Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: DDJrxLnLYmTkrVlXERFF9gJRALKFp7e9UUmflMUQPEE=
Subject key identifier: BD:5F:6A:51:85:EA:D9:74:BE:EA:13:07:1A:4A:E3:21:92:5B:62:E4
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 01974CD7374127DFB34A1CF383310E8B1358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 00:01:02 +0000
Manifest this update: Sun 08 Jun 2025 00:01:02 +0000
Manifest next update: Mon 09 Jun 2025 00:01:02 +0000
Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: W4N5KSr9mYy+UKvOmSzZC4Su8PfOKuPlhvCgdvbUQFo=)
2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:37:41:27:df:b3:4a:1c:f3:83:31:0e:8b:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Jun 8 00:01:02 2025 GMT
Not After : Jun 9 00:01:02 2025 GMT
Subject: CN=bd5f6a5185ead974beea13071a4ae321925b62e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:c8:e5:80:3b:a0:3a:07:f9:6b:66:34:06:
85:04:25:a2:e9:3d:57:8a:53:db:53:e9:c0:89:a7:
64:6f:d1:b7:6f:9f:00:42:00:56:0f:a7:b8:b5:93:
66:83:0c:b6:7c:d2:37:07:4c:b8:79:de:52:5f:ca:
ac:fa:cd:f0:20:9f:e7:46:5e:39:70:59:34:cb:aa:
5d:a5:67:a5:aa:cb:a9:f4:19:40:fe:4f:bc:00:54:
01:4f:88:e6:b6:8d:4b:ec:be:5a:24:1e:d7:7c:87:
54:3e:cf:df:ca:23:af:c0:79:18:de:e3:43:d4:ce:
84:23:11:71:b2:e3:fd:6a:4c:e4:6c:9d:ae:51:24:
8c:6c:6e:0e:70:fc:db:b4:29:87:45:97:6b:42:93:
70:64:bf:a0:5a:c2:d9:b1:05:52:89:01:63:dd:f5:
d0:0f:e5:d6:2d:24:e8:1f:c6:6f:ec:15:e4:4a:bd:
d3:23:34:ba:aa:e6:21:d9:24:89:7a:44:95:cd:af:
9f:24:aa:13:7b:d5:42:ce:e7:3b:3e:7b:dd:4b:2c:
4b:11:b2:2a:12:45:9f:06:07:8e:26:eb:e6:ad:69:
00:ba:cb:ae:61:21:7f:68:30:04:21:34:a8:41:43:
8a:4f:f4:d4:2f:ce:cf:ef:2f:bb:aa:c2:95:b2:85:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:6A:51:85:EA:D9:74:BE:EA:13:07:1A:4A:E3:21:92:5B:62:E4
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:fa:26:90:8d:ac:f0:12:ce:bf:d4:54:ed:35:64:f2:f3:
33:87:5d:d0:32:6e:ff:7e:20:e6:5e:19:4d:dc:d1:10:de:7e:
3e:2a:c5:26:21:88:98:b5:e2:23:ba:a2:26:6d:ae:87:96:c8:
0c:2c:8a:4d:2e:c4:21:19:5d:59:7e:60:8c:d9:64:f7:7a:ce:
97:5e:87:a0:13:f5:19:f7:0d:c9:12:8e:61:7f:fb:c0:e1:61:
b9:18:7c:0d:c6:fb:e7:db:d4:58:ba:94:9b:64:e6:1d:5e:7b:
b7:7e:50:a9:da:8d:97:7c:b4:98:e4:df:28:c0:10:8c:18:ce:
70:df:93:4d:ee:4c:54:72:09:01:47:b3:29:82:5b:d5:f5:18:
1f:2d:5d:89:f7:dc:36:fb:93:4d:1d:ab:01:85:2b:45:fe:0e:
4f:3d:68:9d:fe:e5:5f:18:b0:ca:bf:28:55:55:fa:44:b1:f2:
68:47:ac:a3:da:a4:79:bc:33:c3:15:b4:97:44:7b:aa:78:06:
68:7e:45:d8:fd:4c:c2:98:50:7c:22:90:22:80:3c:a2:4a:f6:
dc:a8:b8:69:8d:12:40:fd:7e:2c:d8:89:7b:14:3c:e0:73:c9:
8a:02:b5:89:01:15:b5:0e:c6:bf:e7:0b:d0:a2:81:73:39:60:
8e:3b:b8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:37 2025 by rpki-client