Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: i7FlfblJumbGod0YjyDtg05VYGx5Z6EgXM7a+q2eGBA=
Subject key identifier: 72:1A:54:B7:17:76:F4:F3:AA:A5:CF:75:97:BB:F6:71:1D:64:21:12
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 0197B70F3500D079C510AFBF00A47BA3303E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: w2888uyzo8MzfUSbxyj+9+knEMglXRyO+eCL0VtGzjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:35:00:d0:79:c5:10:af:bf:00:a4:7b:a3:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=721a54b71776f4f3aaa5cf7597bbf6711d642112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:85:49:46:ce:f6:89:35:0f:3c:da:e7:95:
4d:7d:26:b1:81:ae:54:f2:d1:c6:aa:96:17:2c:07:
c5:4c:52:d2:9f:73:8b:93:aa:50:b3:c5:e1:50:8e:
e3:af:a4:92:da:0d:01:a4:ac:16:9f:76:b8:eb:af:
17:8c:e4:71:b1:13:56:c3:b0:54:ba:79:b9:c1:bc:
47:92:75:05:22:1a:74:bd:03:9a:3f:a9:8f:ab:c9:
5e:db:35:69:0e:16:f2:00:90:51:fe:a1:4a:f1:11:
62:e4:5e:34:85:71:43:19:d9:c2:1a:1b:81:e8:11:
cb:5f:b8:90:9d:b4:6e:ee:86:2a:84:75:62:a0:17:
98:db:a3:5f:35:3d:14:39:49:17:6a:2b:d8:48:e7:
3b:91:12:e7:75:00:0a:19:3d:5c:cd:ea:23:e8:22:
1c:b0:14:51:a8:0a:77:15:a0:76:6a:a4:43:9e:fe:
14:65:64:a9:92:50:1d:73:ad:1b:de:3e:62:e2:7c:
ae:fd:ea:df:96:0f:60:4b:c2:1b:72:44:d3:38:09:
a2:3d:00:02:ac:c8:d5:24:c8:ce:99:0a:b4:92:9a:
96:0d:45:37:cd:d5:e0:c0:29:a0:b5:56:7f:4b:2f:
aa:8d:3c:6d:6b:70:54:c7:06:0c:59:1a:c8:78:36:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:54:B7:17:76:F4:F3:AA:A5:CF:75:97:BB:F6:71:1D:64:21:12
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c4:9d:68:b4:66:94:d3:ec:dc:88:d8:6b:c4:9b:27:b5:18:
2b:4c:59:2f:26:c4:32:8c:db:f3:d9:40:82:20:bb:48:f4:d2:
12:e4:f9:64:4d:6d:30:c0:12:ab:aa:bc:57:a1:cb:15:72:29:
c9:bb:f8:0c:94:dd:38:16:de:b3:65:5f:9f:1e:6d:0c:06:b2:
84:3a:67:f7:3c:89:e3:1c:92:ad:75:eb:bc:14:70:c7:94:4b:
d7:54:3f:da:78:a5:0f:14:53:e9:6f:03:e7:b1:29:32:d1:9c:
d7:bd:d9:75:c1:b8:db:43:89:c6:2e:ce:d5:68:36:ba:08:94:
8c:ae:fc:f7:3c:e4:93:eb:54:0a:c1:84:87:36:35:97:92:cb:
13:77:a2:c2:c9:b1:6a:d4:82:75:55:87:0f:a1:a9:41:b9:15:
e1:53:14:e6:c2:42:a9:44:38:97:a2:14:8a:8a:b8:4b:6c:1a:
d6:ab:b3:c4:3d:a2:d5:e5:b9:b4:16:86:85:72:7e:98:e3:86:
55:30:08:f4:d6:ec:d0:b2:30:6e:2c:a7:c8:89:e7:65:e0:ee:
e0:85:8f:8e:29:7f:f8:27:31:8c:76:9d:1e:cd:5d:7b:f7:16:
c7:5c:79:03:1e:97:d8:58:86:2d:f7:cd:8a:58:e9:7e:df:67:
48:60:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:26 2025 by rpki-client