Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: C2PwNN2xKW3bab/DJ7sT2q0xTXtfwrqzymZbl52L/tQ=
Subject key identifier: 7E:D0:A3:76:BE:F8:17:22:B9:EB:D4:74:A6:78:48:CE:6D:79:23:8C
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0197B96AFFE9943731D5AEEDC876A22FB07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: sFZWzIbg0XeIvUeJHhlvXF7po1qAiRFVzsEKTqwEsW4=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ff:e9:94:37:31:d5:ae:ed:c8:76:a2:2f:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=7ed0a376bef81722b9ebd474a67848ce6d79238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:c4:58:83:d3:60:ed:1d:55:e8:de:25:25:
62:99:5f:a9:2e:36:00:c9:93:6f:35:40:45:22:b3:
98:ec:4f:19:31:68:cf:47:89:d1:82:33:0f:1d:98:
f2:6f:5b:b4:0a:44:f1:26:5a:46:0d:b9:8b:1d:2e:
b7:d0:5c:ae:1e:a6:48:5f:0d:2f:6c:7c:86:d3:cf:
b8:80:46:4d:ab:13:f1:8b:46:be:9e:1b:96:ad:04:
b9:12:52:34:22:17:72:51:b8:e0:71:1a:23:75:06:
e9:a2:78:72:1e:55:44:38:63:4c:f5:c0:0c:08:06:
2a:4e:0f:dd:58:ba:ff:25:2c:f5:30:21:5f:db:cc:
ec:60:5f:9a:a1:de:eb:f9:4d:8a:ab:69:01:ae:33:
2b:69:75:a5:6e:b5:60:96:6e:4b:a9:67:af:7b:61:
49:e8:45:71:62:76:40:8c:5d:c7:c5:57:17:e0:1d:
a2:de:0c:70:64:b7:48:56:7d:4b:03:b6:a8:31:c3:
cd:50:e4:cd:29:52:14:80:66:fb:b8:db:24:6b:77:
78:7f:23:11:22:ec:da:c4:fe:ee:53:06:ae:98:3c:
3b:73:2f:e4:04:b7:d8:5f:c0:84:7b:d8:84:ce:c7:
56:77:6c:ae:f6:d7:ec:b2:42:d4:07:c8:9a:6b:14:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:A3:76:BE:F8:17:22:B9:EB:D4:74:A6:78:48:CE:6D:79:23:8C
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:33:1d:a3:50:2f:04:c9:fb:9e:fb:c7:cc:82:4b:63:b5:a2:
4e:24:71:b2:8b:e4:9f:cb:b3:f7:0f:9e:a5:0d:68:c8:50:9d:
26:5b:55:70:b5:9d:bc:e2:ec:05:c5:c4:a9:8a:ff:8b:4f:96:
06:00:32:7c:da:61:d6:8a:67:cf:be:b1:3c:ed:b3:11:64:cb:
54:03:6d:69:6c:6f:66:c9:fb:ce:39:72:fa:3c:b4:0b:b4:1e:
5a:bd:98:8f:51:89:58:90:e7:b0:be:f5:cf:74:3a:1c:eb:de:
e0:c7:97:4f:05:e0:4d:e9:75:31:b3:2c:3c:bb:9d:fa:dc:38:
66:91:ce:7d:a4:50:39:bb:a6:a2:e0:d8:51:8f:df:96:e4:a8:
8b:cf:d5:bb:a7:e5:14:86:89:0c:07:2f:d9:70:91:65:62:d6:
20:22:57:cd:10:7d:a8:31:b6:bd:80:5e:67:ba:ea:08:94:d8:
13:a8:69:ef:e0:44:06:01:0e:52:1d:af:93:35:1c:d9:65:90:
37:56:6a:21:72:a3:30:00:ab:44:c0:df:8e:80:fc:7b:99:9d:
69:42:be:bc:04:47:3f:d2:48:cd:9e:24:64:fc:20:51:cc:40:
59:a5:2a:71:f9:4b:a0:99:f7:ec:86:1b:a8:09:66:ef:62:5b:
3a:aa:3c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:12 2025 by rpki-client