Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: EBW9kE59bZ5I1IK1u5zMk6ZsI9HKUCszYmxNp9rfDWU=
Subject key identifier: 8C:49:B9:4E:B9:E1:FB:36:A0:14:C5:DE:B8:11:0C:B1:0B:E2:83:6E
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0197B7B355FCEDE4E2E570140479239E69E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 08F9
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: MEo0TbV7VE4gUdq6rtOGA/XT+XszGXGPK5qcPLTvZrg=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:55:fc:ed:e4:e2:e5:70:14:04:79:23:9e:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=8c49b94eb9e1fb36a014c5deb8110cb10be2836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:d7:f3:4a:d7:9f:14:d3:f0:10:12:e4:b6:
1d:4c:f1:c0:a1:be:01:cd:c2:0c:fa:4b:de:d7:bd:
fc:de:53:d3:bb:da:da:36:27:05:9a:28:f9:b8:4e:
90:38:a7:1b:f5:4c:ba:f6:a7:68:48:a1:19:04:e9:
68:b4:8f:fa:36:0e:f7:1a:dc:2c:67:e1:e3:91:fc:
e2:67:bb:c9:68:8b:b8:ed:4b:d4:b5:ca:fa:e9:72:
c3:0f:0b:fe:88:fb:a3:7f:02:3f:6e:3d:34:38:28:
01:4e:e6:eb:91:ce:ef:25:3f:22:a7:6b:29:e0:6e:
82:68:6f:a6:7e:de:d3:97:35:1e:f5:93:72:fb:b3:
09:bf:e8:ec:82:51:81:a1:37:1a:6c:ea:7d:50:5e:
36:1b:b2:91:54:0c:a5:a2:a8:f9:f2:4f:16:a3:01:
4a:7f:65:a6:fd:83:6a:e4:0b:c7:d6:3a:89:a2:b5:
25:29:44:d4:f7:b8:92:41:2a:94:e9:10:fe:30:7d:
70:7c:f3:ef:51:e8:35:44:1e:b3:80:c1:5f:dc:ee:
3f:6d:2d:27:b8:61:f2:d2:78:c3:b0:c0:f0:18:6a:
7c:d8:97:60:ea:8f:ac:65:cf:fd:4a:1b:fd:90:cc:
39:46:84:b7:6b:c2:00:f9:ab:1f:4f:cd:15:c5:1e:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:B9:4E:B9:E1:FB:36:A0:14:C5:DE:B8:11:0C:B1:0B:E2:83:6E
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:53:b5:22:90:7c:20:8e:6e:60:af:58:2a:d9:b4:16:08:
15:1e:ee:37:d5:04:98:e2:64:7d:a2:86:0b:3f:15:02:00:f0:
2e:4d:13:31:bb:ad:76:cb:94:cd:2a:22:57:ba:d4:87:08:91:
63:34:9b:40:57:e6:d6:f7:b2:be:34:77:a7:d8:ba:55:0f:ad:
79:6f:40:79:99:a4:91:98:f9:63:ad:b3:56:2d:00:51:51:ac:
d5:24:fd:94:29:23:75:f8:79:1d:87:51:f0:c5:3f:9e:34:59:
8d:67:22:13:f8:1c:4f:6b:01:0c:84:e1:2d:84:7d:80:8c:96:
59:02:0a:6b:38:a5:50:0b:c6:05:e0:0a:b6:9b:7d:74:be:5b:
29:9c:cb:40:f0:c3:24:a4:00:29:66:ed:e9:f8:05:3d:0d:88:
6d:59:6a:8b:9e:1b:5f:dc:ae:7f:9e:8b:23:b8:c4:6b:f8:ab:
80:35:46:d3:0c:ab:d3:e0:8c:5f:31:ff:90:3f:94:77:5c:6d:
56:fb:83:dd:f8:66:21:36:16:4b:0c:95:68:dc:f3:8d:bd:59:
f9:19:17:c9:da:17:93:58:05:ae:ff:c8:45:57:4f:c8:b6:99:
49:8f:11:90:ae:c9:b7:ed:34:79:b5:67:5f:a4:7e:c6:97:ff:
41:f7:bc:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1X87eTi5XAUBHkjnmnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjUwNjI4MTgwMTEyWhcNMjUwNjI5MTgwMTEyWjAzMTEwLwYDVQQD
Eyg4YzQ5Yjk0ZWI5ZTFmYjM2YTAxNGM1ZGViODExMGNiMTBiZTI4MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq7X80rXnxTT8BAS5LYdTPHAob4B
zcIM+kve17383lPTu9raNicFmij5uE6QOKcb9Uy69qdoSKEZBOlotI/6Ng73Gtws
Z+HjkfziZ7vJaIu47UvUtcr66XLDDwv+iPujfwI/bj00OCgBTubrkc7vJT8ip2sp
4G6CaG+mft7TlzUe9ZNy+7MJv+jsglGBoTcabOp9UF42G7KRVAyloqj58k8WowFK
f2Wm/YNq5AvH1jqJorUlKUTU97iSQSqU6RD+MH1wfPPvUeg1RB6zgMFf3O4/bS0n
uGHy0njDsMDwGGp82Jdg6o+sZc/9Shv9kMw5RoS3a8IA+asfT80VxR5sDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxJuU654fs2oBTF3rgRDLEL4oNuMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONRTtSKQ
fCCObmCvWCrZtBYIFR7uN9UEmOJkfaKGCz8VAgDwLk0TMbutdsuUzSoiV7rUhwiR
YzSbQFfm1veyvjR3p9i6VQ+teW9AeZmkkZj5Y62zVi0AUVGs1ST9lCkjdfh5HYdR
8MU/njRZjWciE/gcT2sBDIThLYR9gIyWWQIKazilUAvGBeAKtpt9dL5bKZzLQPDD
JKQAKWbt6fgFPQ2IbVlqi54bX9yuf56LI7jEa/irgDVG0wyr0+CMXzH/kD+Ud1xt
VvuD3fhmITYWSwyVaNzzjb1Z+RkXydoXk1gFrv/IRVdPyLaZSY8RkK7Jt+00ebVn
X6R+xpf/Qfe8Ug==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:44 2025 by rpki-client