Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: 17UKtiysGw8toW0rDVWRIr31Y2J3GnhEWPKAL5+DNb4=
Subject key identifier: C9:52:E1:84:A7:C7:82:B9:3C:7B:FB:75:12:30:4C:78:95:82:1D:39
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0197B6329462E6B4824D68DE404DC9B8FFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 15C6
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: jNrtjg/YhvGOS9ULjf/AJ6VoMu2NgJ1G/p9oAp+jF74=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:94:62:e6:b4:82:4d:68:de:40:4d:c9:b8:ff:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=c952e184a7c782b93c7bfb7512304c7895821d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:97:c4:96:00:84:92:c4:52:b7:b5:4b:e7:
5e:57:4d:bd:39:5b:7d:0f:45:d3:b0:69:c6:97:6f:
e7:e5:7c:ed:c9:37:d5:1e:aa:59:32:42:7f:3f:69:
99:b7:9c:46:23:7e:c0:3b:32:bc:cb:bf:80:6f:b6:
ee:a5:66:42:30:60:17:6a:30:88:a0:9a:bd:6a:fc:
a7:ac:0f:ca:5d:f6:11:0a:92:7a:8f:57:13:bc:35:
4d:0a:d8:2a:62:06:c3:a6:8f:bf:9d:81:23:c5:95:
13:3d:c7:2d:1e:25:cc:f6:b7:48:9f:e2:d2:64:eb:
9c:2f:ad:81:4d:01:6c:3b:e6:eb:6e:c7:3f:27:ec:
36:39:fd:98:5e:89:12:b9:14:4c:c3:54:54:61:b8:
37:c4:e5:ac:24:83:65:c0:b9:c1:7a:f8:e7:06:ae:
7b:4d:f1:c5:b7:51:4b:17:6d:92:db:a0:ea:02:69:
a8:46:e5:06:a7:cb:a3:2e:87:8f:e0:e9:f3:f2:f9:
ca:c4:91:24:48:b8:ab:68:1c:60:b9:f4:b6:bb:ba:
8b:e1:c9:0e:d9:5c:4b:bb:06:0d:17:d6:11:e7:00:
b8:24:e7:67:df:42:87:38:e7:d1:42:4b:87:1b:b8:
b1:80:b5:e2:36:68:77:79:9e:48:99:ce:61:5c:a8:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:E1:84:A7:C7:82:B9:3C:7B:FB:75:12:30:4C:78:95:82:1D:39
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:59:58:21:db:d7:50:bd:92:60:da:3b:77:9d:34:9d:cf:6d:
87:5e:ee:86:8c:25:4f:ef:f8:f4:ae:a7:35:9e:44:f4:18:b2:
ec:cc:0b:06:47:93:79:43:62:db:85:23:47:ff:bc:51:9c:1e:
2c:21:e7:2a:d6:b6:a8:05:d7:48:91:98:d2:f6:9b:3b:47:b4:
66:f9:4a:3c:02:ed:dd:b5:59:eb:b1:09:b1:3a:35:55:be:21:
d0:a4:8a:c7:15:8c:65:78:d3:3d:d0:b4:63:c2:4e:98:5a:23:
0d:40:27:a7:b5:3e:cf:64:12:45:ea:2d:11:ec:e1:8f:a9:2a:
a8:6a:3f:04:f8:2e:87:8d:07:ca:8b:5f:c7:19:79:c5:ff:80:
d8:98:61:7d:2b:dc:81:c5:c2:ed:55:fa:30:a7:39:9a:a1:76:
7d:4c:19:f6:35:e3:c1:61:f9:0e:f1:26:34:f3:ab:f3:b2:82:
52:9e:9f:f6:4b:e6:27:bf:37:18:32:ef:b6:9e:fe:fa:46:f9:
b1:9d:f4:9c:6c:4c:ca:ec:28:ce:9b:81:58:39:3e:35:51:19:
63:73:44:20:29:2f:e9:2d:4c:95:82:96:35:52:f4:ce:1d:28:
b0:b0:95:57:5c:cc:4e:2f:1a:a6:a9:ac:17:2f:d5:33:26:66:
01:82:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:38 2025 by rpki-client