Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: CX6eZ+1Kps/6sRG2polMpYaqv1cTGhQ0h6Tc6cQcpKo=
Subject key identifier: 8C:C0:C9:BC:A5:06:20:68:B3:9F:A0:83:DE:BC:DC:F7:DF:2F:62:4E
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01976EBE459099B47459EB8BCDE7235633BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 15A1
Signing time: Sat 14 Jun 2025 14:00:52 +0000
Manifest this update: Sat 14 Jun 2025 14:00:52 +0000
Manifest next update: Sun 15 Jun 2025 14:00:52 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: LCZVKs+356oUK5p6wUDmfux4/FNEvZ6ercIshODfTJo=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:45:90:99:b4:74:59:eb:8b:cd:e7:23:56:33:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jun 14 14:00:52 2025 GMT
Not After : Jun 15 14:00:52 2025 GMT
Subject: CN=8cc0c9bca5062068b39fa083debcdcf7df2f624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:f3:24:02:9d:75:bf:7f:c6:75:00:8b:bf:
34:78:dd:9d:1b:7a:8b:6c:c7:f0:c3:e7:18:c0:53:
b4:1c:a4:03:60:62:b7:a6:4f:1c:62:66:17:98:95:
04:0d:87:c2:18:ee:11:1a:78:99:b1:4f:b7:2c:ce:
c2:3c:0b:c7:41:46:32:11:eb:c9:4d:bc:c8:a5:4f:
6d:c6:94:1c:14:f5:04:06:c7:bb:3c:2d:8f:20:5c:
78:c2:91:c8:03:44:e2:80:44:13:9d:99:d9:0e:4f:
2e:ab:f8:00:f1:5d:e0:39:a7:3d:b1:dc:c5:ff:6e:
f2:5f:e8:ac:99:50:25:51:86:ab:ae:36:c2:28:25:
b2:17:4e:cc:f4:02:4f:a4:c7:29:01:b9:54:ac:a8:
a6:85:f7:f3:cc:86:70:40:12:8e:ad:3b:63:98:d4:
cf:d0:63:61:6c:16:70:12:62:ae:83:b0:e7:18:77:
4b:f7:23:73:2c:41:2c:19:ec:7d:e4:0b:25:73:8b:
25:40:2b:2c:9b:e1:8c:cf:17:1e:7c:0e:32:fc:7c:
35:02:0a:f6:2a:e6:67:e2:d7:d0:43:45:7b:1d:95:
4a:b2:51:e3:25:59:cf:e0:7d:e2:7f:be:2b:79:99:
90:67:72:c1:89:11:8a:37:07:98:7b:1c:e6:13:88:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:C9:BC:A5:06:20:68:B3:9F:A0:83:DE:BC:DC:F7:DF:2F:62:4E
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:67:5a:83:3c:ce:02:33:95:c0:70:54:65:79:32:fd:66:ad:
44:d7:e5:bb:05:4d:3f:53:21:e4:31:2d:b3:62:8e:32:69:7b:
75:2b:2e:d1:59:e5:5a:93:e5:4c:56:a5:c7:f3:9d:c7:25:8f:
7b:93:8f:26:00:16:7f:99:b0:57:36:18:bc:52:ba:6b:f4:e2:
13:fe:19:17:45:76:68:58:1f:b4:68:0d:c7:ca:e5:ac:e8:e2:
2a:61:b7:e8:bf:f0:a3:35:1d:f6:2b:b7:b6:63:4e:86:59:18:
52:61:a9:28:06:3d:ce:11:dc:67:31:4e:c6:b5:ba:93:1f:bf:
5a:13:f0:71:60:8e:73:de:99:1e:c4:98:46:11:8d:4b:e1:38:
76:d9:45:5d:9a:6d:33:b1:a1:a7:6f:fa:f2:b2:da:74:ac:d0:
d0:ca:92:a5:7b:ef:41:5b:b1:f5:8a:5e:ab:4e:d3:e2:e5:1f:
f1:e3:c8:39:3d:d6:19:34:f6:ba:77:97:a8:fa:82:d6:11:12:
b1:cc:03:3b:ea:15:76:3f:62:df:a8:84:c0:75:ac:d1:27:56:
dd:e0:bd:a5:56:86:e5:6b:6d:47:bf:2d:64:ac:b2:37:8d:00:
07:25:68:8c:93:e3:94:6a:d9:e7:21:99:9e:00:79:ba:24:8b:
70:4d:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:16 2025 by rpki-client