Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: gb8JWrsP8gaf/3EC2nMtXDtMY7tsl2v6/hxSro8sUX0=
Subject key identifier: FA:E8:2A:94:22:7B:E8:7D:70:FC:15:60:11:62:8C:4E:08:1C:27:11
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0197B6D7663C5FDAE22F1AB019C2563C0A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 097D
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: y1uijcRBK8vXjk2Yxa2Y6i3LlCc5+JCVi8Fq/qS2o0c=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:66:3c:5f:da:e2:2f:1a:b0:19:c2:56:3c:0a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=fae82a94227be87d70fc156011628c4e081c2711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:47:ec:8d:50:79:13:2a:6d:85:a1:7e:cb:
13:1b:8d:4f:71:32:0a:7a:27:00:bc:3a:a4:ae:68:
8b:bf:a7:07:1f:1c:69:28:a5:c0:52:9f:ba:86:14:
a0:a8:aa:a6:23:57:9e:70:9a:ee:56:9c:8f:e4:e7:
28:54:aa:63:f7:21:6c:d0:f0:2c:83:7d:31:ad:0f:
e6:56:e6:aa:ba:73:29:4b:46:60:0a:a5:b4:74:b1:
1b:71:70:58:37:f3:1b:63:f2:e8:fb:62:ac:0d:4d:
ae:7d:70:f9:e2:93:30:70:d5:86:4b:5c:98:ea:b6:
ad:26:17:23:0e:71:89:45:d1:2d:f7:70:b6:55:8b:
70:d6:f9:96:be:19:da:5f:d5:8f:d8:3d:3c:92:d6:
02:5e:89:cf:e5:f8:94:7e:4d:e7:12:04:83:fe:96:
3a:b3:57:d0:7f:e5:54:20:1f:60:c0:12:b1:b7:0f:
69:bc:2c:72:de:7a:f6:82:a4:2b:8c:07:25:0e:93:
cb:56:9d:66:03:df:8f:8e:36:bd:47:98:e7:e8:dc:
b7:9d:f2:eb:13:15:53:fa:9c:3b:79:34:2a:94:3e:
28:45:e4:2c:60:84:31:a2:af:7f:c1:fb:cc:8b:f4:
01:48:68:ce:bb:38:1c:71:ba:d6:9a:0e:06:03:2b:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:2A:94:22:7B:E8:7D:70:FC:15:60:11:62:8C:4E:08:1C:27:11
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:34:b6:cf:e2:84:61:7a:75:f5:f4:e0:d0:fa:60:52:3f:
28:1b:1d:b4:77:5c:6a:3a:17:3d:cb:3e:92:1c:79:ea:f2:51:
e7:67:10:d0:78:2f:07:8f:7c:26:5d:f4:38:74:8c:b4:3c:d9:
b4:10:d0:35:ff:d1:eb:f6:b9:39:f2:91:71:7f:29:2b:02:cb:
c6:67:6d:aa:39:32:7d:fb:01:70:04:8c:63:a0:64:0f:d5:26:
9d:35:00:92:a9:7b:59:c1:a4:da:f0:c0:77:96:ed:1b:11:37:
83:f8:d3:08:f8:6a:d7:e0:5d:c1:75:98:22:1e:97:15:61:d7:
1b:d0:16:fc:13:85:28:e4:61:ce:f0:3c:0e:4c:3b:1f:d4:b9:
60:ae:34:42:29:c2:74:dc:f2:9c:91:df:e1:52:19:00:b8:51:
67:8c:d8:78:be:65:fc:06:3a:f4:43:be:7f:bc:80:de:db:16:
cd:df:6d:18:67:77:fa:cc:da:9f:ce:ae:0e:ab:90:46:b5:2e:
79:78:43:41:be:de:4e:75:63:56:61:5f:05:df:42:b9:0f:f4:
f5:6f:c3:4a:23:0d:1f:f9:a0:ab:e3:22:f5:94:04:08:7f:cc:
92:fe:45:8d:f1:d8:5d:83:0c:59:fa:3d:11:f1:d3:03:74:db:
d9:af:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:01 2025 by rpki-client