Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: mnBM5AV3mFTpC1zwhzdQ0xsatRHPzKFpWAHfr845XxA=
Subject key identifier: 44:9A:4B:CA:EF:37:1B:03:40:E1:EF:FE:F7:36:5C:20:49:64:B4:E5
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01967D57E57AF435020C92A0994C7907FE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 17:00:34 +0000
Manifest this update: Mon 28 Apr 2025 17:00:34 +0000
Manifest next update: Tue 29 Apr 2025 17:00:34 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: OA/SFWlBNCgPcF1N6Bzf1WXqd8J65x8iFVZ0d05EONM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:e5:7a:f4:35:02:0c:92:a0:99:4c:79:07:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Apr 28 17:00:34 2025 GMT
Not After : Apr 29 17:00:34 2025 GMT
Subject: CN=449a4bcaef371b0340e1effef7365c204964b4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:0a:c2:db:04:47:5d:df:98:2b:42:27:21:
1a:a4:23:87:dc:86:02:09:1e:4d:e8:8a:7a:c8:44:
b3:c0:b1:4e:2e:bb:19:73:ef:4d:f1:75:99:de:c0:
ef:fb:52:ef:9c:e5:c8:0c:f1:b9:f4:46:e5:84:c7:
d6:79:4a:ce:f9:c3:f7:5b:92:f2:e9:32:79:ea:c6:
1d:a3:67:70:52:1a:91:de:ae:6a:e9:51:c8:e6:11:
c4:f5:64:d4:4d:5f:d4:6d:ac:7b:3d:d9:34:39:82:
09:42:9d:0d:0a:bf:ea:6d:46:90:ed:c0:3c:64:b0:
c6:2d:d1:ed:c9:40:f3:18:ce:1c:be:bc:e8:0f:ae:
90:c0:70:9f:a8:62:c4:ef:46:71:04:d1:68:6c:e3:
a6:f9:20:7d:bd:a9:50:a2:4a:91:94:db:38:e3:88:
25:19:cd:18:0e:b5:d8:1d:91:af:46:69:6d:62:f5:
c9:ff:8b:c7:6d:e9:9a:62:d4:41:18:5d:3a:5b:c0:
8b:dd:01:ff:74:91:e7:0f:77:5c:a6:6b:83:43:48:
3e:c4:8e:28:02:7e:5b:a8:ce:2c:b9:95:1f:1e:2e:
65:23:f7:2e:ee:4e:91:98:db:3c:be:36:57:75:3d:
f8:bc:13:a8:91:02:46:11:70:b7:ba:3d:df:96:ad:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:4B:CA:EF:37:1B:03:40:E1:EF:FE:F7:36:5C:20:49:64:B4:E5
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ea:e6:02:d8:f5:7e:4e:3b:ea:9e:69:f8:a3:dc:87:99:7c:
61:91:e2:4b:28:50:4b:48:18:87:d3:97:ab:b6:63:a5:da:92:
e8:42:54:21:c0:d3:3a:29:fd:a8:b4:65:21:0c:df:7a:8d:1e:
9f:97:8c:7c:0c:d6:ed:dd:e5:45:59:00:b1:54:9d:6b:79:f0:
88:56:52:38:cf:97:d0:0f:b5:15:0a:d6:f8:25:a1:cb:62:07:
18:1d:9b:e5:80:ac:ee:de:8c:ae:7d:e0:1c:cf:31:c8:6d:37:
46:93:b7:22:a8:59:53:99:f7:1f:c3:2a:50:c6:f3:e5:8d:e5:
5c:e6:e1:e5:0d:ba:d1:95:94:18:d8:3f:f5:e9:57:b0:19:87:
69:a2:98:ff:17:04:3a:8b:f9:c3:d0:ea:8e:7c:3d:ea:af:6d:
19:18:f8:f7:3b:8a:d4:d1:c5:ea:21:10:85:e1:48:bc:a4:86:
95:54:2e:bf:76:bb:38:b6:17:98:17:95:14:11:63:b3:54:4a:
16:a1:d5:35:c4:93:6f:63:c6:f8:32:58:fe:8d:0d:a6:16:b0:
ca:f8:a2:4d:0b:9f:eb:b4:89:00:ca:fc:d4:c2:dd:ab:81:e0:
ef:24:8b:2d:15:bf:a5:16:b8:92:0c:d6:ea:83:ad:97:75:91:
db:c0:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:24 2025 by rpki-client