Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: DmaZMyjlbq6L1xM7txyWSohWsWYW5ZApjHITEniji+4=
Subject key identifier: 5E:A8:77:0C:4B:C3:B9:D8:70:50:46:0B:5E:AD:76:12:CA:D2:9D:97
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 0197B70F0C0A5670BB62FB290459E2573555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 1122
Signing time: Sat 28 Jun 2025 15:01:45 +0000
Manifest this update: Sat 28 Jun 2025 15:01:45 +0000
Manifest next update: Sun 29 Jun 2025 15:01:45 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: TIrZTTPK7ThM/n/h6KSj5OqgHDSjbTZofkRLn0orlNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0c:0a:56:70:bb:62:fb:29:04:59:e2:57:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Jun 28 15:01:45 2025 GMT
Not After : Jun 29 15:01:45 2025 GMT
Subject: CN=5ea8770c4bc3b9d87050460b5ead7612cad29d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:96:d9:3d:2a:77:3d:d7:eb:89:a0:8f:09:
da:cd:0a:60:2c:f5:14:b8:58:59:3c:d4:7d:b2:c6:
99:1f:3d:ff:3d:f1:23:e2:9e:84:b4:06:e9:34:4c:
e5:7e:e1:1f:c8:7d:96:f6:f6:55:8a:99:aa:e4:e6:
f3:7b:c2:d8:10:58:6e:35:25:42:7c:5d:d3:8e:a3:
92:0d:aa:e9:7e:40:a4:62:3f:b0:8c:89:51:1d:35:
81:11:11:4f:87:b6:c1:e7:2b:72:d6:d7:04:00:3a:
07:3a:98:27:ff:2e:02:70:d5:b9:5e:ae:7b:32:e5:
bc:6a:c5:0f:b3:f5:72:44:40:02:ba:88:d5:bf:c9:
87:68:b4:40:9d:5f:d9:5b:f0:b4:12:a7:0b:34:0a:
93:40:e1:5f:1c:af:3d:d1:c4:c2:23:e6:58:0a:8c:
b4:95:94:df:dd:5f:55:1d:73:e7:ad:d9:42:2b:52:
17:1a:b7:5b:3b:ed:fc:f6:bb:0c:c0:11:6d:6f:06:
ee:e7:ea:06:b2:51:da:85:30:8b:1f:f2:3d:f6:54:
0e:2f:76:e6:42:a2:32:f5:ed:9a:61:90:a2:17:69:
ea:83:4d:51:fd:f5:d0:f0:f4:8f:e8:55:7b:23:cb:
1d:3e:22:67:47:c5:10:7a:a2:92:b6:07:ee:3c:08:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:77:0C:4B:C3:B9:D8:70:50:46:0B:5E:AD:76:12:CA:D2:9D:97
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:1e:34:a8:76:cc:4c:5e:8b:02:db:b7:58:43:e9:65:c4:
b4:9c:7c:9b:5b:1e:9e:56:80:8a:92:26:49:ff:31:39:a2:05:
1a:6c:8e:16:e3:1d:be:9d:32:36:e4:46:77:46:98:7a:0f:0e:
47:fd:9d:67:ca:94:bb:ce:56:69:ac:4f:3f:fd:83:8e:5c:0c:
64:de:b6:3f:ae:85:26:12:9f:cc:11:cb:98:ec:45:bb:52:59:
b7:c2:0d:35:49:84:94:96:cd:30:24:40:4c:d5:0f:7a:16:61:
55:36:bb:71:1b:b2:b4:13:64:eb:8a:0d:ab:12:a5:58:b0:a8:
28:23:56:e5:57:76:99:d5:fd:3f:81:6a:20:a7:89:27:fc:42:
d7:26:a8:1d:6d:0c:03:bb:06:05:a2:7c:80:66:5e:ca:60:68:
8e:f6:96:68:94:3e:f2:93:c3:2d:3c:a5:db:f7:84:d8:52:7c:
95:c5:de:16:a3:b3:29:2f:fb:f9:2b:97:e8:2d:13:7c:6d:75:
0d:3c:33:f6:ad:11:e5:f8:33:20:43:72:bb:e0:ec:91:54:1e:
a2:04:ab:36:d9:0d:94:05:fd:ae:3f:e7:05:4c:50:0e:32:6b:
0d:19:4c:a6:76:03:b1:a1:19:dd:a6:3a:e2:65:58:f0:ac:37:
d0:cc:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:23 2025 by rpki-client