Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: oWGaVtrZXt3Leie9+cSMraU7ErF0MUc+yMR/Nuc19PM=
Subject key identifier: 34:BB:3F:DE:12:88:F4:08:E5:31:14:3A:6D:75:AF:8E:96:ED:50:5E
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 01984B556A81E6ABC7530D0BD467C5F4088D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 1325
Signing time: Sun 27 Jul 2025 10:02:25 +0000
Manifest this update: Sun 27 Jul 2025 10:02:25 +0000
Manifest next update: Mon 28 Jul 2025 10:02:25 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: 8FRzgbAsylesRB/0m5cNH8hNx+KUjJ3201NG/DwOYAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:6a:81:e6:ab:c7:53:0d:0b:d4:67:c5:f4:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jul 27 10:02:25 2025 GMT
Not After : Jul 28 10:02:25 2025 GMT
Subject: CN=34bb3fde1288f408e531143a6d75af8e96ed505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:9c:87:73:f0:aa:e9:59:ad:2a:ff:33:75:
5a:05:4f:ca:d0:01:36:22:2e:b5:ad:fa:ed:25:c4:
08:1e:5a:e5:ed:1e:76:dd:ae:45:97:85:39:8a:f6:
6c:a8:b2:f7:95:9b:f9:40:0b:7b:8a:64:96:da:f7:
82:51:49:ee:7c:e6:91:91:4d:6c:d1:5b:67:e7:40:
8e:7f:7b:29:d8:ef:5a:73:3d:52:a6:74:44:a7:2a:
41:6f:75:82:b1:03:5f:26:88:4f:58:46:ac:e7:b3:
ae:d0:38:40:12:6c:ae:42:04:29:5a:4e:69:f8:ad:
fe:52:3a:f9:80:03:8a:03:bd:20:71:8c:65:3b:65:
99:54:19:55:8b:1b:9b:61:d7:28:77:b8:39:a8:2c:
73:e9:10:7e:15:cf:e9:ae:01:1e:8c:5b:07:ab:dd:
e9:f8:38:70:15:a6:fe:1c:30:c4:90:be:d6:12:3e:
53:97:f8:98:8f:c9:5c:fd:96:46:6d:ab:24:4d:cd:
f5:33:f0:a3:54:2f:63:c1:37:3a:84:70:50:33:3e:
46:2d:31:c7:14:b4:88:82:64:9d:b4:6f:a8:b6:9a:
7e:c5:6b:37:f4:84:a0:5a:e4:b8:18:dc:ae:fd:ac:
a6:fc:43:36:7c:0b:2c:86:21:06:7d:46:98:c4:a7:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:3F:DE:12:88:F4:08:E5:31:14:3A:6D:75:AF:8E:96:ED:50:5E
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:df:8d:70:cf:bb:31:be:1d:07:ba:bf:ff:03:99:1a:c9:dd:
34:fa:ed:a0:22:3f:86:a5:85:69:d4:02:72:b6:47:68:7f:e9:
4d:cc:3c:65:66:48:f4:2b:81:96:35:8e:74:14:57:1d:62:80:
63:c0:52:a3:b3:3a:bd:52:38:21:b2:aa:72:0b:af:9f:33:b5:
30:92:63:d0:da:75:bf:06:d7:f0:7c:90:50:6d:fe:27:86:e2:
1c:a9:a3:05:d8:27:be:5b:1a:b6:8a:9a:cc:79:86:e9:5e:32:
2c:0d:f9:5a:80:76:0e:86:f6:bd:21:c8:17:5a:72:19:6e:85:
26:03:bc:a8:be:bf:ad:b4:1d:c9:7e:90:58:3c:0f:31:a4:b8:
6c:d8:66:fc:2a:c2:4a:a9:05:fa:72:76:2e:e0:52:dc:f3:af:
c5:b0:30:81:71:76:78:e1:da:7e:6c:12:9c:1d:83:a2:d0:6a:
6f:12:fb:f5:ec:01:66:3b:51:e8:9a:45:f3:27:d8:6f:14:f6:
bd:41:22:8f:58:52:74:1f:66:92:0b:35:39:98:f9:50:70:e4:
c1:fc:d2:61:ad:de:b1:25:e8:90:4f:11:d0:22:77:52:ca:64:
40:3a:b5:f5:4e:f0:1f:92:01:8f:9f:c7:5b:00:6e:cc:5c:da:
a4:61:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:40 2025 by rpki-client