Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: ta3x90ujwq0tqiT/8bdIcMyUVxEpKL+MtDsYRTNZDWI=
Subject key identifier: 31:6A:B9:BD:12:37:85:1D:33:F0:5F:4D:1D:B5:32:12:92:C4:0D:7A
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 0197B70F46560D76553C81D85A923F475AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0AEC
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: DO0iM0Ujr0xCB2/VH6cVKPClBkfaFp4shPc8BxWqEdI=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:46:56:0d:76:55:3c:81:d8:5a:92:3f:47:5a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=316ab9bd1237851d33f05f4d1db5321292c40d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:8e:b9:73:5b:4f:6d:96:66:ec:8c:6f:8e:
e8:28:66:85:c6:a0:dd:75:f1:d6:93:3f:37:45:6e:
7a:c1:9b:59:21:cd:92:f5:fa:31:3e:a9:40:c2:bf:
0c:1a:2d:d2:70:92:4c:3c:39:a5:21:09:1c:06:41:
83:06:5d:55:52:6e:a6:a6:b1:ce:8c:b0:bf:26:43:
0c:0e:a0:83:e5:7d:dc:f0:b0:ab:b9:c5:b5:7f:bf:
d0:a2:5b:e7:1f:24:15:f4:db:d0:81:7c:33:4a:d6:
8c:c9:b6:b0:3c:5e:0d:1e:a2:a3:81:9f:da:79:ae:
6d:9a:df:24:9d:4f:ea:d4:58:5f:fa:c3:44:4d:31:
ba:ce:78:51:75:4d:34:c3:4c:63:a7:8f:a4:07:66:
95:74:bc:a4:56:d5:bf:87:12:51:83:d7:e7:9f:71:
5e:2a:e3:57:09:93:7b:22:aa:07:dd:93:1e:c1:60:
29:25:6a:6f:f0:5b:7c:92:85:f2:ba:59:6f:18:c3:
f6:95:b3:5c:95:24:51:35:f8:cf:d2:60:e4:df:14:
d9:f3:cc:c4:2e:33:ca:84:62:28:8d:ac:f4:86:4e:
09:80:17:73:b3:cd:08:a6:85:ae:60:e9:09:4b:c3:
46:5b:0c:3d:1b:b5:b8:32:80:f1:6e:17:79:02:b5:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:B9:BD:12:37:85:1D:33:F0:5F:4D:1D:B5:32:12:92:C4:0D:7A
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:de:3f:3e:85:57:3e:f7:c4:3c:ee:9f:a4:b7:04:74:d4:
4c:c6:a9:ce:5b:9f:e6:29:84:51:6c:1a:7e:3f:b5:02:e1:09:
32:6b:9d:e1:04:04:a3:31:92:2c:6f:91:23:c6:ed:14:8f:4e:
bb:45:2f:a4:f8:35:a1:7e:54:60:18:05:2e:3f:0e:be:61:1c:
63:63:64:cc:ae:fa:1b:39:f2:c3:f4:54:d9:52:51:79:88:28:
2c:63:f3:ae:81:1f:27:c3:68:81:be:42:a5:b8:a7:c6:71:c4:
ce:30:2d:dd:86:de:04:fc:af:d6:c2:14:52:af:f4:39:c7:f7:
b2:44:0e:46:4d:7b:20:97:9b:23:b5:c6:62:8e:c5:00:4e:4b:
08:a2:c7:34:df:7d:0f:ce:7b:fe:a9:bc:bf:00:0e:cb:69:9c:
64:41:6b:5e:ff:21:08:10:39:a5:c9:b2:68:0e:3f:85:7c:05:
e6:d0:3e:86:00:d9:da:32:83:86:23:24:a8:ad:d1:ed:bf:25:
c7:15:71:95:7f:ab:b4:7e:38:e5:a8:0a:7d:3a:53:80:8a:b2:
f8:c6:31:94:d4:0c:f4:a5:fc:80:2a:d9:eb:fa:15:55:ee:4a:
3f:86:18:11:24:b2:89:29:62:bf:53:91:7f:12:4f:ac:fc:17:
dc:a1:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:24 2025 by rpki-client