Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: pju9syPbodqTsA1d0JHFfxQXwLpNsdVL+KR5QU2bg2g=
Subject key identifier: 39:98:43:7C:C1:08:B3:8E:49:A6:3A:8E:44:06:75:30:4B:FA:29:FA
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 01976E192D6B697AAB07E8C5E31668EB5161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 15D8
Signing time: Sat 14 Jun 2025 11:00:33 +0000
Manifest this update: Sat 14 Jun 2025 11:00:33 +0000
Manifest next update: Sun 15 Jun 2025 11:00:33 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: 5W1byK2Jhad5qoGe78ZJtVlBkq7FO6yreLdSqbdnrTc=)
2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:2d:6b:69:7a:ab:07:e8:c5:e3:16:68:eb:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jun 14 11:00:33 2025 GMT
Not After : Jun 15 11:00:33 2025 GMT
Subject: CN=3998437cc108b38e49a63a8e440675304bfa29fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:08:1a:b4:58:3f:35:f2:0b:6e:5e:6d:ed:
ef:98:65:af:b0:65:bf:62:99:1d:5e:9a:81:4c:d8:
e7:be:5b:77:22:a7:c4:03:31:fe:cf:0e:23:8b:63:
01:0a:b7:23:98:07:e3:fb:90:97:03:45:ee:c5:8b:
3f:3f:df:f0:a0:93:e0:10:0d:d9:93:cd:ff:85:cf:
19:13:ec:0f:72:a6:59:15:a8:b4:4f:e6:4f:83:46:
fb:65:e7:5a:16:22:64:f8:b7:00:16:fb:c0:ca:13:
c2:32:9c:67:3a:ed:15:d0:d7:c6:0b:66:75:9b:d7:
06:12:2a:f6:ef:6e:36:f9:25:21:36:67:5d:b6:39:
84:07:16:c5:d8:bf:f9:97:d0:aa:b3:59:1a:18:5d:
ee:f4:c7:9c:54:5f:40:db:34:fd:ab:a7:92:91:21:
ea:64:26:ed:dc:42:41:3d:52:94:db:de:10:0c:41:
9a:f6:5f:c2:cc:09:6f:85:b9:2d:16:11:35:99:18:
bc:66:78:c9:d6:f3:64:60:10:23:ee:7d:2b:12:e8:
06:c7:f5:da:b1:70:f1:db:32:52:73:ff:14:fb:ed:
e5:71:9b:15:20:25:06:23:f3:50:4c:c8:43:6f:31:
5a:6c:6a:46:3e:85:69:20:24:a0:81:36:42:14:de:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:43:7C:C1:08:B3:8E:49:A6:3A:8E:44:06:75:30:4B:FA:29:FA
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3a:56:b1:45:50:96:5f:33:55:8c:62:e3:b7:e9:84:d6:e7:
a8:6e:66:c7:46:a9:2c:ab:eb:02:53:9e:ad:45:dc:93:cb:52:
2a:65:3c:cb:a7:23:69:12:f8:b7:7e:53:a0:e7:02:1d:ae:53:
f5:74:e2:03:fe:2d:bf:2f:fa:55:39:76:69:1e:b1:36:7c:36:
4a:c3:6c:a7:08:65:19:32:08:45:54:1c:ef:20:0c:a8:e1:dc:
43:a2:74:40:a1:9e:cf:8c:5e:63:c8:db:c4:15:3a:ca:ec:9d:
d8:9d:4d:ea:82:d6:e9:f4:bb:52:12:ed:a9:f4:48:ee:ff:62:
63:5c:03:7f:c6:3d:64:89:0f:ce:89:3a:ae:22:13:07:0c:21:
8f:f4:5f:0a:fd:57:d4:f9:ec:a6:10:24:46:29:3b:d2:91:0d:
04:2c:82:1b:55:0c:38:12:94:53:ea:01:b1:54:db:de:80:ab:
ee:ca:64:9a:32:31:ce:7e:2a:d9:f4:9a:34:d0:1a:3a:26:00:
41:09:39:37:e2:07:a5:0d:94:3c:2c:8f:47:03:a3:b5:d9:81:
38:fe:73:1f:0b:a3:63:5f:bd:ad:a1:f3:55:f8:0c:99:2d:9f:
0a:3c:de:ed:b1:0f:ca:9c:f2:0c:be:ea:4b:e1:08:89:3c:2a:
70:e5:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:32 2025 by rpki-client