Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: DKPsfZArmaqXTooBBtX6cRN/ggGXiK+6lyrneDcICfo=
Subject key identifier: 1F:61:2A:D2:F0:19:39:57:09:8A:34:B3:E8:9F:C3:9D:0E:42:78:12
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 0197B70EE4AE7AFCCF1CCA2722732A50E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 12EB
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: NovYjt0qJWoRB6EFwsRUHpq+PUCP3e8Lnsy1aoU/XFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e4:ae:7a:fc:cf:1c:ca:27:22:73:2a:50:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=1f612ad2f0193957098a34b3e89fc39d0e427812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:00:02:19:6a:3a:5e:c5:bd:02:31:2e:42:
b2:b0:49:5d:31:b8:a6:0f:1a:0e:3e:3b:c8:7a:42:
07:57:83:be:73:d5:ba:2d:13:bb:3d:ea:be:14:1a:
76:d0:58:4c:de:c9:84:1f:74:c4:44:bc:92:11:cf:
a7:5d:c8:59:4b:78:3a:62:03:3a:62:23:25:fe:56:
5d:9e:6c:02:c3:1a:b0:1e:70:7a:4e:13:99:0e:a5:
27:72:1a:1c:f6:69:43:52:db:6e:f5:69:0d:c3:7c:
86:40:c0:9d:0a:49:ad:20:15:04:4f:48:0a:6a:df:
83:e3:6d:b5:56:e4:fb:4f:d9:7d:aa:4e:cd:63:49:
02:a3:1e:58:45:47:a8:95:a0:8e:b4:73:dd:e0:c9:
17:35:fb:68:7e:33:5c:7b:e8:ec:51:56:b1:5f:be:
e9:94:a9:59:76:b6:59:dd:27:81:53:bb:3b:70:50:
cd:a3:12:16:80:f3:b8:79:2e:31:45:ca:68:6d:69:
0c:9b:b1:4a:3d:db:96:af:a9:48:33:24:0c:f6:1c:
f3:dd:ee:62:ca:70:75:b8:80:5b:09:16:0d:f5:94:
7d:70:e1:fb:6e:6e:59:42:ed:73:61:5f:f7:06:25:
97:ed:5e:c3:64:a2:dc:12:55:02:b4:ee:4c:18:86:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:2A:D2:F0:19:39:57:09:8A:34:B3:E8:9F:C3:9D:0E:42:78:12
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:35:8a:72:db:20:f5:92:89:dc:cc:66:2c:aa:d0:6e:20:
d1:39:d1:18:1a:f4:07:87:3f:ec:c5:b4:43:68:b3:59:7b:8d:
16:02:0d:63:b2:a2:c3:3f:da:8e:bb:d7:cb:77:4a:80:24:12:
75:3b:e3:a5:ee:cc:e3:32:89:92:b1:68:91:83:12:fa:69:be:
3d:c9:b4:7b:4a:7e:5b:0d:2d:99:71:d4:6f:8c:6f:08:6e:1d:
42:81:4e:52:71:32:ec:be:41:87:21:cb:a1:86:b3:2d:9d:e5:
9d:aa:df:21:b9:65:01:de:bb:99:4b:39:fa:d7:62:d1:80:d1:
fa:43:14:29:73:37:dc:ed:7d:a2:ea:40:d0:f6:12:64:f3:c1:
fd:ec:ee:b8:11:bd:59:30:3e:97:1d:c5:f6:f2:53:6d:c9:16:
2f:4a:f7:df:d8:3e:cc:d4:f8:d9:27:4d:63:5f:fa:c5:75:d2:
a0:95:fa:ad:87:a6:ee:f3:ab:a9:d0:2f:1d:ea:14:9d:17:b3:
e1:e1:18:d3:65:7e:ba:9e:0b:a4:9b:68:15:c7:2a:b3:02:c7:
8c:34:b5:a4:ac:8a:ba:1f:49:ef:85:68:d4:3b:0c:fe:50:7a:
37:27:62:e7:2a:63:c1:77:ed:94:51:31:9e:cb:18:3b:f7:1d:
a3:3f:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:24 2025 by rpki-client