:d1:46:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Jun 13 15:00:53 2025 GMT
Not After : Jun 14 15:00:53 2025 GMT
Subject: CN=5fc5f89451a0935a19083a4cc3530b2cabe28c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:9d:c9:1e:7f:9c:d5:d0:9e:ae:51:8c:1c:
fd:38:98:b9:40:db:05:e6:79:ae:98:86:57:ae:b8:
6a:7a:c0:4d:dd:12:08:93:b5:0a:31:7b:97:ba:8e:
a2:97:aa:1f:05:69:1c:c4:21:b9:7b:32:95:95:5e:
e8:94:e5:7c:fa:e7:92:c8:db:84:76:02:b5:cb:84:
f0:ef:ee:67:7f:aa:04:8d:97:54:f6:a9:ea:b7:e9:
1b:9b:74:5d:c4:80:c8:a6:1b:f9:18:3d:a1:4d:f5:
f4:5b:97:05:0e:fd:12:26:7e:3e:69:39:46:e5:3b:
98:17:ea:39:34:25:f8:da:53:7a:52:45:79:47:7a:
88:7b:36:52:bd:31:26:a2:94:db:3c:40:24:82:64:
44:d2:22:0e:8e:3e:67:12:3a:42:b4:74:34:73:46:
9f:f4:df:db:14:a4:b9:02:5e:e7:ed:d5:d3:82:db:
90:c7:0d:b1:3e:4c:c2:7f:61:45:56:84:8c:fc:17:
c1:05:29:99:ea:11:70:92:ba:c8:34:c0:90:66:d8:
32:4e:06:7e:60:1c:90:25:b3:bd:47:91:f7:25:bd:
70:26:26:38:22:88:8a:16:ca:e7:01:20:bc:9c:37:
b9:49:91:a7:bc:7d:dd:52:6e:9f:ae:49:d3:bf:1a:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C5:F8:94:51:A0:93:5A:19:08:3A:4C:C3:53:0B:2C:AB:E2:8C:50
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:88:4f:b8:a3:1e:61:59:8c:0e:01:3b:8a:f7:ab:de:89:55:
91:c4:29:69:52:9d:26:7a:76:b2:8e:85:98:80:cd:9f:7c:5f:
a8:a5:66:a7:89:4b:61:0f:92:22:52:79:57:ab:c7:cf:1e:44:
f6:9b:32:1d:d8:c5:83:39:8f:4a:bf:dc:f6:ff:c6:1a:48:63:
a6:0a:61:e0:ac:f5:2e:f4:a9:91:fd:26:34:4e:06:0a:e3:35:
c3:d0:b1:78:91:de:f2:23:9d:7b:eb:9b:8f:70:2a:32:d5:48:
35:2a:7f:46:a8:7f:c8:a0:fb:3b:24:fb:5e:c2:89:72:29:fe:
9a:43:20:22:5e:c1:88:20:fe:c1:a0:6f:4d:48:90:f7:af:48:
36:bd:65:0a:75:a4:05:6c:c1:a7:15:71:8c:d0:7a:43:16:8b:
cd:16:c4:30:af:98:07:b5:f1:d0:40:94:81:c3:f3:53:8b:84:
a0:b3:b0:02:86:eb:ae:ff:1d:c5:c0:0b:a5:5d:d9:37:29:1c:
9d:ab:ed:6a:a0:98:c9:f7:9f:cb:60:10:9e:16:cf:e9:b2:7c:
3e:5c:98:be:a7:52:90:06:af:e4:0a:ff:d5:21:5c:95:dd:a1:
b3:c9:84:3c:bb:be:4b:4c:bb:41:2e:d7:7e:66:ed:89:81:32:
7a:e8:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:47 2025 by rpki-client