Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: AygF2t2YI27Oa/M6sEoBbKfxXP+swVfYS+Ae1wgIhNU=
Subject key identifier: D3:7E:D3:96:66:EB:EB:89:0C:79:5E:BC:87:69:9C:6B:D2:9F:63:E0
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 01974742DD80239D7257EFDA630634AAC3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 1149
Signing time: Fri 06 Jun 2025 22:00:53 +0000
Manifest this update: Fri 06 Jun 2025 22:00:53 +0000
Manifest next update: Sat 07 Jun 2025 22:00:53 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: jjaBWJao9u1fHTRqAEswuZo0Nn74ZUybsJGpusteYXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:dd:80:23:9d:72:57:ef:da:63:06:34:aa:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Jun 6 22:00:53 2025 GMT
Not After : Jun 7 22:00:53 2025 GMT
Subject: CN=d37ed39666ebeb890c795ebc87699c6bd29f63e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:c6:a5:49:e9:9f:45:1a:26:b0:a8:13:fb:
d3:c9:44:e5:e3:e9:7e:4f:d8:bc:4a:b5:55:02:88:
68:2e:24:94:af:20:69:63:a2:4a:9d:c6:fb:7b:c5:
76:c3:a9:41:c7:b3:e8:9e:eb:a2:58:eb:57:25:53:
2c:a4:b2:59:31:24:02:9f:b5:64:1b:78:78:8a:05:
20:ea:f2:8a:ca:b4:88:06:66:e9:64:b4:66:82:d4:
b3:12:72:3f:8c:c7:c1:8d:0d:26:59:11:ec:b7:0e:
72:53:80:d2:3e:09:fd:cc:7f:49:54:d8:47:8c:f9:
d4:e3:1b:a3:1e:58:95:eb:29:57:bb:d2:01:68:a9:
12:92:0a:46:97:3f:3d:0a:6d:f4:22:25:30:05:87:
31:b9:0c:ce:71:3f:29:90:4a:43:b7:f6:63:e8:9c:
76:e0:32:83:92:0b:da:08:e1:47:ec:68:1c:20:b9:
e4:f9:2a:ba:9c:00:6d:fc:66:f1:3c:6c:4d:6b:1c:
05:94:00:d1:8d:47:01:ef:d9:81:38:a0:7a:14:ad:
16:e3:88:db:8e:aa:f2:1a:b9:33:42:85:7b:06:56:
d6:99:3c:10:9d:8d:a8:24:0f:9c:38:2f:6c:f2:44:
5f:cc:36:79:c0:40:6d:e9:67:ce:c9:5c:a2:c4:27:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:D3:96:66:EB:EB:89:0C:79:5E:BC:87:69:9C:6B:D2:9F:63:E0
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:17:ed:1d:12:b1:50:41:5b:21:9b:12:13:06:51:32:bb:19:
f9:25:68:a3:9c:70:a0:16:4e:14:b8:9d:d3:fd:b5:e6:38:d1:
70:e2:50:4d:ed:f0:ce:e9:f7:50:f0:75:d0:ce:fb:f7:d5:13:
b5:23:12:2e:a3:9a:bf:d9:44:35:27:b1:ff:15:69:92:3a:9a:
b9:77:4c:d9:07:fd:a0:1c:4d:f0:69:4f:63:2e:5e:15:e0:fa:
98:b8:f8:fd:6a:49:28:6e:94:7a:5e:83:d0:7d:01:c1:37:dd:
62:de:b1:9a:6e:cf:b1:50:22:d1:fa:07:47:18:fd:19:7c:ec:
b2:b9:5d:d7:00:66:c6:24:71:92:ef:3f:39:a9:70:5b:96:91:
2f:84:50:a2:bb:e4:4a:fc:df:78:c0:d1:a7:df:8c:6d:81:31:
be:59:3e:fe:ca:2c:eb:22:10:dc:e6:da:ee:a4:eb:ee:b0:6d:
c9:e6:4e:09:0a:8f:d8:08:89:60:dc:ac:4b:f6:3a:c5:b2:46:
d1:a3:bd:cd:0a:5e:58:15:72:9a:a1:7d:1a:cc:5b:72:6b:4e:
4f:a8:62:f6:11:77:72:31:97:7d:3d:43:ec:51:06:1c:42:cf:
46:2c:33:e0:48:40:7c:b3:d1:32:14:d3:1f:c9:8f:19:13:8c:
1f:ed:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:32:46 2025 by rpki-client