Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: NNPaJed3syXH0CurqKL2gPpW3oBcKVmx+7+Tv30JGo4=
Subject key identifier: 27:17:84:8A:19:2C:22:4A:3B:2E:BC:E6:6D:BF:3C:CE:97:71:46:AB
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019769CE6FA8111B1715CFF0433CD45476EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 151E
Signing time: Fri 13 Jun 2025 15:00:25 +0000
Manifest this update: Fri 13 Jun 2025 15:00:25 +0000
Manifest next update: Sat 14 Jun 2025 15:00:25 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: O0p8z168baE7062sVxH/DwmtyWChwHDgW0yPIeYn2OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:6f:a8:11:1b:17:15:cf:f0:43:3c:d4:54:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jun 13 15:00:25 2025 GMT
Not After : Jun 14 15:00:25 2025 GMT
Subject: CN=2717848a192c224a3b2ebce66dbf3cce977146ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:98:94:13:56:7e:c5:bf:99:41:5a:19:64:
f6:1a:7f:1a:ee:56:a6:eb:eb:30:c7:8e:f6:f1:12:
c3:79:b5:41:65:7c:81:c4:f2:2b:3a:3d:a0:a6:73:
56:03:da:5e:fc:b2:27:08:d1:65:14:23:cc:ef:33:
a9:ed:a5:0a:f8:48:08:43:66:48:f6:dd:98:1d:6b:
5d:66:40:dd:2b:0a:28:9f:25:af:38:71:08:2a:ec:
0c:13:df:bb:08:23:b9:ae:33:c7:dc:a2:cc:6b:e0:
9b:5c:7f:5e:bd:9d:28:40:b9:18:00:69:12:b9:35:
cc:12:41:c7:47:fa:98:b2:56:65:f5:10:39:63:1b:
63:b5:04:69:d2:a7:ec:42:bb:52:a4:56:fb:54:8c:
ca:e3:3e:ed:39:f5:59:0e:b1:3b:d4:41:5e:9e:8f:
cc:7c:c7:f4:02:62:dd:81:0c:c6:f0:60:06:e5:ac:
32:6d:02:92:0d:64:c1:6f:db:41:e5:29:4f:a4:56:
7a:6b:90:fc:6a:8e:17:f5:c0:20:7d:c3:7d:69:8e:
81:65:8c:79:b0:03:00:90:21:6c:67:2a:fa:3e:8d:
90:02:5e:06:ea:b1:d7:66:43:43:cc:85:01:f1:2f:
2d:e0:a9:d0:91:51:92:a1:65:7a:da:d0:7d:b1:0a:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:84:8A:19:2C:22:4A:3B:2E:BC:E6:6D:BF:3C:CE:97:71:46:AB
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:7c:07:e5:1b:5e:b0:a7:24:cd:2a:a9:a2:19:1f:6c:d7:
02:14:e9:10:34:c9:7b:85:e3:13:33:2e:82:03:42:9b:31:fc:
51:44:dd:f8:a3:0d:28:11:4a:e9:d1:1d:51:30:71:9c:4b:b8:
ea:b1:2c:4e:7d:1d:f7:46:df:b5:27:b9:eb:4c:85:44:a1:91:
e9:2d:6a:c6:16:73:40:13:1a:04:49:72:ff:fd:35:65:bb:a8:
29:88:90:73:fd:1f:a8:45:a2:4f:9f:c4:e7:5d:d0:3f:85:f1:
7d:1c:5f:3c:94:9e:8b:fe:6d:24:b5:2f:ca:7e:88:bc:ef:3b:
c7:05:b4:7c:09:8e:6f:89:26:99:21:8a:fc:00:e3:92:2f:6a:
c2:5f:93:8e:b6:1a:52:b9:27:3b:7b:b1:82:81:29:1b:10:e3:
bb:e8:d9:14:45:93:35:42:ff:af:e6:f7:3c:33:e7:65:a3:7d:
8d:ab:7e:3c:b4:5a:2c:c4:05:15:d1:9f:32:50:7f:0d:1a:6a:
7c:a5:96:30:da:21:c1:40:12:5d:87:52:96:d3:00:be:5f:16:
63:ce:3d:fe:a2:3e:d2:82:91:03:ae:da:eb:47:16:78:17:e9:
70:37:e1:e0:fd:50:08:72:5c:e3:8b:f5:a3:16:0b:09:6f:2d:
d8:ff:1c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzm+oERsXFc/wQzzUVHbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjUwNjEzMTUwMDI1WhcNMjUwNjE0MTUwMDI1WjAzMTEwLwYDVQQD
EygyNzE3ODQ4YTE5MmMyMjRhM2IyZWJjZTY2ZGJmM2NjZTk3NzE0NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dGYlBNWfsW/mUFaGWT2Gn8a7lam
6+swx4728RLDebVBZXyBxPIrOj2gpnNWA9pe/LInCNFlFCPM7zOp7aUK+EgIQ2ZI
9t2YHWtdZkDdKwoonyWvOHEIKuwME9+7CCO5rjPH3KLMa+CbXH9evZ0oQLkYAGkS
uTXMEkHHR/qYslZl9RA5YxtjtQRp0qfsQrtSpFb7VIzK4z7tOfVZDrE71EFeno/M
fMf0AmLdgQzG8GAG5awybQKSDWTBb9tB5SlPpFZ6a5D8ao4X9cAgfcN9aY6BZYx5
sAMAkCFsZyr6Po2QAl4G6rHXZkNDzIUB8S8t4KnQkVGSoWV62tB9sQqIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcXhIoZLCJKOy685m2/PM6XcUarMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLx8B+Ub
XrCnJM0qqaIZH2zXAhTpEDTJe4XjEzMuggNCmzH8UUTd+KMNKBFK6dEdUTBxnEu4
6rEsTn0d90bftSe560yFRKGR6S1qxhZzQBMaBEly//01ZbuoKYiQc/0fqEWiT5/E
513QP4XxfRxfPJSei/5tJLUvyn6IvO87xwW0fAmOb4kmmSGK/ADjki9qwl+TjrYa
UrknO3uxgoEpGxDju+jZFEWTNUL/r+b3PDPnZaN9jat+PLRaLMQFFdGfMlB/DRpq
fKWWMNohwUASXYdSltMAvl8WY849/qI+0oKRA67a60cWeBfpcDfh4P1QCHJc44v1
oxYLCW8t2P8c/Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:42 2025 by rpki-client