Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: F8a3lkg78JeYdanbsHSZLMBybt3yMWKtxjZ4S04QN5E=
Subject key identifier: 6E:D2:E8:EA:FB:51:F8:D3:C4:11:2D:E2:D9:E7:4A:7C:64:5B:DD:BB
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019934FFFF24C26D2F61E7BBE511BFAC0C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 139E
Signing time: Wed 10 Sep 2025 19:00:16 +0000
Manifest this update: Wed 10 Sep 2025 19:00:16 +0000
Manifest next update: Thu 11 Sep 2025 19:00:16 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: qmyL0IqUIu/7J0ARISPN0drPK+MsvmzQhzcDiZY1ErU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:ff:ff:24:c2:6d:2f:61:e7:bb:e5:11:bf:ac:0c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Sep 10 19:00:16 2025 GMT
Not After : Sep 11 19:00:16 2025 GMT
Subject: CN=6ed2e8eafb51f8d3c4112de2d9e74a7c645bddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:c4:da:77:3a:12:e6:bc:84:a3:3c:48:d4:
bf:49:5f:5a:f4:7d:ce:1d:d0:4c:f5:73:e3:74:d8:
f0:50:55:a9:90:72:17:70:70:e5:31:c1:f7:f3:bb:
4b:cc:df:bd:9a:af:cf:f7:d9:67:85:cb:58:8f:7a:
41:fd:5d:4b:eb:9c:f7:f9:ad:d8:e1:47:61:99:e5:
8b:64:17:16:30:7e:15:c8:29:1d:61:b0:97:f6:9a:
66:dd:aa:0a:5c:20:6a:ad:bc:59:d1:e4:4d:b6:98:
cb:2b:95:71:79:e7:02:e5:23:0e:db:00:72:3d:1b:
d8:96:3a:34:bf:34:70:5e:2d:51:76:73:48:19:ea:
28:cf:55:07:54:ed:5b:55:5f:aa:c7:49:84:cf:4f:
5c:9a:de:f9:4a:d3:c4:dd:8c:d4:20:8c:4a:97:ee:
00:83:5c:f5:23:19:fe:72:20:c3:39:6d:da:5f:cd:
91:97:fa:c6:85:93:ee:1e:7f:4f:4c:95:00:1e:58:
32:c7:29:75:12:a5:b0:cc:29:d4:91:bd:a7:a3:03:
b7:d2:28:57:5e:fa:b9:74:50:5c:7c:bd:f9:ab:27:
b0:33:90:9b:c4:04:d0:aa:90:49:c9:47:d2:0b:72:
5e:43:92:1e:6a:a8:13:b8:eb:12:fd:44:df:e4:94:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:E8:EA:FB:51:F8:D3:C4:11:2D:E2:D9:E7:4A:7C:64:5B:DD:BB
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:f3:2b:14:98:df:b3:38:ae:55:f2:2a:5d:27:eb:f0:71:
a5:bc:80:2b:5a:24:bb:17:82:c2:52:3b:e4:c2:14:a5:d3:b7:
02:7a:28:ad:c7:1d:2f:56:b4:be:7c:cd:aa:f9:e9:9d:1d:c2:
93:61:85:a1:95:7f:ba:f1:12:0e:e4:d1:38:88:cc:e8:4f:54:
8d:91:92:aa:8c:09:25:72:9e:7f:c2:00:64:f4:76:30:d3:67:
6c:57:f7:96:b2:ac:f4:8e:32:68:b0:3a:27:33:7c:1b:03:9e:
db:a0:0c:e8:ec:20:43:3f:77:e8:31:b5:49:46:44:b5:04:90:
17:14:4e:6c:0d:8c:56:b0:c7:93:6f:00:18:e0:63:ab:d7:c3:
c5:1e:25:2c:09:f8:8f:62:aa:19:da:3f:fd:ec:8d:26:2f:99:
39:7b:54:de:20:8b:fd:9f:f6:84:b8:74:f3:51:b7:76:ae:cc:
f0:0b:42:11:a2:60:08:04:04:52:0f:8a:10:5a:01:03:ab:42:
58:5a:57:b3:f8:44:2e:f9:43:dd:10:23:29:f3:d8:ab:da:1e:
3d:b8:ae:e0:b2:ca:09:71:14:40:36:5f:ad:e4:74:15:63:cd:
a8:e2:7e:33:75:80:5d:82:b8:0f:03:e9:20:00:cb:3e:e7:8d:
83:94:b2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:29:17 2025 by rpki-client