Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: w7W2i6LxuSpVq+qQ4lARPJChtFnHSk7JoUfoVON6MsY=
Subject key identifier: D3:94:33:48:61:06:63:53:D9:7C:FA:B7:6A:56:21:E9:AE:A2:0B:C2
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0197B632F6EFA187807B81A3660AB949D434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0C74
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: XW65Kkw/fRcG66upZvq6a7ZXohdOmIARKnsgL0MHrVc=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f6:ef:a1:87:80:7b:81:a3:66:0a:b9:49:d4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=d394334861066353d97cfab76a5621e9aea20bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:a7:95:3e:47:9a:6b:95:a8:f5:c5:79:f9:
2c:a4:bd:37:a9:e0:e0:ff:ec:77:d6:3c:29:6e:88:
ec:a2:bd:13:01:90:9a:dc:0f:ef:e0:51:cd:b6:e6:
6b:38:ca:9d:a9:6a:e3:1a:ca:61:a3:80:00:8f:2b:
be:86:03:bc:ec:f0:39:65:a8:e7:ec:0c:73:70:ea:
97:9f:dc:7e:16:ba:7f:00:39:b3:b1:e2:95:27:19:
9f:ef:d2:13:01:3a:26:c7:72:45:ae:45:cf:3d:4a:
2c:68:4d:52:74:31:ae:ee:e3:fd:8e:0f:bd:92:44:
2a:3a:39:be:17:ac:1a:cb:90:34:45:c5:99:5e:77:
c9:e2:7d:d7:10:4a:f1:24:56:a2:73:f7:75:73:8e:
30:28:51:ec:b0:85:cc:68:2a:5b:0f:f6:96:3b:2d:
98:64:2f:69:20:3a:1f:8d:ff:12:b0:19:e6:11:f8:
1b:43:cd:8f:ad:81:47:b9:6c:ae:42:86:24:2e:2c:
e4:99:7a:10:9f:ba:66:d4:65:5e:b6:78:ce:13:c0:
af:08:bb:52:34:fe:2f:18:02:40:43:d9:f7:f4:e9:
f7:51:bd:08:6b:59:ed:e4:4c:ee:2b:d0:5e:7d:ff:
d1:67:70:ba:bf:3d:d8:b2:6b:20:34:0e:30:f9:a3:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:33:48:61:06:63:53:D9:7C:FA:B7:6A:56:21:E9:AE:A2:0B:C2
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ff:c9:22:a7:18:39:28:b2:14:58:f4:b5:44:15:f9:66:c2:
f9:60:44:63:8d:b4:1d:37:f7:02:36:bd:6e:3b:6a:b1:1c:25:
46:95:ee:4a:ca:8f:aa:15:a1:61:8f:9f:48:39:29:1d:cb:53:
78:e8:5f:f4:ca:37:2d:de:20:5f:5c:1a:d1:ea:fc:bf:b1:a9:
09:d3:7c:ae:24:81:d5:7b:1e:1c:6e:c5:df:93:e7:2e:76:cb:
fb:e5:db:a3:2c:f6:37:75:37:64:92:f4:41:8b:ae:55:07:3f:
33:ec:2a:88:e9:ad:41:68:77:81:bd:d7:b2:94:ac:b3:88:65:
78:24:fc:b3:f2:24:af:00:9b:6a:1c:91:7f:17:65:42:43:b0:
a9:00:22:e3:ad:a8:d5:88:45:f9:b4:97:f7:b5:57:b6:84:0d:
da:c9:6c:04:c1:a9:22:b9:bf:7b:e1:f6:96:e7:3d:b1:7e:54:
c2:af:25:81:50:39:2c:f0:23:a7:db:e3:98:04:b8:62:0b:e0:
d9:0c:f2:99:f1:bd:1b:86:d1:b4:e7:0c:ab:99:eb:6d:67:69:
36:b5:12:fe:1a:95:4c:b6:3d:d2:7d:86:10:4c:f4:3e:3a:b5:
d7:fb:ec:4d:09:14:6c:17:c6:88:85:75:50:3b:40:29:c2:fc:
7a:19:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:44 2025 by rpki-client