Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: vHCg/u+2YvQYGPw9aqrNG+M+Ah26G7x2o1GEmtF8B2Q=
Subject key identifier: C0:A4:B1:97:AE:7B:3B:BD:8F:7A:34:AD:CC:3F:8F:51:80:6B:AE:8A
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01974A0D04C39E3DE055EDFFAC95721B7D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 158E
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: ImLOIC5Y6ffkQly9rfsHUVU4MnxnkzuMEN0ht8BIxf8=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:04:c3:9e:3d:e0:55:ed:ff:ac:95:72:1b:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=c0a4b197ae7b3bbd8f7a34adcc3f8f51806bae8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:c1:e8:7a:1a:98:a6:7b:e1:16:2b:ea:1b:
69:58:38:d2:86:d6:91:5c:6d:b9:58:82:66:41:cd:
49:8f:25:d2:b0:28:1b:ea:0b:e0:40:39:28:79:1a:
45:e9:f4:78:78:bd:d0:f1:f8:f3:da:71:da:22:9a:
3c:d1:f1:79:36:48:93:66:0b:b3:de:b5:4f:52:ee:
68:54:6f:9e:2f:b5:56:6c:09:65:f6:a4:d8:fa:3b:
33:e7:ba:8e:97:1c:8e:29:2f:df:fa:f3:c2:68:56:
0e:b6:8d:94:11:16:e1:17:05:1e:31:e4:2a:37:b2:
0d:5f:3a:53:3b:a7:8c:79:15:33:83:b0:da:3a:ad:
58:e6:b2:b4:61:1e:98:b2:c1:1d:17:cb:fd:6e:14:
14:62:4f:4e:17:5e:cc:7c:e7:19:f5:85:ca:2f:51:
b8:5c:c5:e8:73:5f:1e:b3:e0:8d:37:61:c5:ef:3d:
c4:8e:bd:41:6d:f6:ea:5a:43:b4:03:ec:f6:d2:ac:
61:fb:6b:a6:7d:29:38:1a:49:8c:20:38:37:f3:88:
eb:58:5b:7d:9a:aa:45:68:07:fd:b0:c9:f7:a9:93:
98:c3:54:68:4e:56:da:02:44:4f:d3:0b:1b:66:52:
d4:52:2c:94:d5:51:90:4f:08:24:80:79:33:5e:9d:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:B1:97:AE:7B:3B:BD:8F:7A:34:AD:CC:3F:8F:51:80:6B:AE:8A
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:1f:d6:f7:1b:b8:3d:a8:a3:81:d7:fc:4b:d9:39:0d:52:
2b:9d:03:fa:7c:22:75:41:64:fe:c3:e9:ac:de:00:7f:33:92:
c0:06:28:91:44:8d:d9:f9:10:ee:d8:5d:e4:5a:dd:11:42:db:
1a:87:eb:37:56:03:47:18:42:7d:f2:2e:04:83:80:ac:eb:ff:
bd:85:f3:96:fe:b7:02:f8:44:3b:7e:c4:0e:6b:d9:66:a1:ea:
a8:61:38:c8:c0:70:c9:7a:42:7d:4b:fd:5e:5d:34:af:62:a9:
71:58:c6:da:16:3a:e4:47:0b:2e:77:9a:b7:c8:f3:26:96:6f:
cf:e5:dd:f8:0d:c0:05:29:fa:ac:c2:90:6f:14:06:fb:41:5c:
bb:42:47:bc:0e:de:90:b1:7f:14:ad:06:0c:74:b9:a1:98:ad:
b6:c4:3d:44:5c:fb:ad:5d:33:f3:10:ec:a4:17:9f:2b:ae:e4:
66:5e:55:94:b6:f5:4b:f1:73:17:58:c4:b6:55:8f:d4:77:5e:
0d:07:7f:6f:78:b1:7b:d9:f9:1e:f0:6d:07:ce:8c:6a:91:bf:
ee:1e:d1:ac:14:2d:2b:16:6c:66:88:45:06:41:d7:55:d7:0e:
5d:5f:bf:34:19:54:d1:4c:39:cf:1a:eb:40:0c:6f:c8:f0:06:
f3:e0:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:28:57 2025 by rpki-client