Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: Zm2mYkabjY4+W3a4PN2ig/eZ6lGXIp+LdqhCplIv8Gk=
Subject key identifier: 8D:B3:6F:5D:FC:D5:B0:2A:E8:1B:E4:E0:F2:CC:6D:A5:64:45:4D:EE
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 01976961370974BC2F33301862313112D4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 037E
Signing time: Fri 13 Jun 2025 13:01:08 +0000
Manifest this update: Fri 13 Jun 2025 13:01:08 +0000
Manifest next update: Sat 14 Jun 2025 13:01:08 +0000
Files and hashes: 1: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: zGcj/wwJ3Jd0mQUQxQrdB3BWowD1wZnwKmMDa8Q5Bwo=)
2: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (hash: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:37:09:74:bc:2f:33:30:18:62:31:31:12:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Jun 13 13:01:08 2025 GMT
Not After : Jun 14 13:01:08 2025 GMT
Subject: CN=8db36f5dfcd5b02ae81be4e0f2cc6da564454dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:6d:63:62:89:c1:2b:8a:a9:91:df:dc:57:
6d:78:d1:3b:f2:6b:e0:b2:f9:5f:b2:41:77:c1:10:
ad:fa:e8:84:7f:20:d1:cf:95:5a:d7:f9:16:5d:34:
73:4b:6e:c9:52:ae:54:57:39:07:e2:a2:01:ec:b7:
a5:c8:eb:46:19:04:52:75:2a:cf:f4:bf:a2:37:e5:
c6:cf:b4:79:67:43:cd:e3:6f:a0:d4:9d:9f:98:1e:
56:75:cf:bc:3d:42:55:67:f1:2a:8e:94:ac:14:fd:
12:6a:0a:23:31:01:c1:6b:cc:a4:10:bb:e2:e9:77:
aa:1f:7b:c0:17:31:04:b3:2c:83:6f:5e:9a:d0:b5:
f1:6d:7d:95:d5:42:5e:e8:25:b9:e6:39:8b:8e:68:
4a:fc:80:f4:41:d8:8f:fe:21:13:3a:7b:c5:5d:ab:
a5:f8:05:8c:48:3d:1d:a5:91:2c:56:b6:85:23:55:
c6:23:db:97:ca:95:34:5c:8d:64:7e:e2:24:98:9d:
ed:22:22:c5:c6:db:a6:e4:cc:f8:ab:de:da:e4:62:
75:cb:16:ee:24:46:95:72:5e:9e:50:4c:e1:a5:7f:
52:b5:76:ae:52:47:6d:b7:ae:91:e4:55:c6:f4:e8:
ec:12:8b:41:ed:da:74:c7:d1:54:c2:a2:4a:31:ae:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:6F:5D:FC:D5:B0:2A:E8:1B:E4:E0:F2:CC:6D:A5:64:45:4D:EE
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c1:2d:cb:07:0e:62:b7:36:61:d6:5b:a6:85:5a:92:44:78:
cb:e3:0f:7c:95:f7:38:70:93:d1:a4:d4:d0:03:41:62:14:c7:
83:c5:09:e9:cc:f3:fa:6e:8b:38:12:9c:5e:fe:fe:90:fb:df:
ea:c2:a4:69:bc:92:c7:a7:3c:57:47:b5:b1:a3:e7:7e:58:d5:
a2:25:64:03:c5:ed:d4:be:52:09:fb:79:b8:47:df:48:a4:db:
d8:a5:61:1f:81:85:32:fb:7d:02:95:1d:6a:fa:bf:c5:93:41:
90:83:ff:14:e6:a6:d0:38:09:c3:e4:69:32:59:f5:0b:2c:0e:
c1:d9:b3:92:1f:f8:3e:63:37:24:02:b9:be:c9:86:c8:a8:99:
12:e0:92:c0:a2:28:9a:71:5b:34:e8:23:80:de:63:14:b1:07:
66:b9:2e:65:c5:19:6a:2e:d9:9e:f8:e9:39:69:43:b2:3a:69:
3f:99:99:27:7e:d3:76:a9:b7:cd:f4:2c:ee:48:20:1b:38:9d:
12:a7:8f:33:2d:c0:6b:df:a7:54:38:8c:2e:6d:69:fe:35:58:
89:73:ad:82:32:60:2e:e2:2f:33:40:18:72:86:18:73:17:3a:
a1:42:78:ec:b3:48:eb:50:93:59:02:58:1b:a4:e7:ee:c0:5c:
63:a5:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:19 2025 by rpki-client