Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: wNSOI1PetVxCJywxFk9rNtvpEStWUWHqoqzZDCvrCpU=
Subject key identifier: 08:1C:B7:EF:B5:8E:6F:54:BC:33:CF:7C:F6:BE:D4:67:05:C8:12:8A
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 01976F99B874D28C79ACF25B04043986D9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0AC7
Signing time: Sat 14 Jun 2025 18:00:34 +0000
Manifest this update: Sat 14 Jun 2025 18:00:34 +0000
Manifest next update: Sun 15 Jun 2025 18:00:34 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: 0kn9BP4lreNSyFKKo7oj8EOstVuWcoTUVgQIkYPElt0=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:b8:74:d2:8c:79:ac:f2:5b:04:04:39:86:d9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jun 14 18:00:34 2025 GMT
Not After : Jun 15 18:00:34 2025 GMT
Subject: CN=081cb7efb58e6f54bc33cf7cf6bed46705c8128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:8f:7e:78:50:87:54:14:11:ca:fb:10:73:
b1:87:62:76:8d:f5:c1:ed:06:b4:f2:40:f1:bd:8d:
80:e9:99:42:bc:a9:ea:80:84:da:c8:a1:36:0f:73:
b5:3d:cb:4d:0e:2a:4d:a1:63:45:bb:8b:6c:97:ea:
c6:f8:66:5c:ef:62:74:f2:1a:8c:b4:72:5e:42:0c:
4e:51:d7:ee:72:c2:c1:2e:7a:2d:d6:c7:b6:e7:f2:
95:09:d1:e4:0a:ea:87:d5:b5:94:ca:78:49:b7:3b:
f2:24:f1:5e:cf:d0:85:cc:99:2d:45:25:f1:1f:24:
fc:87:be:46:51:c9:a0:de:68:7d:6e:9c:21:b0:83:
cf:bc:ff:8f:ae:89:be:0a:db:6e:4b:13:4c:9f:6c:
a4:e0:5a:24:52:dd:75:16:4f:66:a5:7e:05:3f:ae:
ef:03:c4:dd:ff:37:66:33:f1:16:c3:7a:9b:59:a8:
90:cc:d9:dc:35:6b:0b:55:fa:ae:36:7b:d4:c8:b5:
30:93:4e:05:74:1f:08:de:66:eb:2b:b4:19:b2:12:
fa:5f:9b:e9:8e:da:09:da:79:5f:9a:5e:8d:13:19:
0e:53:74:d6:fe:73:d8:7e:4a:98:8a:b4:c8:e4:f1:
8e:c8:66:c3:39:21:45:bc:84:b9:5d:71:25:f4:a2:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:B7:EF:B5:8E:6F:54:BC:33:CF:7C:F6:BE:D4:67:05:C8:12:8A
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:36:7a:01:fc:89:32:56:9a:c9:71:79:70:be:e0:77:f0:
fb:50:a6:01:c7:2f:39:21:ae:b4:64:e7:be:9b:8a:bd:b4:15:
d8:ff:6f:42:f9:6a:4b:aa:64:bf:17:1c:5e:f5:a3:34:49:cf:
2c:3c:72:d4:db:af:61:20:07:ab:dd:09:93:31:f4:c9:cf:4d:
72:0d:b3:30:51:c5:f6:0f:19:09:09:84:9e:c3:3a:f2:ff:7b:
74:45:3a:73:c6:96:21:f7:00:b5:93:11:c9:9f:c4:74:4b:21:
c6:04:aa:fb:a2:80:d7:e7:82:e5:1b:99:12:00:d5:27:59:ce:
c2:a0:8a:e2:22:68:6f:41:e4:6f:33:21:cb:60:d1:67:fa:2a:
ff:e4:ba:b7:c1:43:ef:83:24:7f:b1:48:5b:36:e2:77:c9:93:
7f:08:86:e0:ac:db:3c:b8:9a:b4:f8:bd:7e:bc:0d:ae:9b:32:
e8:4f:3b:55:d2:c1:9c:e0:89:c8:af:66:ab:65:96:25:11:30:
35:c8:e8:c3:00:6d:f5:8e:1a:65:94:c9:a0:70:32:77:63:43:
20:f2:cf:d6:4c:4f:5d:1d:5f:0e:05:67:b2:7a:3b:4f:ad:d6:
b0:c1:16:0a:eb:b3:4c:c3:52:aa:73:c0:b2:5f:4b:51:ab:93:
fe:a0:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:43 2025 by rpki-client