Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
File: HQ2zVo5FXz2isidKnVJcrAkxx9U.mft (raw, json)
Hash identifier: JYUX1e4DlXrszyDfvFWkZUpuMeaI7bGRq0262a9aEsw=
Subject key identifier: 56:CE:6E:4E:FB:85:4C:07:91:D6:DA:D0:42:58:FE:15:92:9A:A7:25
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 0197499EF7F4021738516BEDB8F286DCC205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
Manifest number: 03B7
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: HQ2zVo5FXz2isidKnVJcrAkxx9U.crl (hash: 5rcBHKR/X39F6doLDdZUCHYhCRlt1fzgfQ9UZFohhCQ=)
2: yht62Ehavo3uZINByDHEHOjVZVw.roa (hash: mqAvN4VPlszrLeatuKNPPUoNf7NdmTA8jofCmdZ20jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f7:f4:02:17:38:51:6b:ed:b8:f2:86:dc:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=56ce6e4efb854c0791d6dad04258fe15929aa725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:a0:ff:63:f4:39:6a:33:5b:fb:6e:a3:18:
98:2a:f5:97:eb:1e:44:34:d2:1d:f2:a5:68:f1:fb:
a9:e5:ad:6d:7e:e2:17:49:7a:e0:4f:5c:20:4b:f1:
79:45:60:f8:3f:ef:7e:a2:12:b2:bd:4c:bb:7a:ef:
f0:30:ec:77:4c:e3:55:46:9e:0b:13:f2:b5:4e:2e:
5f:14:3e:66:ee:a0:d1:ae:3a:04:ed:11:d1:2a:2d:
93:a5:0f:e2:7f:f1:7a:82:82:58:85:e3:61:29:7c:
b4:0b:e8:cd:46:a8:11:0c:ea:35:18:ba:da:02:70:
09:f0:e0:6b:59:bd:61:c8:34:07:b0:1b:24:85:9a:
4e:90:ee:0e:8b:5f:d2:8c:c1:57:55:43:d9:9e:af:
35:97:41:e6:73:c7:23:87:04:41:a8:aa:a1:30:cf:
ac:35:87:81:33:40:c7:36:5b:43:38:65:0c:32:9a:
1f:95:01:bc:06:a6:18:45:a2:ad:aa:f0:ea:01:90:
cc:e4:d7:b6:de:ff:53:a6:94:75:90:c1:b8:93:69:
4c:ac:38:d6:ea:59:18:a8:f6:7b:0a:de:07:5c:8b:
0c:b1:ae:4b:2f:08:1f:9b:4c:31:b9:29:fa:8e:6f:
50:08:fa:04:09:27:e6:57:c3:e2:f2:94:3d:1b:e1:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:6E:4E:FB:85:4C:07:91:D6:DA:D0:42:58:FE:15:92:9A:A7:25
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:04:26:52:79:54:69:2e:36:f2:4a:9b:23:de:59:2f:f0:
60:8c:27:6a:32:2b:e2:41:ff:7d:63:70:f9:0b:90:24:6d:42:
a6:0f:84:e9:19:33:05:ed:b9:d4:93:d4:0f:50:9d:bc:42:eb:
5e:6b:3e:c2:8f:e2:4a:c0:0e:eb:ca:86:eb:c7:9c:a4:d3:69:
53:7f:4d:5c:17:f2:0d:4e:13:fe:f5:c9:57:cf:fe:be:0e:a4:
b9:fa:c2:df:55:83:06:1c:5d:8e:a2:50:f0:53:19:dc:2e:1f:
e0:b6:6f:c6:53:7a:41:3e:48:25:4b:ef:e6:3e:fc:97:11:4b:
54:a3:cd:b1:12:68:a0:a6:30:af:9c:e6:d4:84:23:94:30:0b:
e1:5f:a7:36:51:d7:a3:69:d4:98:59:76:8a:e8:dc:5a:f7:a1:
65:2a:51:16:bc:53:8b:86:51:9a:93:46:34:64:2b:59:3e:28:
11:95:35:4a:6b:fd:87:df:fe:25:3f:97:72:8f:67:17:9d:51:
2e:20:6e:62:0b:cc:ea:20:7c:68:93:ff:61:bd:3e:97:19:c0:
e9:24:1c:4f:0d:f7:78:89:2a:bf:f7:ed:ba:c3:b3:57:c5:0f:
19:ba:bf:08:6e:3b:97:39:7d:48:69:64:b1:b2:d9:e8:27:37:
04:6f:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:49 2025 by rpki-client