Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: 8tVm2Nktudf9MBeYdTW2/lnuJQccaSSPbpDcG81TZb8=
Subject key identifier: 21:99:8D:E6:3D:7D:18:5C:63:E3:1E:18:9C:9A:BB:1A:8E:B8:3D:B8
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 01976EBDE5CD0CA0BE26717B01633D106012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 14:00:28 +0000
Manifest this update: Sat 14 Jun 2025 14:00:28 +0000
Manifest next update: Sun 15 Jun 2025 14:00:28 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: 2RzptyAdXVW7nWXxLcfF8grjd8iyxsWoR033KVkBt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e5:cd:0c:a0:be:26:71:7b:01:63:3d:10:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jun 14 14:00:28 2025 GMT
Not After : Jun 15 14:00:28 2025 GMT
Subject: CN=21998de63d7d185c63e31e189c9abb1a8eb83db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:8f:a1:c7:08:4d:29:d3:16:63:43:c5:e4:
b5:5d:70:8f:e7:c4:3e:f0:be:1b:4b:33:03:14:75:
92:aa:17:5a:cf:f1:14:59:8a:6d:8e:24:92:83:bb:
0e:8f:c7:94:f7:cc:00:30:c3:10:7b:8b:b4:07:7a:
69:c1:f2:66:b1:17:e1:52:75:0b:35:75:26:a6:d6:
0b:5c:cb:9c:1a:c1:a9:8b:e1:8e:1f:c6:11:3c:de:
26:0d:78:32:e1:66:82:92:c4:e1:67:4e:60:12:14:
46:b4:df:56:5a:96:89:21:12:d5:6f:ea:6e:af:e1:
f9:03:e1:4a:a4:5d:81:4f:03:74:7a:fa:e5:35:2e:
91:00:d8:1d:fb:ac:b9:d5:0d:e4:ac:64:72:e1:ea:
13:85:7c:46:df:2c:1f:a5:b2:b4:05:3f:60:6c:b4:
bb:0b:ad:8e:78:70:2d:c2:54:b5:cd:96:69:d6:6e:
2d:ed:40:a6:f6:23:c7:d1:6d:cb:ce:79:06:24:3e:
7b:4d:66:36:57:ab:3a:91:dd:43:28:fc:6f:d8:de:
e9:ce:f3:76:9f:69:04:75:80:6c:0e:f5:17:eb:6b:
7e:3d:9f:41:68:77:23:b3:50:8e:fa:34:af:4b:e8:
75:d1:de:a1:80:8e:d8:76:c4:66:8d:90:3b:34:51:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:8D:E6:3D:7D:18:5C:63:E3:1E:18:9C:9A:BB:1A:8E:B8:3D:B8
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7a:99:ce:3b:de:38:89:df:77:c5:f0:86:6c:38:7e:b0:83:
ca:a5:b5:ed:4b:ff:a3:1f:90:0c:39:96:d1:da:fd:7d:c8:c0:
9c:aa:35:3d:71:ce:32:58:f9:d3:6d:13:6c:fb:dd:b5:4d:b6:
bb:f7:13:9c:a3:f1:11:3e:bd:c6:f1:f9:db:2d:d8:47:27:28:
0e:d2:95:69:6c:2b:14:4a:ba:b1:46:d5:8f:86:e0:77:c3:08:
40:8a:bd:29:c4:80:80:70:a2:83:ad:6d:e0:7b:20:c2:33:59:
e0:e3:66:7f:32:62:4c:02:66:e6:69:0d:bc:47:8b:bb:6c:97:
86:5f:51:74:ab:b8:97:fe:2a:e0:32:51:5b:ce:6c:42:ee:ef:
d8:84:2b:1d:8b:6e:bf:16:cb:56:b9:5b:1c:b9:1e:89:7b:4f:
68:ac:0c:5d:b0:88:9e:93:47:dc:b7:db:f1:09:f2:55:1f:e0:
3a:fc:a4:a8:49:84:fb:fe:bd:d8:62:05:58:ed:ea:b5:ca:2e:
25:23:94:91:41:55:5b:54:7a:98:e4:54:d6:5b:6c:0a:08:97:
0e:3f:28:71:cf:10:6e:25:aa:32:77:1f:df:2f:4c:5c:98:5f:
74:81:ec:8c:53:55:a4:2d:83:5e:cf:f5:be:78:7e:3e:94:ed:
c9:20:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:32 2025 by rpki-client