Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: 91YDOp0Wc/M2JmzokYqeFx7xEx8Vfvp3hvBRrCEKVTs=
Subject key identifier: F2:3D:81:3E:18:6D:C0:07:2B:08:A8:E3:DB:08:16:AB:37:F8:EC:7D
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01974A0CC64D5FDE1FB2242CEC87AA919265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0C3C
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: hcvvROXAyUldcqV4D11d2o8vwYG78TZQfFM4wdWTtko=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c6:4d:5f:de:1f:b2:24:2c:ec:87:aa:91:92:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=f23d813e186dc0072b08a8e3db0816ab37f8ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:71:c3:bc:5c:37:15:0c:09:15:ea:81:ae:
08:3d:ea:81:a1:02:0f:3b:26:f8:ca:dd:0b:15:f8:
87:e1:31:42:76:d6:5c:d4:29:a0:d1:31:ae:9d:aa:
4b:3c:ea:e9:1e:e4:69:0a:bd:34:a6:b1:8e:e7:5f:
71:b6:bf:66:78:d4:d9:ab:14:a1:0a:39:db:50:f0:
eb:8c:4b:08:bb:0d:3d:61:63:85:8e:a3:7e:3e:b9:
3b:67:a0:0d:c8:5f:be:9a:d7:87:93:f2:8b:5b:31:
d9:61:45:57:7f:4a:ce:27:65:4c:32:a3:4e:f6:64:
fb:2f:d9:07:c4:a6:84:1c:15:5b:75:21:bc:fa:fe:
16:a8:e0:e6:87:a7:75:c1:c7:a8:65:43:91:46:68:
f1:01:99:c3:2c:cf:15:03:f8:b5:0e:db:e8:6c:8d:
fa:15:57:b2:0d:60:36:5d:c5:2f:f0:79:76:94:16:
e4:ef:da:66:32:c4:3a:4c:5f:ea:51:d2:fd:43:e3:
3f:66:5b:75:42:22:df:b4:47:8c:cb:d0:03:64:28:
d2:95:9d:e3:4f:30:29:ad:29:3c:7b:04:d8:b2:41:
e3:d3:a5:cb:a0:0d:d9:93:b0:e0:18:0a:b1:e5:a3:
d9:b5:9a:09:cb:c5:81:ea:c3:ee:9d:e1:51:8d:a9:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3D:81:3E:18:6D:C0:07:2B:08:A8:E3:DB:08:16:AB:37:F8:EC:7D
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:68:fe:a8:63:19:0b:6f:13:81:2c:de:11:e1:81:95:16:ea:
56:53:e3:cc:75:21:e5:4c:28:9f:ad:1a:76:e7:a9:a5:03:82:
89:e1:9e:70:52:52:a6:23:0f:ed:be:8c:47:3f:e0:31:59:a5:
37:e6:b3:9b:dd:6e:8f:bf:06:25:a0:75:96:8c:49:13:a6:58:
56:c2:2c:0c:cb:a7:65:c7:e3:ad:ea:f9:12:c4:e6:cc:ff:0b:
e4:1f:a9:58:0b:ad:f9:ea:fc:94:9a:0f:a5:80:0b:86:91:36:
74:9b:25:6c:de:38:8c:aa:3a:c7:98:33:f3:a1:f8:a9:2a:d8:
72:68:f4:62:d6:8f:56:ba:d0:4d:cb:5a:de:26:d0:98:b0:2e:
75:81:bc:59:5f:64:00:91:a1:02:e2:77:7f:06:d2:44:5c:6d:
9d:9d:42:26:d4:c1:e3:15:1d:cb:fb:71:5e:68:02:8d:79:1d:
d7:bd:fd:46:fa:92:cd:a6:c6:63:34:22:b2:a0:5a:d6:60:5c:
32:43:9d:d3:22:66:70:89:a7:6d:95:6c:b3:7f:43:f7:e9:cb:
ea:dc:9c:8a:4b:1d:29:49:f1:4e:42:75:f0:23:6f:84:e0:e9:
d1:56:44:97:84:63:43:f8:f7:7d:a5:25:32:ee:ea:a5:cb:e8:
e6:7b:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:06 2025 by rpki-client