Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: HBcgOo+dsFsLEWPQDfMdA/bg/d8PWfNuxrVJaeVO07w=
Subject key identifier: 4A:2E:D6:A3:F0:39:05:AF:62:30:E9:D1:F1:CE:5A:03:96:70:F6:FD
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 0198D7E183427593373EF4CE1B165D8914A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 17:02:17 +0000
Manifest this update: Sat 23 Aug 2025 17:02:17 +0000
Manifest next update: Sun 24 Aug 2025 17:02:17 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: MiUnevtt/2y8nT9H675CrmhdX+L0n722F3SGmqW6/b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:83:42:75:93:37:3e:f4:ce:1b:16:5d:89:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Aug 23 17:02:17 2025 GMT
Not After : Aug 24 17:02:17 2025 GMT
Subject: CN=4a2ed6a3f03905af6230e9d1f1ce5a039670f6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:e9:99:fb:9d:e5:aa:dc:d5:bc:a8:07:e6:
6e:d7:57:7c:68:f5:ed:fd:7f:f8:01:09:de:7e:8b:
73:50:70:8a:74:38:d8:8c:c3:53:d7:a0:85:c9:d4:
18:56:7f:4a:5b:c8:80:b7:6d:ed:48:b1:a7:b5:45:
20:2c:ed:bf:dc:2f:54:1d:49:42:48:b7:01:b6:fe:
8e:78:3a:65:23:42:b3:6a:05:65:fb:3e:08:92:43:
a1:bc:35:1c:1b:a9:1b:c4:62:d0:09:99:c1:b9:d2:
2b:b2:92:8c:8f:bf:19:04:9b:70:a8:78:fa:3b:e6:
59:e4:6d:84:61:9f:33:e5:e0:94:d9:02:a5:f4:03:
ef:a4:39:22:3f:7e:8f:6b:53:0c:da:44:09:c5:33:
b8:fd:ef:2f:2b:17:5e:2a:c9:2a:9a:5f:94:01:01:
60:e5:95:5c:f9:55:4f:00:af:63:06:11:8a:cf:89:
7c:b5:ff:3f:2b:1e:7d:56:f2:af:73:a8:34:90:83:
08:3a:87:ca:10:41:f6:6e:59:3a:2a:5e:44:ad:76:
16:ee:77:b8:07:82:2f:2b:e2:46:3e:ef:8a:b7:5e:
fc:48:1a:28:bb:37:75:36:73:30:13:b3:d7:23:3c:
a8:0c:c9:15:e5:12:a8:87:4e:3e:24:84:f2:2d:92:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2E:D6:A3:F0:39:05:AF:62:30:E9:D1:F1:CE:5A:03:96:70:F6:FD
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a3:27:97:f5:3b:7b:5c:67:c3:0f:13:21:7b:81:dd:1f:0e:
40:cd:24:9d:fb:54:59:ba:2d:87:21:1d:bf:6c:7a:dc:15:1a:
ae:52:f3:43:b1:46:a5:b2:b3:c4:f0:09:70:ad:77:a4:c4:d6:
b1:b1:c4:a4:f6:b8:7a:0a:b6:e0:57:0e:e2:96:a3:3c:f2:32:
08:3f:7d:1f:d4:8b:7e:f0:77:db:0b:ca:22:9b:7f:72:a3:c3:
3b:9e:45:60:a6:53:94:d1:26:7d:d1:26:29:c4:10:7e:ec:d8:
a6:f5:dc:3f:87:07:3b:38:5e:34:63:88:23:7b:85:e0:65:31:
2e:97:cf:08:7c:c0:5a:33:1f:f3:08:88:e7:3f:36:00:12:78:
9c:0b:56:7e:76:77:5a:26:79:69:f6:da:d4:56:c4:29:91:72:
e3:be:df:68:7a:c6:e7:1c:a8:c3:62:56:10:5e:83:0f:98:60:
24:60:b5:cb:e4:56:6f:c3:c0:7c:4d:73:f3:69:03:8c:eb:ab:
c2:93:fa:81:3a:36:f8:62:09:f2:dc:3f:af:7c:62:94:5c:39:
36:98:d8:33:0b:c0:56:30:e6:ff:99:23:c0:27:d5:8a:00:06:
4a:c6:c0:ab:1f:d7:c0:af:ef:a3:60:34:74:7e:1a:70:d8:de:
0e:f5:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:01:39 2025 by rpki-client