Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: 15JXezmd6O7Mnw84lkgg1Jl8lJoXrY4xLJwMN6oKvQ0=
Subject key identifier: FA:A7:F4:E3:D2:44:CA:62:D7:C6:E1:D5:1D:81:0B:2F:67:28:84:99
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 01974BFB2E5DE46D446358A309DFFBB3EAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0411
Signing time: Sat 07 Jun 2025 20:00:41 +0000
Manifest this update: Sat 07 Jun 2025 20:00:41 +0000
Manifest next update: Sun 08 Jun 2025 20:00:41 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: EgMpi8DLq/KYmroXHm/9y1/flA0aVnrcObq2sQYYb1Y=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:2e:5d:e4:6d:44:63:58:a3:09:df:fb:b3:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jun 7 20:00:41 2025 GMT
Not After : Jun 8 20:00:41 2025 GMT
Subject: CN=faa7f4e3d244ca62d7c6e1d51d810b2f67288499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:99:74:bd:58:96:8b:b2:e6:ca:8c:cc:ca:
a5:a5:b4:fd:ab:36:c4:96:38:5e:0c:38:df:42:de:
17:c0:fe:63:89:ca:e2:78:f1:43:78:b3:a7:50:65:
0a:cd:98:c1:63:60:3d:45:35:00:d9:c9:1b:eb:54:
06:55:f4:d3:c6:98:1e:dc:3d:5a:dc:2f:20:72:aa:
16:17:4c:4d:e4:86:33:be:3f:52:b8:b6:7f:7d:bf:
d9:13:85:6a:23:40:30:9b:88:2a:97:7e:c3:e3:a3:
5f:2d:58:0d:0e:12:95:03:93:bb:91:ba:d9:18:8b:
70:8e:24:af:59:48:96:21:96:e5:f9:8a:a9:a3:10:
f0:ad:b5:ca:4b:3b:0e:d0:55:f0:fb:8b:2f:c7:ce:
b6:48:d7:a1:c6:49:1f:13:cd:cf:8f:4e:dd:9e:88:
f1:47:23:95:5a:6b:0b:45:24:ad:6e:c4:67:ef:14:
be:08:01:e4:b1:eb:f9:9c:7e:f3:8b:95:f4:15:7e:
b0:c3:e2:fb:ed:72:39:2c:c1:d5:2f:ef:60:c8:0d:
5b:60:d3:f9:39:d1:0f:43:5d:4f:86:e7:f9:ac:c4:
ad:91:9f:0c:de:f7:04:41:79:7f:0d:64:f2:45:98:
75:86:1f:3a:c0:bd:f1:f2:2b:a5:6d:79:f0:c9:71:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:F4:E3:D2:44:CA:62:D7:C6:E1:D5:1D:81:0B:2F:67:28:84:99
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:e3:65:32:2c:c5:81:8b:1a:f7:42:60:29:79:68:1d:eb:
09:ca:93:f7:6b:d7:a4:34:43:e5:aa:a1:53:25:05:76:97:0c:
94:78:29:c1:8d:76:41:1f:4d:c4:8a:5c:5a:ae:a6:cf:1a:05:
22:09:a1:66:e0:83:73:9d:3c:2c:25:a3:d8:eb:f0:d5:1f:91:
cf:35:21:e4:71:c0:87:c3:c7:fc:39:b2:3b:34:13:55:d0:24:
66:7c:73:ef:d0:a8:25:c1:09:f1:72:bd:fb:7e:7c:5a:39:9c:
23:53:14:a1:4c:97:ec:a6:d2:e5:db:8a:eb:1e:b7:a2:52:c0:
c8:c9:e3:c2:8b:21:64:d2:95:30:cf:b8:51:5b:5b:cf:bd:53:
7b:d3:b3:6b:10:33:c8:2c:38:ae:1c:c1:43:37:44:30:8b:60:
7f:94:1b:f7:ff:b2:7b:ee:2a:34:fe:8e:33:4c:04:0d:6d:37:
9c:5c:d4:36:d9:55:9f:41:64:a0:95:6b:f1:c3:10:dc:2d:ed:
82:e2:bf:fb:f8:6a:0e:d3:7f:9d:a3:ac:6c:10:f3:17:8b:52:
49:e1:e7:56:4e:d4:76:17:f9:9f:8e:fe:6a:a5:77:88:0e:94:
a3:8a:f7:7b:d1:fe:c8:99:d5:d1:89:b6:71:e4:3c:5f:2c:04:
48:4a:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:46:05 2025 by rpki-client