Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: Zfyz9xsdoHkhCgMd7hsjAgbVOAvgKDlXpTuYUIGYRgM=
Subject key identifier: 7F:E5:5D:D2:78:DE:5D:ED:24:51:A3:DB:81:A7:25:5B:9C:6B:89:9A
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01988BB36C034545AD18F29AECCA75658882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0CE3
Signing time: Fri 08 Aug 2025 22:00:48 +0000
Manifest this update: Fri 08 Aug 2025 22:00:48 +0000
Manifest next update: Sat 09 Aug 2025 22:00:48 +0000
Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=)
2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: /EFX8vkxI62NorKslVwzHHgWnlye1/jVeXWN+pU2zZo=)
4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:6c:03:45:45:ad:18:f2:9a:ec:ca:75:65:88:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Aug 8 22:00:48 2025 GMT
Not After : Aug 9 22:00:48 2025 GMT
Subject: CN=7fe55dd278de5ded2451a3db81a7255b9c6b899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:32:33:f9:91:1c:73:6f:ac:10:dc:a6:43:
22:14:aa:8b:bd:b2:d0:73:a7:a8:f0:ea:c2:28:9e:
ec:d2:ec:ce:cd:88:e7:dc:6d:90:b0:79:14:13:41:
3d:30:08:5e:93:82:3d:b4:3b:a7:44:77:55:ee:b2:
58:fc:8b:6d:a6:62:a6:dc:a7:03:08:c6:e5:9f:78:
6f:11:4c:0e:49:9d:92:b3:dd:eb:56:48:33:a6:67:
6a:ce:aa:46:c3:ac:43:64:21:e6:0f:2c:18:26:4c:
56:34:85:01:dc:b4:f5:09:d4:23:86:58:c5:7a:53:
e2:7e:11:1d:9f:e4:35:d6:36:e9:f4:11:6c:cd:85:
8a:67:8b:f0:2a:85:fa:7f:d3:25:9c:18:35:04:78:
56:05:16:b3:0a:d1:46:3b:f6:fe:0d:05:8c:3c:98:
1e:a0:73:4f:ba:ca:da:ed:a4:8d:aa:5a:9b:ab:a6:
b7:0b:a7:01:bc:55:89:ad:6b:60:a2:e1:93:23:6f:
47:b1:ca:a5:c8:80:c2:88:88:81:84:4a:62:2a:cc:
94:9a:47:a7:15:16:13:ca:35:7c:27:61:c6:ea:d0:
4e:50:67:15:cf:77:62:2a:bf:47:a1:82:20:a6:ea:
1b:9a:a7:58:fe:1e:22:5c:45:e0:f5:26:20:2f:26:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:5D:D2:78:DE:5D:ED:24:51:A3:DB:81:A7:25:5B:9C:6B:89:9A
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:7b:98:a2:7b:f6:1e:4e:a3:b2:ab:12:64:ba:9e:17:c4:
bd:da:e2:2c:67:d4:36:fc:90:11:4d:76:fa:d1:d6:7d:4f:8a:
f0:f6:db:ff:d6:38:1a:46:d8:95:d0:f2:99:56:98:28:2b:69:
08:1e:a2:c7:0e:fd:17:52:1b:f9:cc:78:04:bf:2f:07:13:b1:
e5:6c:ec:7d:65:cb:97:48:07:fa:5c:27:1b:17:29:2b:5d:ef:
d5:28:29:54:cc:91:b6:6f:14:e8:3b:9e:9c:56:4f:51:18:ec:
11:8b:3a:fc:a8:f4:fc:61:09:3d:e5:bb:cc:2d:52:96:66:13:
68:ba:ba:80:06:51:11:7f:0c:57:1d:4d:ab:59:a2:1a:87:13:
27:94:b6:17:7e:a2:51:b4:81:d3:24:09:03:8b:cd:f0:67:09:
01:0d:34:76:01:f1:14:36:d0:eb:5f:61:f8:6d:35:2a:e6:36:
dc:ee:3a:f4:f1:c2:89:32:aa:00:aa:e9:fe:fa:18:78:f8:97:
0f:81:c4:e7:4d:c6:a5:37:b7:f0:75:d9:6c:9a:b3:3a:6d:ac:
e2:95:39:fb:67:a0:d4:fe:3e:85:1a:2c:ec:da:b5:ad:28:17:
a9:e1:02:bb:c4:0f:8c:34:7e:02:e8:f7:52:9c:82:ff:d8:ce:
e9:69:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:17 2025 by rpki-client