Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: G4golUrhqdpqBqs8JatmHdYRzYR7XEo5w2rW05JUbKU=
Subject key identifier: 03:BD:41:E9:E1:87:3C:01:B5:5A:5D:F3:69:E1:1C:A2:1A:59:47:24
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 01975121D01AA5E82A17D2048D02F659C844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 20:00:59 +0000
Manifest this update: Sun 08 Jun 2025 20:00:59 +0000
Manifest next update: Mon 09 Jun 2025 20:00:59 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: 1vVojaIaMslMtPihWBAAUZY4aWl5Z/VeC8dh5cxX2yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:d0:1a:a5:e8:2a:17:d2:04:8d:02:f6:59:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Jun 8 20:00:59 2025 GMT
Not After : Jun 9 20:00:59 2025 GMT
Subject: CN=03bd41e9e1873c01b55a5df369e11ca21a594724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:7e:5d:97:ea:e1:f3:02:68:df:6e:81:f1:
7e:dc:12:c3:84:51:f5:1b:2c:ad:76:36:28:fc:dc:
f0:ad:34:c8:f5:8f:c4:95:a0:83:5f:b4:29:28:cf:
e7:95:17:12:50:b4:9c:e2:bb:8f:2b:db:f4:6c:d4:
a5:39:27:ff:02:b9:26:4e:41:db:b4:20:74:27:da:
07:0e:34:19:45:3e:8d:85:e6:45:05:6c:27:a9:60:
9e:57:80:5c:b1:9e:82:fb:7c:e6:7f:17:c2:8a:02:
7e:c3:65:cf:fa:75:ce:e3:61:b2:c5:95:58:ee:df:
2e:a1:f2:bd:08:d7:a8:ce:f0:1e:66:87:05:e6:dc:
30:c3:d6:53:0b:66:86:d7:c2:5f:1c:91:03:df:6a:
46:db:b9:bc:f9:4d:33:2d:1d:f9:3a:15:51:0c:76:
d6:b9:52:78:e2:c8:d5:cc:49:57:39:33:fb:64:72:
95:55:f2:c7:98:34:ff:d6:a9:03:d9:c8:ed:47:73:
dc:50:19:e4:a0:0e:cd:6b:46:9f:9e:ab:92:c9:43:
ca:95:55:a1:73:af:a0:f1:2d:d6:79:ce:da:d8:af:
49:dc:01:a2:4f:67:e7:7f:10:54:53:65:9f:42:3e:
92:ea:db:e0:c5:35:dd:3e:d7:31:0d:7e:e3:62:1d:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:41:E9:E1:87:3C:01:B5:5A:5D:F3:69:E1:1C:A2:1A:59:47:24
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:5b:3e:0b:63:8a:4d:34:49:42:90:7f:6e:10:e9:87:91:
c9:df:3c:45:b9:4b:ee:bd:1c:90:3d:fd:ad:8e:ac:34:f2:a7:
65:51:ce:27:2c:19:e5:67:bd:a3:6f:19:08:c3:f1:24:75:25:
10:7e:50:f0:4b:ea:7b:63:20:5d:bc:f2:74:db:b8:d5:6d:d8:
03:89:64:87:35:76:5a:e8:7a:3c:95:4d:38:44:2a:53:e8:e7:
4a:77:c7:5c:a8:25:6f:e6:31:12:58:af:f7:cc:c1:fc:d3:aa:
28:98:47:b9:f6:df:fc:7a:98:52:c9:c9:82:aa:49:10:05:c0:
ff:3d:ad:35:d9:a4:75:ef:0a:79:cd:93:c9:0a:ce:ae:ca:e4:
d6:68:0e:35:e9:51:20:b2:3b:bc:f7:1c:f4:52:56:f7:c2:94:
f4:43:79:2a:62:75:0d:62:86:25:ec:5d:a8:e4:b4:94:0e:0d:
c6:2b:6b:ea:1b:4b:26:72:a5:35:41:20:0c:47:23:b9:73:06:
af:8e:31:7f:44:71:8e:26:12:8a:4d:45:46:8c:7a:be:08:90:
af:19:a0:52:5f:6e:33:a9:e5:da:1c:07:5a:af:43:10:0d:17:
78:6a:df:1b:db:79:b2:98:d0:27:7e:9b:d0:d6:2c:b7:5c:1a:
50:c3:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:55 2025 by rpki-client