Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
File: HqtOAMDZLLUBu7IjrPA54nCR204.mft (raw, json)
Hash identifier: /I4oTKW41o8dG+l2YwDM3+Q6HRfHI8sw1CxZhWq4c0k=
Subject key identifier: 60:46:57:38:DF:D3:56:89:C9:85:9D:B2:95:F5:E4:C4:12:39:04:C5
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial: 01984B5492EBEFA48D7D94019ED9F03D83CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
Manifest number: 14CD
Signing time: Sun 27 Jul 2025 10:01:30 +0000
Manifest this update: Sun 27 Jul 2025 10:01:30 +0000
Manifest next update: Mon 28 Jul 2025 10:01:30 +0000
Files and hashes: 1: HqtOAMDZLLUBu7IjrPA54nCR204.crl (hash: OAanzUWbwzMNbUvU9jUW5IW34p3V8pDxsgF1joIzPxY=)
2: TRIkg-QwPxodaMNyhJudZJsULfg.roa (hash: ufMh2ZHdT1rvdo6TTuMqjAAVY8O4a0cCsUjxcMvHh8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:92:eb:ef:a4:8d:7d:94:01:9e:d9:f0:3d:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Validity
Not Before: Jul 27 10:01:30 2025 GMT
Not After : Jul 28 10:01:30 2025 GMT
Subject: CN=60465738dfd35689c9859db295f5e4c4123904c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:00:a3:34:08:ed:6b:df:e0:36:2f:8c:e3:
5e:d8:e4:96:52:2c:2c:1e:91:1c:7f:39:ac:66:7f:
75:81:35:60:4e:39:e8:70:dc:31:83:96:ec:0b:12:
72:f5:ff:7a:43:6e:91:a1:23:1c:9a:e1:f0:d5:28:
e1:da:cf:a4:33:06:72:d9:c5:1e:26:56:87:c2:6f:
a2:7b:84:8b:ae:76:87:3e:52:d0:46:eb:b7:b7:f3:
ae:20:ad:7b:da:eb:c8:e9:8b:44:33:54:d8:a4:c1:
8e:97:5f:9d:94:58:87:93:c5:5b:9c:96:1d:c7:7b:
8c:54:b4:6d:36:cb:69:0a:b2:8f:ef:f1:b8:3b:00:
7c:b5:56:1b:53:3d:b4:6e:ac:a2:d3:ff:b4:b8:a3:
d1:de:57:37:9d:c1:d6:c6:a7:18:3f:59:bc:0d:d6:
83:3d:1b:79:3b:0b:68:69:96:ed:2e:90:d5:d2:64:
df:57:9c:10:bf:5d:92:11:2b:95:a4:11:88:e3:b4:
50:97:1f:bf:f0:20:ca:26:8e:74:a8:be:78:22:d4:
a0:23:d7:27:a7:0a:ce:59:81:c9:e6:05:77:67:fd:
54:92:90:c8:e0:1e:04:a3:57:f9:d9:41:b2:7b:49:
bc:2c:73:11:8b:36:4e:4d:b4:4d:d8:74:1c:c3:19:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:57:38:DF:D3:56:89:C9:85:9D:B2:95:F5:E4:C4:12:39:04:C5
X509v3 Authority Key Identifier:
keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:ea:95:b2:08:0c:b1:3d:8e:a5:21:dd:a4:39:fc:13:42:
cf:51:f0:f4:a9:d5:f3:4b:33:0d:c8:5f:4b:fd:0a:45:47:49:
de:99:4c:0c:a0:3a:b3:b8:64:f0:34:cd:66:b8:cc:62:1c:b4:
14:fd:14:80:4e:e0:28:2c:63:79:e1:cd:27:31:07:ad:4e:e2:
fb:bf:fc:75:3c:aa:6a:a8:e6:1a:9d:70:10:37:ef:16:0f:d0:
b4:47:4f:be:d1:ac:e5:0c:8c:53:e8:17:7a:30:db:8f:a3:fd:
72:d8:e4:13:54:60:d3:9a:85:b1:50:0e:c9:df:f3:87:7d:ac:
cf:3a:9a:1a:9f:84:b8:ae:1c:c1:da:5a:38:43:79:14:ad:50:
10:7c:c9:e7:38:b3:95:4b:47:1c:c9:6f:c2:55:bf:8a:d7:7f:
82:82:dc:d3:45:6a:f0:06:e5:f8:b7:88:01:cd:41:fe:2d:38:
0a:45:30:0f:5c:c2:d6:76:a7:52:8d:52:11:e9:61:c9:6b:1b:
71:ed:df:da:b5:42:08:80:1d:f5:d6:ff:fb:dc:9d:12:1f:83:
0a:f2:83:a0:70:fc:46:59:46:bb:58:51:2c:b5:fb:6e:ff:2c:
7d:5e:3e:22:e1:70:6d:19:02:86:3c:81:a2:69:1c:b6:b9:61:
9b:13:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:40 2025 by rpki-client