Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: caK5wRdb1aKCMuMiM1HTyx3us/68hkZzcEphb44CNCY=
Subject key identifier: 3A:EC:07:29:8F:33:04:4D:43:57:42:4E:06:B9:F1:09:98:75:12:53
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0197C53A51A0622772A6D7118CEA4066E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 152F
Signing time: Tue 01 Jul 2025 09:03:42 +0000
Manifest this update: Tue 01 Jul 2025 09:03:42 +0000
Manifest next update: Wed 02 Jul 2025 09:03:42 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: Nv3fkYIhXEtTYX93PzyGIl8ui7UQnReGSyL/93DwZ8E=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:3a:51:a0:62:27:72:a6:d7:11:8c:ea:40:66:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jul 1 09:03:42 2025 GMT
Not After : Jul 2 09:03:42 2025 GMT
Subject: CN=3aec07298f33044d4357424e06b9f10998751253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:f5:32:27:fc:c3:ec:60:70:ac:9f:d9:e6:
a3:c5:53:12:34:09:7b:e1:91:52:c6:9f:60:bc:d7:
75:3a:6a:07:6d:3f:da:8f:82:ab:3e:44:b6:4e:a7:
36:8e:29:2d:12:26:05:08:55:b7:f3:fb:57:94:e7:
4b:95:1a:e1:b8:a2:f4:82:64:be:69:bc:46:17:1b:
5c:11:74:75:7a:0a:36:b3:da:32:3a:f1:fe:2a:a6:
23:69:e4:37:3c:67:9d:8a:e3:6f:40:d7:7b:c7:00:
cb:8e:91:90:fe:bd:17:59:16:93:54:b2:e6:66:f5:
0e:0e:98:67:32:be:16:f9:c3:bf:71:ee:a0:be:78:
2c:f0:ea:0b:18:49:d6:b9:6c:ad:3e:eb:ef:1d:d9:
35:96:d0:4a:ff:e6:e7:99:90:60:0c:ba:f7:7d:75:
8b:b3:25:d8:e1:82:d6:ce:7a:8a:80:e1:c7:5a:a8:
e7:9f:f7:cd:cf:42:d6:24:9d:81:ff:f6:02:4f:d9:
37:8d:ad:e8:37:39:99:33:f8:c5:f2:f8:e0:a7:29:
68:ec:c4:15:6e:fb:a6:6e:e5:d0:2c:77:58:91:93:
c1:7a:8c:cf:b7:0b:00:17:97:fb:f1:c6:d1:6d:8a:
87:e2:d2:4f:a1:7c:3e:46:96:b6:f9:8d:ce:cd:fe:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:07:29:8F:33:04:4D:43:57:42:4E:06:B9:F1:09:98:75:12:53
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:9f:39:2b:ce:37:24:c9:49:5a:e5:4f:79:1a:73:70:7d:
01:93:ff:95:2f:4e:07:16:d7:0b:bd:e5:be:c1:50:dd:c7:c9:
a3:73:14:06:c6:e0:e5:6b:65:79:e3:34:f1:e2:03:de:7a:da:
42:97:e1:43:8d:bf:f2:1c:b7:93:80:bc:f7:f5:42:6a:31:45:
a1:4d:fd:1c:18:19:7e:44:31:5f:66:9c:a5:ed:2d:ec:a6:57:
fa:dc:61:a0:40:ca:f1:ab:7f:01:74:68:f6:a5:44:62:49:80:
ad:55:42:f0:d2:44:be:91:db:18:02:ef:b0:3f:0f:ba:c0:f0:
a6:a9:d7:83:86:ce:0a:1c:0a:86:c1:f3:04:3c:7d:93:df:f4:
2f:7e:30:a2:df:e6:95:04:a2:72:e0:7e:f9:c9:99:60:31:56:
3c:6a:71:47:06:30:81:ec:e3:c9:bd:6d:b7:6e:fb:ab:0c:22:
6e:ba:55:10:55:9e:39:93:4d:d3:82:87:24:90:59:e9:87:eb:
1b:56:a5:cf:91:1b:a7:81:d2:5a:dc:73:35:03:ee:bb:f9:da:
35:5c:7a:b6:7f:2f:d4:e8:4f:47:fc:e8:cc:1b:06:ec:bb:2b:
43:a1:cb:1c:68:1b:4a:54:4e:83:90:4d:78:57:48:a8:a1:f2:
3d:6c:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:16:25 2025 by rpki-client