Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: N2g1VMVJxhq/5+OLRm1IpWGtmm0YP7/a95xlhCJCmGg=
Subject key identifier: 43:84:E9:01:0F:A5:23:82:A2:FF:1F:36:66:B8:70:19:57:6F:32:6F
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0196AF8D9A2D9406651EA18B7E47722B9C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 153E
Signing time: Thu 08 May 2025 11:00:14 +0000
Manifest this update: Thu 08 May 2025 11:00:14 +0000
Manifest next update: Fri 09 May 2025 11:00:14 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: 9yOd+wTLLrvXlcztpddCVcYVi12oQ/2sMMJ2a5u5ijc=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:9a:2d:94:06:65:1e:a1:8b:7e:47:72:2b:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: May 8 11:00:14 2025 GMT
Not After : May 9 11:00:14 2025 GMT
Subject: CN=4384e9010fa52382a2ff1f3666b87019576f326f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:a2:01:99:00:55:ea:36:b4:eb:55:a6:df:
56:c1:9c:9d:9f:b5:b2:07:d4:e9:20:dc:63:b7:12:
56:2b:a1:e9:3d:af:a9:19:2d:58:03:fe:56:d3:da:
47:ab:b8:86:ea:5b:cd:0f:91:52:c6:63:85:08:58:
d1:0c:69:0b:7a:bc:e3:c0:79:56:0f:06:30:a4:1e:
a7:67:60:4d:b0:60:00:0f:7e:75:3d:0c:5e:61:e1:
b5:6f:cc:35:82:01:e9:e6:a6:e3:7b:67:b5:58:2d:
01:c2:d9:e7:32:fc:d6:f1:02:80:fe:21:b4:a2:b8:
2d:11:9a:84:36:5f:72:72:51:15:76:84:a2:f2:2f:
48:dd:11:2b:4f:0a:d1:00:d8:e7:2a:de:b3:ab:22:
17:49:57:f5:f8:4c:9b:e3:d4:e3:bd:f8:90:97:5d:
e9:3c:4b:31:05:27:db:19:48:59:f7:84:bc:d6:e8:
4d:72:d7:33:9f:70:0e:02:49:c1:c1:6c:36:0d:d0:
68:dc:19:b5:fa:95:b4:56:72:6a:cc:b9:3a:29:bf:
83:b2:62:05:bb:91:5e:ac:fa:3e:bf:24:c5:1c:78:
28:7e:f4:2f:27:75:c3:13:5f:84:40:ea:c9:34:ef:
3b:cd:0b:94:d3:fd:dc:d9:2b:73:e5:32:f9:68:dc:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:E9:01:0F:A5:23:82:A2:FF:1F:36:66:B8:70:19:57:6F:32:6F
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:64:85:93:60:32:59:56:b5:b8:d0:ae:7e:26:16:46:54:57:
6c:81:17:bc:82:b9:91:e7:2a:83:8d:5a:5b:eb:43:8e:b5:c0:
ee:84:06:b3:fb:a7:72:b8:eb:88:25:03:96:96:00:03:71:e1:
c0:6f:55:02:36:5b:ed:a6:55:18:57:95:b5:01:8b:49:e5:57:
6f:0f:85:e6:21:96:f3:0c:86:53:1e:14:ba:e9:7f:6f:55:5f:
5a:16:6d:9b:81:08:f3:a6:80:f1:51:c8:93:cb:dd:13:ad:0e:
f7:fd:95:a6:a0:78:87:69:de:0d:d0:66:e3:41:a8:15:82:c5:
35:ea:0d:f1:4a:e1:dd:52:e7:c8:7d:d1:a2:ea:61:53:84:c5:
24:88:b4:76:c1:4c:95:9c:84:93:9f:6d:f0:f1:cf:21:9a:ae:
c1:f5:82:6d:35:07:84:00:25:a9:4f:ed:37:cd:3d:3e:72:93:
6f:35:f6:06:27:a6:80:c6:d0:c1:f4:ae:36:a7:1e:c3:69:4e:
39:c7:91:d8:c0:32:b4:b5:ef:39:3c:86:13:3f:ab:9a:a6:5c:
fb:1a:f4:ee:0c:d9:df:90:d4:8e:72:23:dd:ba:b8:77:c6:66:
90:df:f1:f4:ec:d0:15:4d:d0:85:96:af:79:b9:2e:7f:e3:0b:
74:86:57:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavjZotlAZlHqGLfkdyK5x6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjUwNTA4MTEwMDE0WhcNMjUwNTA5MTEwMDE0WjAzMTEwLwYDVQQD
Eyg0Mzg0ZTkwMTBmYTUyMzgyYTJmZjFmMzY2NmI4NzAxOTU3NmYzMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71OiAZkAVeo2tOtVpt9WwZydn7Wy
B9TpINxjtxJWK6HpPa+pGS1YA/5W09pHq7iG6lvND5FSxmOFCFjRDGkLerzjwHlW
DwYwpB6nZ2BNsGAAD351PQxeYeG1b8w1ggHp5qbje2e1WC0BwtnnMvzW8QKA/iG0
orgtEZqENl9yclEVdoSi8i9I3RErTwrRANjnKt6zqyIXSVf1+Eyb49TjvfiQl13p
PEsxBSfbGUhZ94S81uhNctczn3AOAknBwWw2DdBo3Bm1+pW0VnJqzLk6Kb+DsmIF
u5FerPo+vyTFHHgofvQvJ3XDE1+EQOrJNO87zQuU0/3c2Stz5TL5aNzgvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOE6QEPpSOCov8fNma4cBlXbzJvMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGSFk2Ay
WVa1uNCufiYWRlRXbIEXvIK5kecqg41aW+tDjrXA7oQGs/uncrjriCUDlpYAA3Hh
wG9VAjZb7aZVGFeVtQGLSeVXbw+F5iGW8wyGUx4Uuul/b1VfWhZtm4EI86aA8VHI
k8vdE60O9/2VpqB4h2neDdBm40GoFYLFNeoN8Urh3VLnyH3RouphU4TFJIi0dsFM
lZyEk59t8PHPIZquwfWCbTUHhAAlqU/tN809PnKTbzX2BiemgMbQwfSuNqcew2lO
OceR2MAytLXvOTyGEz+rmqZc+xr07gzZ35DUjnIj3bq4d8ZmkN/x9OzQFU3QhZav
ebkuf+MLdIZXlQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:06:12 2025 by rpki-client