Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: Sn9jpjA0YRrfr0hxE3xM7uspnyampBT8XH+/yWJNbZY=
Subject key identifier: 36:18:E8:FD:E3:3D:C2:53:8E:2E:E0:5D:42:10:61:AD:54:33:73:A8
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01984A09E811E8E1D32E8E0B35EB03F0D968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0CC1
Signing time: Sun 27 Jul 2025 04:00:19 +0000
Manifest this update: Sun 27 Jul 2025 04:00:19 +0000
Manifest next update: Mon 28 Jul 2025 04:00:19 +0000
Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=)
2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: scf7UUhHcuBBYjVc9la4+Tc87Pfi4VPnmM/uIRsIyws=)
4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e8:11:e8:e1:d3:2e:8e:0b:35:eb:03:f0:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jul 27 04:00:19 2025 GMT
Not After : Jul 28 04:00:19 2025 GMT
Subject: CN=3618e8fde33dc2538e2ee05d421061ad543373a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:a6:03:ba:76:da:27:2d:14:2a:4b:59:6a:
34:61:85:84:84:ec:65:6e:e6:79:0d:25:06:56:9f:
ea:ed:6f:9b:96:11:0e:c1:fe:60:3f:09:7e:99:46:
cc:e7:4f:a8:da:59:77:02:de:e9:ee:52:08:ae:ac:
ac:0e:a0:5c:45:fe:5e:cd:ad:1f:33:8a:4b:2a:da:
6f:2b:be:ad:c4:7d:9f:e2:55:e1:db:59:21:4b:ea:
b2:54:06:ec:75:b6:88:09:79:86:2b:e8:ee:2f:de:
e2:eb:d5:a9:52:d7:8a:b9:82:bb:3b:d0:d3:8f:66:
8c:2a:fa:68:b7:32:b4:75:97:25:f0:22:14:80:27:
44:73:3f:b8:ef:4d:c2:9a:d1:69:7d:38:bd:b9:9d:
28:04:34:4b:a0:d9:6c:6f:d2:98:5f:f1:06:24:21:
69:55:76:ab:a9:3b:57:2a:26:48:e0:ac:6f:1f:11:
42:08:4d:3f:c0:f2:22:de:dd:66:61:7d:fd:ba:f4:
fd:ea:5b:20:3e:38:2a:be:08:dc:d3:0b:03:1b:c6:
3d:e7:27:b8:5c:27:5f:34:8e:c3:d1:06:d1:b9:a1:
87:6f:55:75:43:6c:76:f0:e1:b9:a8:66:d4:c8:85:
69:af:0a:16:d8:b1:03:64:5a:0d:ca:dc:69:90:8d:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:E8:FD:E3:3D:C2:53:8E:2E:E0:5D:42:10:61:AD:54:33:73:A8
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:26:c8:17:9e:58:6d:98:9b:dd:36:0a:88:94:31:b1:05:0a:
11:1b:1c:15:db:a1:ff:a6:86:35:70:20:c3:9e:8e:c3:18:15:
4c:90:55:2b:52:e9:15:7e:4e:1f:d6:44:a5:54:24:4d:1d:4d:
c2:22:4b:b3:4c:6b:30:c5:cc:0c:55:93:bd:66:cc:07:cb:d5:
89:9a:49:38:be:72:20:30:e9:1d:99:63:d0:8e:55:6e:e4:97:
e0:4b:a3:1c:4e:1f:ac:3f:fb:1f:0c:f8:70:2f:ce:67:79:4a:
19:72:fa:1a:16:22:2a:40:31:12:9c:e2:bd:7c:64:c2:38:45:
f5:ec:20:a1:1a:df:23:02:07:89:c0:c6:14:9b:5c:bb:a3:8d:
45:87:98:30:62:a1:1b:6e:40:e7:90:68:c7:eb:08:fb:14:43:
34:63:c9:fb:19:c4:a5:89:2b:29:04:d2:11:97:af:88:38:7f:
71:2c:b1:6f:9b:47:9f:67:ff:42:9c:b7:81:e3:60:e6:9a:bf:
f4:d8:37:45:f0:9a:4b:94:51:35:70:03:a0:57:a4:85:04:b5:
02:3a:f5:4d:2a:68:8b:39:0d:66:22:2b:1e:6d:55:e2:f4:d7:
20:16:bc:ea:f7:2c:aa:ba:6f:fb:95:1e:b5:2f:7d:94:88:87:
b6:87:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:24 2025 by rpki-client