Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: C2sa+H5jiZeA1JelkhfM70lc0dfPQNdK5e2om4qzof0=
Subject key identifier: C7:46:E1:BB:6C:55:3F:94:A5:87:94:A3:1E:3A:24:08:6E:FC:7D:5E
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0196A7D44863A74601B91EEF0BE995CD3784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0BE8
Signing time: Tue 06 May 2025 23:00:29 +0000
Manifest this update: Tue 06 May 2025 23:00:29 +0000
Manifest next update: Wed 07 May 2025 23:00:29 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: d1f+wkhNwbtnIfXMBp9+6x/3pIo+niDorhatNRCFI+s=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:48:63:a7:46:01:b9:1e:ef:0b:e9:95:cd:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: May 6 23:00:29 2025 GMT
Not After : May 7 23:00:29 2025 GMT
Subject: CN=c746e1bb6c553f94a58794a31e3a24086efc7d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:b5:48:9c:7b:c9:a2:84:47:f0:aa:7f:aa:
8e:ff:6d:ee:49:8c:e3:1a:7a:96:d3:8f:f8:e7:75:
64:eb:2a:f9:7f:06:6b:b6:99:d2:b1:08:95:ee:62:
34:46:0d:36:64:c4:5b:f9:0a:30:9d:e8:d6:ea:c8:
72:85:bd:80:98:f8:8b:c8:66:28:f9:dc:6d:fe:02:
36:62:7c:f1:ce:b4:8e:ff:0b:72:ec:16:fc:62:40:
5f:36:bb:9f:a4:f0:1d:4a:cd:49:c8:71:9f:b9:46:
81:98:53:31:fb:c4:91:0f:43:85:a4:9a:8e:04:49:
1c:c1:20:ef:12:ab:0a:a9:83:89:b8:5d:40:ec:1a:
bd:49:cb:43:e1:2e:3f:98:88:4d:0b:cc:b7:d8:37:
50:59:27:d0:bc:1e:19:6d:c1:db:d4:4a:11:b8:b6:
34:f2:71:02:f6:b6:4d:4f:34:25:aa:11:38:61:ea:
da:21:a4:ed:5e:dc:99:dd:c8:95:53:13:65:4e:f3:
67:bf:e7:4e:6a:cd:27:67:e6:c6:f2:94:40:0b:2a:
7d:5b:ef:93:52:b3:bd:2f:04:ce:8c:42:4f:39:87:
31:96:22:e0:7a:e9:df:1f:6e:a3:b7:08:92:6c:65:
8e:2d:d8:b6:35:9d:02:d3:6e:91:b8:f8:b2:68:c9:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:E1:BB:6C:55:3F:94:A5:87:94:A3:1E:3A:24:08:6E:FC:7D:5E
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:c4:25:c3:59:87:fc:31:73:03:f2:54:d6:fb:fc:49:14:
da:71:78:c9:01:be:c9:bc:a4:e1:d8:5e:9f:bb:6e:7e:fd:d5:
10:85:8d:dc:bd:9d:98:7b:bf:24:bf:c8:26:9d:3f:5a:26:a0:
f6:b4:c3:fa:b3:8e:e7:2e:36:d4:e7:36:bd:b9:50:b9:a7:10:
72:76:ff:86:08:b7:9d:7d:93:e5:b4:d8:59:f5:fe:df:47:90:
76:22:ae:d7:93:41:40:8b:7a:1d:09:96:2c:78:72:27:c2:68:
56:13:bc:ab:30:9a:01:4d:f7:1e:e5:42:e5:48:b4:9a:f6:89:
81:b7:7a:f9:22:a5:f1:ca:ed:70:d5:26:01:03:af:32:47:5e:
ce:a0:e7:6d:69:97:d8:76:76:3b:37:c3:4a:63:fd:97:d9:82:
a5:eb:ee:8b:83:bc:94:b3:30:25:17:a9:30:51:0f:6c:e3:e4:
a3:12:28:a3:5f:7f:56:85:1b:b0:51:ae:a6:ce:b4:1e:74:4e:
b3:a7:0c:21:1b:5b:6d:3f:9a:3e:09:35:85:be:f8:a4:80:91:
60:4e:56:c3:ba:72:6b:02:42:c4:8e:f4:03:c1:75:72:54:4b:
7a:3f:1b:33:bd:f8:da:64:a9:23:f5:0a:37:9c:8b:ec:a8:ff:
f6:12:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:33:30 2025 by rpki-client