Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: y+p/pNgIGgbnzaUOGg4+BrDj63ifLb0k7/Qvz2kVZag=
Subject key identifier: 99:01:79:EC:B0:50:41:2B:11:80:2F:1D:1C:4E:7B:A4:2F:5A:17:3C
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 019769CEAE27F4BA8F8034391ECC6EAB4DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:00:41 +0000
Manifest this update: Fri 13 Jun 2025 15:00:41 +0000
Manifest next update: Sat 14 Jun 2025 15:00:41 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: iZ+OeveZIJQkEg6gYCJwxQ0tyR+0shSf6eEgr5Zb67o=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ae:27:f4:ba:8f:80:34:39:1e:cc:6e:ab:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Jun 13 15:00:41 2025 GMT
Not After : Jun 14 15:00:41 2025 GMT
Subject: CN=990179ecb050412b11802f1d1c4e7ba42f5a173c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:fc:83:d9:5c:e6:04:04:2e:bb:ac:a4:70:
65:a6:65:c7:67:dc:be:23:4a:8a:27:94:fd:ff:55:
d5:22:74:21:ad:5e:5e:aa:55:5c:4d:50:dd:7d:c9:
b3:7b:d2:87:90:4e:29:d8:e1:70:0e:93:61:98:46:
e3:69:79:8a:06:78:7a:3a:e2:ec:a6:8c:4c:85:be:
68:1a:66:31:05:c3:96:01:32:ee:85:ec:04:30:93:
d1:4e:de:8b:c5:9c:9e:44:3d:74:f7:7d:15:a5:d8:
7a:e8:26:ad:ad:19:f0:76:93:55:3f:a2:bc:12:74:
27:02:eb:43:91:76:c2:2e:28:a5:6f:91:c1:ff:52:
3c:0d:e9:3a:48:2c:40:27:08:6a:f3:db:4d:07:89:
75:fd:7a:50:63:16:8e:89:a3:f3:f6:61:0e:8f:79:
ec:07:09:b7:97:ce:73:fe:74:e9:fa:d5:62:0e:44:
ba:71:ce:80:50:64:0e:d5:2c:ab:89:87:80:5e:00:
80:9b:9d:7c:54:0c:aa:70:cb:6e:16:a9:27:63:2b:
b9:33:df:a4:96:74:72:de:09:73:ff:e0:88:35:62:
15:07:64:c3:66:0d:91:a8:35:a1:04:2c:33:5f:8e:
24:3e:fd:e0:ad:d3:a5:e8:5c:95:aa:b9:3b:6a:a4:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:79:EC:B0:50:41:2B:11:80:2F:1D:1C:4E:7B:A4:2F:5A:17:3C
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:cc:ed:10:0e:70:e0:7a:78:35:af:a7:22:82:4f:f2:7c:
60:fe:b0:4a:27:64:25:87:e8:cd:23:bc:10:30:b5:89:8a:b5:
e2:aa:ec:a9:db:50:13:03:d3:75:94:57:0d:c4:20:66:81:4c:
85:c0:03:d2:c3:1e:b5:d4:47:4a:49:40:e5:81:48:c6:1b:28:
89:73:5d:30:28:32:05:b5:37:60:70:77:5a:65:c9:67:91:01:
84:c6:67:d0:8f:f3:fe:7e:4b:2e:d0:a7:13:37:0a:f1:f0:6d:
44:02:cc:56:ed:b5:a0:90:28:ec:bf:62:c9:f0:d0:15:6e:7f:
50:23:6e:eb:44:3c:4a:6d:ea:78:4c:41:2a:c1:fe:53:87:86:
d2:8b:3a:30:32:96:0f:b7:ab:f1:d4:70:11:c3:05:ec:65:03:
45:dd:ab:5a:f5:83:00:93:0f:41:49:58:cd:5b:b7:5d:f5:64:
6a:d5:d8:1b:6b:e2:8b:98:4c:9b:51:02:3b:9d:bf:41:02:a9:
34:44:84:d4:49:9e:16:17:b5:95:f3:e9:d5:8c:ea:6d:47:69:
4f:a4:27:2b:5c:c0:22:9c:e1:67:0b:b3:e8:6f:bc:9d:80:72:
9f:94:87:0c:f0:75:97:59:fc:22:4d:fb:84:31:b8:40:d8:cb:
64:13:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:47 2025 by rpki-client