Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: i3MyTGgNk0CJcQUMXwanp72/I+OARTA607lzJJkpb+s=
Subject key identifier: D3:9E:2C:EE:8D:05:40:34:38:21:6A:74:B3:F1:8B:DA:0D:46:90:B8
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 01976C2B2290B581311C04F1971655C8B00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:00:55 +0000
Manifest this update: Sat 14 Jun 2025 02:00:55 +0000
Manifest next update: Sun 15 Jun 2025 02:00:55 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: kHCpQL0cnO7kzqvq1siT0M37+Y61MoyxUAteb37C8vg=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:22:90:b5:81:31:1c:04:f1:97:16:55:c8:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jun 14 02:00:55 2025 GMT
Not After : Jun 15 02:00:55 2025 GMT
Subject: CN=d39e2cee8d05403438216a74b3f18bda0d4690b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:85:cd:cf:69:e3:96:3a:bc:c1:df:54:83:
0c:38:38:ab:a7:9e:14:b8:e3:12:81:9f:8b:92:f4:
93:01:9a:80:47:75:76:cd:4f:66:4c:9c:e1:5d:00:
4b:cf:56:5a:43:c1:87:72:ee:81:1d:50:1b:8f:f5:
62:49:f2:8e:15:ca:c5:6e:a4:76:0e:e1:6f:8d:e4:
e6:46:72:e0:42:90:24:9d:90:3f:19:12:7f:da:68:
89:99:5d:bf:0d:f0:1c:84:6c:c8:18:b3:f8:24:3b:
ef:0f:85:b1:99:27:df:26:66:29:9b:85:d8:b1:64:
d7:93:09:3f:b2:4f:bd:1f:af:d2:4f:62:6b:0a:2d:
79:c7:de:aa:c5:38:fc:ec:26:10:01:c2:38:7d:47:
f7:05:94:7f:8b:a5:b1:9b:83:19:fb:ef:66:fe:ba:
75:72:75:8d:33:8b:03:e6:fc:80:ca:e6:6f:ae:9d:
f0:c9:33:f8:a1:9d:03:cf:e8:2f:86:e2:66:c3:88:
0a:d1:84:22:0e:3a:5c:ef:4d:9a:1b:e6:a9:30:e7:
17:63:78:1f:8a:f5:c5:12:5d:f4:5f:98:87:e8:bc:
fb:2d:25:85:90:aa:ff:66:8d:cf:6f:e2:56:e2:55:
84:c1:dc:65:18:03:27:fc:0a:fd:28:f5:d4:17:a8:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:2C:EE:8D:05:40:34:38:21:6A:74:B3:F1:8B:DA:0D:46:90:B8
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b2:7d:17:ce:4d:03:83:fb:bb:ff:d5:36:6b:3e:89:3a:f0:
b1:c8:e1:ec:e1:f0:06:72:ce:ec:f4:9b:3c:5e:12:05:26:21:
ea:0a:00:f4:22:88:49:3c:ae:9d:8f:f7:91:6c:e8:71:3d:53:
1a:23:51:74:bd:ed:3c:36:b7:20:0b:bd:2f:8e:69:b0:eb:38:
e7:0c:70:0a:8f:ab:81:c2:89:ad:13:81:d3:f4:3d:64:95:0a:
e7:58:b6:95:85:f8:72:9d:8d:1d:de:64:49:90:1c:1e:2c:d0:
40:c1:32:57:82:84:b1:3c:5e:2b:6a:52:5e:75:63:e4:2f:df:
65:be:46:7f:07:b0:9a:7a:f3:6e:f1:a3:83:32:8b:bd:37:ad:
a7:0a:6e:a6:b2:30:19:dc:7a:82:e0:3b:84:68:b5:87:a7:58:
37:58:27:d6:7f:73:92:2f:49:5b:2b:38:4e:dc:ae:28:92:4c:
fe:6a:ab:f7:e5:27:dc:9d:cc:9a:8e:a5:46:80:56:17:23:3f:
53:aa:7c:bf:e3:c2:e0:83:75:8a:71:1c:58:20:0e:5e:ad:b4:
53:80:9e:73:8d:19:c2:48:68:31:f1:a2:f9:3b:c7:f2:1c:3e:
75:58:b2:19:31:65:82:4f:cf:53:8a:85:bd:9b:58:10:c8:6f:
bf:70:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:39 2025 by rpki-client