Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: P7W0ZjfaOheXlqfn+CKhUFs/wFoSbZNcpk4dogBMxa4=
Subject key identifier: 7A:7D:E0:EE:1F:E6:41:28:23:B3:BA:56:73:FF:93:24:AA:48:D5:21
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 0196A01AFF02B327A5AF79A3E1667D66EB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 11:00:45 +0000
Manifest this update: Mon 05 May 2025 11:00:45 +0000
Manifest next update: Tue 06 May 2025 11:00:45 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: M93cRlPg0pcfAXS3uNZvu1jV/1Ea9oPHofwKydDsCI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:ff:02:b3:27:a5:af:79:a3:e1:66:7d:66:eb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: May 5 11:00:45 2025 GMT
Not After : May 6 11:00:45 2025 GMT
Subject: CN=7a7de0ee1fe6412823b3ba5673ff9324aa48d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:60:0c:a6:c2:6b:16:a8:8b:9b:73:f9:a2:
76:95:44:04:86:ad:73:b6:bc:bf:89:da:73:a5:2d:
1a:29:c7:60:79:80:0b:11:aa:7d:a0:15:fc:48:0a:
ed:b0:1a:08:70:a5:d7:81:6a:cc:f8:1d:15:f2:c6:
1f:55:2f:47:55:c9:97:fd:f8:57:b0:4a:0d:d2:ce:
0e:ab:17:ec:0e:a5:56:e2:d7:df:29:7b:0d:32:1b:
41:fc:50:64:ad:38:91:82:25:3b:08:70:57:f0:76:
02:3f:c9:65:28:d8:8e:ef:0b:3e:84:85:e9:c8:fa:
e2:c8:ff:b0:d4:4e:4d:25:bf:77:b6:57:02:b4:a1:
a0:f4:ed:a9:59:18:a0:7f:74:54:11:08:45:d1:31:
b0:e0:82:a2:47:81:52:07:5c:37:09:4b:5b:b6:08:
0d:ec:07:6e:92:87:42:22:d9:24:53:fc:a1:83:e0:
f3:72:31:5b:a5:25:5f:e0:e9:bc:95:df:84:ad:a2:
d3:8b:7f:a8:e5:c3:59:10:c0:ed:7b:ea:8a:9d:cf:
b7:00:2d:80:05:25:66:08:da:ad:c2:ce:fd:2b:28:
b7:37:82:c1:9f:c7:8f:27:24:57:18:57:52:ca:18:
43:cb:2c:3f:0d:b8:ee:94:d3:23:f9:fb:cc:9a:d5:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:E0:EE:1F:E6:41:28:23:B3:BA:56:73:FF:93:24:AA:48:D5:21
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:c5:62:4c:ca:9f:a7:ca:0a:0b:9c:69:fd:e8:e9:8c:f8:
82:9f:ea:2f:11:c4:fc:80:34:08:8f:00:1d:25:89:67:d1:4b:
00:86:f2:1b:a4:4a:76:7c:92:dc:8b:1c:53:52:0e:c8:54:86:
19:7f:bd:94:e5:31:fc:a9:b4:aa:26:58:af:e3:e1:1a:94:6e:
d1:67:33:29:32:15:f7:1d:96:7c:16:ae:9b:f4:4f:fe:bc:c2:
8e:e0:39:11:75:23:a6:42:47:cb:ef:15:93:7a:8d:74:23:7d:
b6:81:49:9e:8d:67:12:af:41:0a:c3:6c:26:df:cf:35:89:a4:
5e:43:36:86:1e:c9:f2:d3:32:3f:76:1d:6b:f9:fc:8d:e7:fd:
78:ee:c7:42:4b:95:88:6d:0a:39:38:2e:f2:97:50:51:ce:6e:
02:32:b7:d8:7f:fe:25:f2:07:8a:1c:a0:70:e4:78:65:d9:8c:
ae:fc:77:39:be:5b:1c:7b:bf:df:1c:00:4b:8d:49:b2:0f:80:
91:89:6c:23:ec:3a:02:b5:31:59:17:ae:98:c2:cc:38:b9:9e:
15:61:e1:7e:cb:9e:6b:fd:70:c3:20:78:44:42:12:b4:87:76:
b6:06:49:ba:46:68:de:9f:93:c9:35:49:b6:ba:f2:72:77:38:
dc:3e:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:47 2025 by rpki-client