Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: k+bGDFVs1Ic7eGDNvfAonkQ1IJ95qIY+Bm4ePBsTVRU=
Subject key identifier: FA:57:48:DF:9F:DC:19:45:06:25:FA:CE:76:57:32:06:2E:C8:87:CC
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 01974B8D48102D64510C316924E873F3419D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 08C1
Signing time: Sat 07 Jun 2025 18:00:39 +0000
Manifest this update: Sat 07 Jun 2025 18:00:39 +0000
Manifest next update: Sun 08 Jun 2025 18:00:39 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: ALXUeXO64tYTftndjp7NFGN0XogqjZYtLrXHRDRdxl8=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:48:10:2d:64:51:0c:31:69:24:e8:73:f3:41:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Jun 7 18:00:39 2025 GMT
Not After : Jun 8 18:00:39 2025 GMT
Subject: CN=fa5748df9fdc19450625face765732062ec887cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:3b:d1:59:06:5c:69:cd:9f:22:7a:a4:e1:
f7:7d:83:5e:d9:1e:fb:fb:51:92:66:45:ac:dd:18:
7d:79:35:e2:e3:ad:00:6b:09:35:4e:99:46:35:83:
cc:b4:76:1c:91:89:41:00:6b:ec:62:fe:51:4c:cf:
98:2a:0e:8e:cf:79:23:3a:27:d5:51:1e:22:ef:d6:
cf:a0:bb:45:69:c4:09:dd:f2:e0:d9:31:27:87:0d:
a7:a5:16:49:10:9f:bb:d8:34:a8:f9:2b:c2:32:28:
92:22:be:5f:9f:b7:fe:0b:9c:c2:c5:cb:33:e1:d2:
3a:ef:98:97:41:0f:f6:83:17:1d:1b:12:93:c9:2c:
e9:a4:a7:50:95:25:97:fb:b4:0e:8b:21:26:76:80:
a7:6a:76:67:4d:e9:4f:e0:08:82:c9:15:af:92:0f:
7d:5a:e8:68:e0:4b:16:15:09:1b:b1:52:4b:10:be:
98:30:f5:c7:48:8f:46:a9:3a:7f:ed:ad:1b:a5:11:
ba:78:57:75:6f:05:a0:7a:84:8e:ea:ab:f6:5d:d8:
12:29:ae:5d:cc:71:c5:93:16:b8:e8:5c:64:f0:19:
59:34:c0:df:03:05:6e:d4:92:1e:cc:f4:75:26:f7:
54:61:e7:6a:df:72:15:fb:f7:93:45:d8:79:d2:05:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:48:DF:9F:DC:19:45:06:25:FA:CE:76:57:32:06:2E:C8:87:CC
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a5:7c:03:71:8b:a4:e9:a9:fd:a8:74:3f:27:60:a1:7c:eb:
62:35:cf:ed:32:52:fd:5c:8f:83:23:c9:43:4c:11:ea:b2:06:
72:c0:90:e2:4c:b7:82:c0:66:23:66:f8:9b:32:1b:4c:c0:e1:
f0:58:2e:97:6a:23:5f:ae:a8:39:4a:7a:a2:d0:b0:9a:0d:be:
60:4c:38:cf:64:71:ff:0b:36:eb:ad:3a:f8:2a:b1:3b:10:5f:
be:89:c3:d1:91:cb:e7:ae:73:b7:04:b7:23:0b:c4:d4:e8:e2:
e9:d8:9c:6f:91:f4:eb:ce:99:d0:5f:73:52:10:57:8d:06:6e:
81:50:44:79:87:90:af:2d:d5:ae:24:ac:29:03:5e:2d:45:c9:
61:83:b4:5e:58:da:ce:77:7a:e5:80:1c:bd:47:5a:43:7f:98:
2c:24:c0:0d:b3:cf:fe:92:e7:c0:bb:c7:14:d8:6f:ab:33:c4:
21:39:aa:c4:b4:34:59:fe:d0:bb:17:f6:7b:23:c9:30:10:ff:
fb:96:b1:6a:67:c5:27:47:83:a5:dc:e5:ff:d5:3a:10:d6:3e:
83:db:72:81:af:9e:80:53:16:2b:41:60:7c:a0:6d:b5:75:9a:
fe:25:3f:d0:a7:b9:85:3d:14:eb:2f:91:ec:9c:14:56:c1:3f:
00:b0:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:40 2025 by rpki-client