Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: krqkyTX2gjNEKufFaW0pdzhRhI2hEgLkG0+uYEIU/Jg=
Subject key identifier: 21:39:DE:62:02:9C:0B:DF:C5:A3:9A:B0:26:65:33:7B:FD:96:09:99
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019768F2C59A76BDB2CC14398CFE4925D9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 14FF
Signing time: Fri 13 Jun 2025 11:00:30 +0000
Manifest this update: Fri 13 Jun 2025 11:00:30 +0000
Manifest next update: Sat 14 Jun 2025 11:00:30 +0000
Files and hashes: 1: 1-8HkdBBCltDPxNn3iYnIEXw5Szg.roa (hash: OZx3u6xzIMjyl5Um2kz+G+WpnO01yNqGdt7/mp9FJDI=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: Cvi7Qtg63Z/dNLFH7xOkOE8TOIAXeMyPf65o4OJTGjo=)
3: Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa (hash: P/0Xq7jm9FfNGJ2i4ahCVuaX5VvDxfSb57nEi8i1Tlk=)
4: o33kvNGiVE5QwGbXRcS1WVlFPa4.roa (hash: tbXNsaKqMuIQJAxtvQCEh1A+tSp7ogPpQ+0PODtQq48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:c5:9a:76:bd:b2:cc:14:39:8c:fe:49:25:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jun 13 11:00:30 2025 GMT
Not After : Jun 14 11:00:30 2025 GMT
Subject: CN=2139de62029c0bdfc5a39ab02665337bfd960999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:4c:fe:c4:7c:53:e6:20:2b:bf:aa:da:11:
40:e9:ad:c5:6f:f5:fc:a7:74:1c:69:f1:2f:43:66:
d0:d7:1f:87:b3:19:a3:5c:e2:b3:ed:d6:eb:cb:c1:
f7:96:6d:bb:59:bd:73:8a:ce:cd:8b:44:37:8b:85:
b6:f3:f2:16:fb:ce:94:66:da:08:1d:67:af:3a:1b:
a1:9e:22:59:40:87:f5:30:c0:6e:9c:3d:23:cf:29:
b0:ee:61:68:6d:5b:d5:ed:ee:73:37:d4:d2:fe:fa:
94:58:c7:5e:32:4f:82:ed:d4:26:9e:ec:2f:6c:3f:
0a:9c:88:c2:8e:a2:b2:b2:87:bc:4a:41:3c:a4:51:
7a:cf:97:7a:93:59:0a:58:18:02:a2:b4:fb:7f:38:
55:ea:21:de:60:36:2c:0a:08:ff:d4:2f:f4:13:b5:
b3:9d:a5:65:9c:69:02:4e:81:d3:89:85:11:e7:d2:
26:7c:6b:c3:96:93:2d:b1:6d:48:38:f8:ff:a4:16:
0f:ff:81:d3:74:4d:3a:73:b7:f3:7c:c2:20:0c:7e:
6d:a1:06:4c:84:24:78:21:62:3a:ec:89:c2:55:fc:
25:79:45:24:4b:a3:f5:f7:c4:c7:8e:90:09:a3:4a:
d5:2c:e4:bb:c3:d3:3d:44:dd:f6:61:4f:ce:80:48:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:DE:62:02:9C:0B:DF:C5:A3:9A:B0:26:65:33:7B:FD:96:09:99
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:94:90:b0:b2:d7:43:87:c3:0e:59:19:85:b1:59:72:ab:af:
7a:d8:8d:c8:67:67:e7:41:44:43:4f:9b:7a:b4:df:5b:e9:59:
ce:93:65:9b:e3:38:36:e5:01:aa:5f:a2:43:26:15:81:b9:c8:
6b:7d:aa:d8:b6:70:c5:02:85:c6:31:55:1a:8c:66:08:a7:14:
31:be:9d:d1:69:27:42:f2:b7:c2:73:ae:3f:b0:46:bc:ea:dd:
d6:0e:e7:f1:6b:6e:00:09:06:f5:4e:91:0e:de:c9:10:cf:ca:
c1:c2:e3:9b:34:69:5a:af:51:91:06:b1:d9:9b:88:48:ef:10:
7a:31:e6:f3:3b:c3:d0:e6:61:a9:c1:4c:55:94:2f:cf:dc:25:
b5:7d:ad:5c:a5:ed:e1:c0:21:78:e0:55:bd:77:fc:f4:01:a3:
ff:c9:4f:09:a6:4d:c8:39:c8:27:97:f7:57:26:c1:94:b0:9f:
40:71:bf:cd:2a:98:29:67:39:6f:f2:73:2e:fa:1f:29:04:78:
a8:82:8b:63:62:7f:f5:6c:49:0d:76:d2:f6:fc:e7:c5:21:da:
36:b5:df:d4:71:57:96:51:16:cb:f4:d1:ed:47:8e:85:4a:45:
46:a0:d2:83:a3:62:33:a2:33:35:ad:cc:4b:fe:89:be:fb:9f:
aa:a9:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:47 2025 by rpki-client