Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: wU5qBiu1XuT9+3ev+O9rYDQ9kpmetml6I7m+iycBfVs=
Subject key identifier: 6C:BC:F3:CA:82:5B:F4:03:1E:80:D2:F9:7A:D9:63:A3:69:57:64:B0
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 0197458AF71C4B95676BB13CE5E775BE24C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 15C3
Signing time: Fri 06 Jun 2025 14:00:24 +0000
Manifest this update: Fri 06 Jun 2025 14:00:24 +0000
Manifest next update: Sat 07 Jun 2025 14:00:24 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: rLCjJ2mdJOyKWoBI4UuHF3nLy3AB48yumoE690dhLLE=)
2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8a:f7:1c:4b:95:67:6b:b1:3c:e5:e7:75:be:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jun 6 14:00:24 2025 GMT
Not After : Jun 7 14:00:24 2025 GMT
Subject: CN=6cbcf3ca825bf4031e80d2f97ad963a3695764b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:d2:33:77:bf:9b:5c:1e:ab:07:60:65:55:
b9:d1:20:01:37:fd:41:b5:f8:fc:81:5b:93:f6:59:
d6:24:12:46:c2:03:cb:86:a3:8a:e9:88:29:17:65:
ae:0e:32:57:84:2c:3b:b8:18:d7:86:96:95:2a:d6:
56:f8:19:2f:ae:b2:e7:6a:e1:34:a4:8e:3a:54:e6:
25:92:94:3a:7c:30:4b:78:33:19:dc:26:32:c1:d5:
52:c0:3d:f8:1c:0c:67:7a:59:5e:c8:71:7a:e6:86:
f7:17:80:9f:42:98:7c:3e:dc:c5:6a:c2:db:19:66:
bf:11:63:bb:bf:59:e4:d9:c7:44:f4:fd:16:45:b2:
72:28:b3:1c:f6:c5:67:f1:70:b6:9a:9b:b4:16:0b:
32:be:3b:54:c1:fe:c5:c2:62:f3:f3:26:72:ec:02:
33:f0:cd:97:ba:5c:96:71:90:21:0a:6a:f1:88:0c:
bf:80:c6:72:0a:92:65:c3:b2:3c:8d:bf:ab:65:fd:
6a:45:6c:c1:e5:d8:17:5a:06:97:74:c3:8c:3f:d8:
4d:9a:af:a2:9d:24:3f:ba:29:e7:36:de:6d:da:ed:
f9:9b:cf:03:80:16:12:3c:5c:a4:77:07:a3:3f:de:
44:5b:73:11:46:c6:e6:9a:32:94:f6:58:e7:67:e3:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:F3:CA:82:5B:F4:03:1E:80:D2:F9:7A:D9:63:A3:69:57:64:B0
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:d5:c2:79:8e:95:ad:a9:b3:39:e8:dc:a9:ec:27:26:bf:
35:66:0b:d3:c4:ef:a7:4b:96:c7:03:6e:b1:6d:d1:77:1b:6d:
9d:a2:db:c2:a4:60:31:da:d4:60:e7:f8:0b:f7:1a:f4:22:e3:
9f:73:7b:9d:bc:83:aa:32:30:c2:93:56:0c:1f:7d:d1:a6:ac:
49:e2:3a:eb:f4:46:2f:63:d2:cb:86:ad:b0:08:ac:a4:00:dd:
42:83:3d:27:f8:a3:fb:9b:46:bc:07:06:45:8c:79:55:45:92:
89:c9:f8:2b:6d:23:4a:65:fa:ba:b0:95:31:af:57:c8:4c:da:
d3:ce:43:8e:46:91:9e:11:7f:37:24:5c:d6:9c:1a:48:63:b6:
af:64:83:03:90:d6:10:05:ba:e8:e2:03:7c:92:aa:24:22:e5:
82:53:a3:da:dc:73:99:6a:2c:18:55:10:ee:2d:26:23:d7:11:
29:18:20:15:72:26:f4:05:6e:6c:70:b3:44:d4:97:d2:e5:55:
09:93:c3:3c:ca:4a:8f:02:7f:53:c0:ec:bd:ab:9b:2f:97:c7:
74:a0:16:22:5a:c1:ab:a5:37:2c:c3:0c:50:86:61:d7:83:a8:
8f:cb:0e:f4:1f:68:11:0b:c5:bb:39:ee:80:1b:bf:6a:1a:a0:
a4:bd:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:56:57 2025 by rpki-client