Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: 2KaeMKEDmmhxQ6OlpRL9b4JwfOp8+5sYQfE5jvPOQGQ=
Subject key identifier: 83:DE:87:0F:74:8D:59:88:4E:37:96:02:88:32:94:D9:F2:6F:45:04
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01967E334AF774B6D0234B3B5E34CBA9E272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 1080
Signing time: Mon 28 Apr 2025 21:00:12 +0000
Manifest this update: Mon 28 Apr 2025 21:00:12 +0000
Manifest next update: Tue 29 Apr 2025 21:00:12 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: aDujETCHIrY/+xxgeXKFQBiytHv8pblaNICc2p87Pag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:4a:f7:74:b6:d0:23:4b:3b:5e:34:cb:a9:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Apr 28 21:00:12 2025 GMT
Not After : Apr 29 21:00:12 2025 GMT
Subject: CN=83de870f748d59884e379602883294d9f26f4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:93:f0:c3:11:62:03:8e:bb:82:3a:c8:c7:
91:50:b2:00:24:89:fd:2a:50:86:5b:3e:4f:db:50:
17:c6:43:94:59:48:2b:b7:1d:2a:d8:29:14:ab:47:
3b:68:10:cc:9a:86:25:fe:93:8c:ac:fa:d0:02:dd:
3d:e6:f3:19:2d:b8:dc:9c:bf:32:ff:f3:c3:bf:74:
ae:42:e8:37:84:c0:02:ce:ea:6b:b6:cf:ff:9a:cd:
09:b5:e2:39:5c:02:ee:4c:6d:cd:53:f2:34:dd:e8:
b4:a9:58:78:2d:23:a4:41:5e:a4:00:0f:cc:6c:33:
f8:03:7d:d9:90:6d:1d:dc:36:75:ef:69:07:b7:28:
53:42:62:c2:dd:4e:d7:68:61:2c:d2:11:3c:06:c5:
9b:8e:39:64:aa:29:17:51:8d:9e:c3:7b:b7:59:9c:
e0:71:db:cf:72:18:c9:dd:7c:51:56:7c:e2:5c:c7:
37:49:ff:43:2f:00:c3:66:eb:37:47:13:59:7a:52:
df:b0:5c:ae:44:c6:f6:d7:05:1c:98:6a:8c:41:96:
70:2e:d0:a7:c6:26:6d:83:08:1f:c6:65:84:3a:ee:
4f:75:c8:48:40:db:25:e6:1b:59:80:8b:23:09:19:
45:8f:b7:eb:d5:13:96:2e:bc:6f:b8:d7:e8:0a:6a:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:87:0F:74:8D:59:88:4E:37:96:02:88:32:94:D9:F2:6F:45:04
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:3a:a3:22:2b:5b:f9:fa:76:9f:ee:46:8d:43:cf:d2:db:
70:12:b5:a5:e5:5e:3f:56:cc:ac:35:74:a3:c6:d7:44:aa:7c:
7a:ae:0e:91:c9:30:aa:55:2b:ba:69:b2:a0:d4:66:2e:0f:a7:
d3:54:0b:a3:8c:d1:55:18:dd:b0:31:c4:6f:0a:ef:5a:88:5b:
69:ad:af:8a:38:2c:6d:b2:da:58:9e:b5:25:f6:55:50:bc:7a:
9b:66:e4:5c:9a:70:4a:1f:ba:ef:2b:63:f8:0b:46:4e:23:1b:
a8:a2:52:75:8f:a2:47:50:13:2d:68:13:c6:43:9c:1e:d7:dc:
97:fb:36:01:79:09:7f:80:27:d9:dd:59:c9:e5:24:87:5f:c9:
a7:d9:b3:1e:ab:49:d6:65:d3:26:d2:90:fc:e3:7f:c2:39:1c:
97:75:19:9d:c7:89:48:18:57:35:b7:08:22:49:aa:97:3d:99:
9c:70:09:f2:b8:98:12:03:6d:50:fe:6b:b4:6d:7f:dc:2a:07:
33:e1:7c:43:ed:c0:66:72:0c:e2:94:19:2f:88:34:d6:b8:90:
d3:99:06:c0:ec:a7:52:c0:05:11:22:9c:6d:2c:94:52:8a:4b:
c4:08:02:9a:60:f9:31:f4:ee:53:aa:05:f5:55:d4:60:0b:e5:
4f:cb:e1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:28:49 2025 by rpki-client