Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: AmqsMQHnZB7PHTYdsLLxBWZSw914tAvyPgtG7Fzo/oY=
Subject key identifier: C1:A9:9A:2B:8B:97:6E:47:83:07:5F:B0:B7:AA:41:6E:62:69:10:24
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019768F2F6290DA40FDBD2EC157F36567B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0C4C
Signing time: Fri 13 Jun 2025 11:00:42 +0000
Manifest this update: Fri 13 Jun 2025 11:00:42 +0000
Manifest next update: Sat 14 Jun 2025 11:00:42 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: vNZEtrW5ySqyTD5hXDtGe4xzvg2iaGDM6uFMDDT4lsc=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f6:29:0d:a4:0f:db:d2:ec:15:7f:36:56:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jun 13 11:00:42 2025 GMT
Not After : Jun 14 11:00:42 2025 GMT
Subject: CN=c1a99a2b8b976e4783075fb0b7aa416e62691024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:16:cf:5c:dc:e6:6b:0a:d1:6c:8d:b2:76:
7e:b1:9c:3a:6d:72:7c:04:c9:96:d8:ae:13:ee:ae:
5e:00:91:e2:8d:b7:13:e1:a0:b2:23:31:73:3a:be:
d6:fc:73:db:76:39:2f:5d:b3:13:63:b2:3c:c8:a3:
e1:3f:8d:a4:7d:fb:e7:49:d4:50:f6:ac:39:3e:80:
22:ce:c4:f9:14:bc:31:c9:1c:ad:64:bf:14:07:5a:
b7:80:72:78:d3:58:46:a2:06:93:17:9f:f8:e6:45:
b2:5a:56:f5:fa:16:79:a0:57:c3:57:61:0a:24:54:
08:37:0f:d6:07:4a:6b:d9:2a:1c:bb:8c:43:1c:82:
04:0d:ec:02:52:fb:c4:c6:e9:56:32:bd:6c:93:82:
65:eb:85:90:12:95:12:88:35:16:2c:b6:75:8e:3e:
44:a2:a5:c1:63:ab:5e:61:d0:21:57:ac:b5:97:aa:
99:73:8e:77:e0:ae:24:42:38:f0:09:e6:59:84:16:
e3:1c:c3:34:e3:9c:32:5d:dc:50:e2:9a:97:87:b0:
26:85:b9:15:78:4b:82:c0:fb:fb:87:4c:ca:fd:43:
18:9c:88:2a:c7:e9:0c:e0:32:c2:13:63:b8:64:71:
63:fb:7e:c3:12:cc:e4:21:c4:a9:75:59:74:8e:76:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:9A:2B:8B:97:6E:47:83:07:5F:B0:B7:AA:41:6E:62:69:10:24
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:82:52:bf:85:d3:90:24:f3:77:b9:56:a7:1a:3b:01:1b:f9:
36:06:13:d5:b6:dd:2b:7c:34:e7:dd:84:ce:1f:f5:59:df:d7:
1e:50:2c:18:78:f1:9f:32:be:3c:86:c5:aa:9a:57:09:2f:79:
38:f7:ca:23:2b:b1:ad:07:27:bb:d3:40:ad:57:02:0a:34:ce:
d8:c1:b5:26:c6:87:23:2e:2e:43:44:b2:da:3a:04:65:99:e8:
12:ac:fb:f2:b1:38:f0:a9:68:3b:bd:0e:29:c1:aa:b8:32:17:
5e:5e:c3:bf:de:1d:c3:ad:61:97:91:79:92:45:02:2d:5b:b2:
cb:6d:43:b6:3a:cd:64:c4:d3:af:db:80:f1:ec:12:6d:2e:3c:
10:63:f9:36:63:a3:87:d3:7c:7d:91:05:a6:23:82:ae:82:a3:
90:6c:4d:86:71:43:f9:15:27:a5:3d:43:5b:59:c3:fe:e3:a5:
05:55:58:fa:8c:80:1d:3b:8f:18:17:50:07:cc:1e:48:af:46:
b1:50:88:44:ba:44:4d:b9:ea:e5:0d:d9:e4:ff:b2:6d:96:0d:
22:3b:0a:00:de:fd:91:97:cf:7c:f6:2e:0d:f5:2d:a5:60:b7:
fe:76:52:8b:4c:35:ba:e4:58:56:1c:5e:5f:76:d0:57:6b:59:
4f:33:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:24 2025 by rpki-client