Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: WdMgSmYH5UgVPJ4A7e6EXpPusR772DjTFvfUr2pxYag=
Subject key identifier: 17:32:37:D6:71:BE:05:D5:42:AA:B6:70:C2:AF:5E:30:A0:3E:B3:F9
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 0197B82149C14F2ECA91548AE5C2629C5AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:18 +0000
Manifest this update: Sat 28 Jun 2025 20:01:18 +0000
Manifest next update: Sun 29 Jun 2025 20:01:18 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: Jh35b7Row+erbWtOSl3BZFy8UfHIIgQ2lT0ofJoe4LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:49:c1:4f:2e:ca:91:54:8a:e5:c2:62:9c:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Jun 28 20:01:18 2025 GMT
Not After : Jun 29 20:01:18 2025 GMT
Subject: CN=173237d671be05d542aab670c2af5e30a03eb3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:7b:70:38:03:3d:9b:4b:0f:2c:81:ad:31:f4:
61:e6:51:22:a3:61:de:6e:d0:5a:4a:1e:40:de:69:
42:6a:27:c7:85:37:d2:62:d4:d0:02:3b:65:22:7a:
3d:2a:e9:83:6c:92:03:cb:31:5d:c0:67:75:3b:d2:
36:42:d1:9e:f1:a9:3f:88:04:55:86:65:a8:34:5d:
85:b1:9e:44:65:c4:ce:6a:fc:7b:68:f2:cc:9b:64:
c9:aa:83:0c:ab:bb:53:c7:90:da:93:14:61:f7:b2:
c2:e4:7a:42:2e:98:d1:7f:2b:b6:19:27:1a:ea:0d:
66:bf:58:9b:b3:31:15:d3:07:b1:95:98:8f:dc:f4:
03:e0:91:43:51:47:e5:70:20:2e:d8:0c:59:4b:4e:
c2:9f:f8:60:18:4f:29:35:71:55:80:9b:d6:df:be:
74:99:16:aa:c3:5e:0d:65:76:bc:b3:65:bb:cf:fa:
8a:d2:18:ae:bd:67:b1:3d:6b:a9:f4:45:7a:49:30:
ea:35:75:6c:55:7e:ca:f2:5a:85:0a:1a:11:d8:f9:
53:9c:a2:c1:3f:6f:cd:4a:3d:74:7c:e2:2f:42:21:
e1:8b:0c:bf:f1:32:f7:cf:49:bc:30:e8:b4:e9:af:
da:68:9d:ca:6c:8b:b4:b8:50:22:7f:03:c4:f4:b2:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:37:D6:71:BE:05:D5:42:AA:B6:70:C2:AF:5E:30:A0:3E:B3:F9
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:df:1c:54:27:93:40:0c:b9:58:5f:83:82:24:df:f8:49:46:
89:06:25:a8:1c:ba:af:fe:e9:5c:ab:de:e6:9c:83:9d:00:17:
35:1f:43:62:ca:4c:c4:e6:d4:af:ab:fc:91:4d:88:ba:57:00:
9e:b6:ed:23:12:2a:df:67:cb:f7:2c:3a:2d:7a:b0:3a:c2:d5:
c1:31:3d:72:33:d8:fe:f1:6a:36:62:bb:61:87:3d:bb:c1:f5:
60:d9:6e:25:d4:76:a4:42:ba:e9:e2:2d:0c:cf:ab:8a:96:0e:
45:3c:30:ee:88:36:d8:d7:8c:40:3c:05:01:fa:45:72:5d:f8:
84:fb:a6:0d:fb:45:27:fb:fa:1c:18:e0:de:de:80:ee:5b:f9:
7d:01:34:8e:15:38:0f:3a:7f:56:90:f4:dd:39:56:d5:c3:86:
68:67:0b:90:9d:1f:52:af:a2:76:35:84:21:39:80:7b:43:aa:
2e:b0:49:8b:ca:70:42:2d:fb:07:de:17:e5:0d:3a:b6:04:b8:
20:a5:45:ec:80:7c:6a:6b:a7:ed:3a:ec:31:ae:af:4d:45:99:
30:b5:c5:c7:78:98:23:66:2f:2b:55:c1:a1:f8:0e:63:32:5b:
3c:5d:6b:04:51:b5:95:29:9b:d8:3b:b8:96:47:0c:05:22:d9:
1d:44:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:30 2025 by rpki-client