Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: BzJP+akRMHD8y21lvphKRV/fF/aPnfZlSm0L/DYfm1s=
Subject key identifier: E5:F1:19:06:5E:3F:20:15:12:E5:A3:C4:D3:71:37:5F:61:86:E1:0A
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 0196A01A8DFED235475DC71C489CF5987E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0A46
Signing time: Mon 05 May 2025 11:00:16 +0000
Manifest this update: Mon 05 May 2025 11:00:16 +0000
Manifest next update: Tue 06 May 2025 11:00:16 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: pze8TdeAyzK4AkILTmn9YThq8MaZ3NKY8Aa8MZc1jjM=)
2: cnFeqHBw9aaza2RenBeNwJKndxs.roa (hash: kjgI4uTxYMi7MCfdj3M5XWKqSFRmZG0IxbqIvN1jC7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:8d:fe:d2:35:47:5d:c7:1c:48:9c:f5:98:7e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: May 5 11:00:16 2025 GMT
Not After : May 6 11:00:16 2025 GMT
Subject: CN=e5f119065e3f201512e5a3c4d371375f6186e10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:2f:62:45:78:1a:d8:c3:ce:a0:e5:d8:a1:
03:eb:d1:ab:f1:b2:39:9c:0d:17:6a:74:d8:a4:be:
c8:d5:22:bc:8d:c6:13:fa:b8:d7:ac:4b:1f:b0:59:
29:bf:d5:cc:c8:df:fe:45:66:98:35:02:9e:ce:ba:
46:88:9a:d3:e7:ef:03:a2:21:c7:16:8e:9c:ff:e0:
b1:fd:82:db:0b:70:31:1a:56:d1:ed:49:71:2e:71:
6c:dc:b6:85:56:25:6e:1c:f8:b5:cd:5f:4f:2f:4e:
42:73:22:77:7c:54:1e:ec:4f:af:0a:e4:3f:e2:94:
07:79:f6:1e:74:5f:15:ca:1f:58:c5:29:07:05:e8:
c3:e7:ff:bc:3d:ae:f6:9d:98:dc:78:dc:82:1c:bb:
29:a8:7f:94:63:f0:d0:f4:6f:6d:3f:8c:c8:94:5c:
93:c7:5d:cc:c2:5e:e1:6a:18:df:99:4b:49:e2:56:
2d:08:17:a7:97:8f:35:bc:9e:65:8c:1c:f1:c9:e6:
34:91:7f:b2:ea:d4:99:7d:62:84:9c:d8:c0:98:96:
31:9a:08:ca:b4:31:75:42:27:a2:1f:8b:1d:98:55:
ec:9c:69:74:63:5d:f7:ec:21:fd:2f:8d:92:61:be:
b2:ca:b2:8c:17:c1:d2:95:7f:32:f0:14:5b:77:bd:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F1:19:06:5E:3F:20:15:12:E5:A3:C4:D3:71:37:5F:61:86:E1:0A
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:6b:e8:78:60:3c:fd:c1:17:55:d4:98:c3:2d:27:9e:66:
01:3b:ce:6f:8c:0b:9e:eb:1d:de:21:03:6f:50:08:3b:11:1a:
c3:85:49:2f:ee:3f:9c:7f:d3:36:63:f6:79:2d:52:15:b5:d1:
7f:36:01:7a:d7:b9:8d:2b:76:05:af:61:40:be:7f:5d:64:1e:
31:12:73:0b:ab:82:59:a0:2a:7a:a5:0a:2d:14:e5:a3:88:72:
c3:da:95:ee:5f:3d:0d:9a:4a:de:58:03:41:7f:9c:0e:80:59:
cf:14:ce:25:1f:36:1d:c8:5d:6a:a4:1b:47:0c:0b:29:46:86:
d2:ff:ff:df:27:53:cf:d0:d7:9d:aa:4c:db:5a:ca:bb:5b:b8:
05:15:14:2b:bf:0c:14:65:ad:bd:63:52:80:38:a1:5c:b6:96:
ec:c6:cf:4f:a2:ab:49:f3:52:15:e1:73:31:3e:59:34:87:d1:
80:cc:24:8d:29:e7:7e:22:57:17:46:ad:70:76:00:6e:5f:d0:
b7:9a:9c:33:91:8a:a3:92:90:86:d3:eb:ed:59:6b:f9:f7:32:
de:1b:6a:9c:ff:0a:02:55:2b:a8:fd:e1:ef:0b:e4:49:f9:d0:
26:4d:5b:3b:1c:cb:eb:1f:37:ea:4e:eb:df:f7:38:a2:d5:c7:
6c:f6:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:51:25 2025 by rpki-client