Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: PilfvW0eaRY94AQQGStU8eas4f+bsxEsL8FvWmcE7XQ=
Subject key identifier: D4:C0:CE:BB:1F:AE:2B:3A:23:CC:23:33:51:F1:95:A3:E0:38:F0:C7
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 01977075C0339FF547186473C98ADB0BF1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 1249
Signing time: Sat 14 Jun 2025 22:00:54 +0000
Manifest this update: Sat 14 Jun 2025 22:00:54 +0000
Manifest next update: Sun 15 Jun 2025 22:00:54 +0000
Files and hashes: 1: ZDU98pLej6G5Y69Flle0aPv1r5A.roa (hash: A41/y0PjRZXqiD5cmhEr4Mj1BgTXTsWtK/kWghBv8z8=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: BLC6xXZYQEli2jwTy1s+SllqZH23MHhFjyPAjM11Ho0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:c0:33:9f:f5:47:18:64:73:c9:8a:db:0b:f1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jun 14 22:00:54 2025 GMT
Not After : Jun 15 22:00:54 2025 GMT
Subject: CN=d4c0cebb1fae2b3a23cc233351f195a3e038f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:e5:08:a2:8a:f8:7c:be:bb:85:8a:c5:92:
16:d3:94:52:4d:5e:6c:52:ea:02:6d:cb:5d:5c:af:
53:2f:ba:b4:7e:7e:85:f0:6a:66:64:b5:ef:4d:61:
9f:e6:28:af:03:62:bd:c1:a7:11:2f:3b:ad:a3:f2:
80:68:7d:15:0e:86:af:65:c1:13:46:de:3c:55:b6:
01:a8:98:60:8e:3b:35:96:a6:d2:8e:b5:61:a1:9b:
fd:5c:24:8a:ee:cd:75:4b:03:aa:50:c7:b2:d1:80:
0c:20:3b:18:db:db:7b:64:c6:cd:a2:19:c9:b7:cb:
c0:c6:24:7d:a9:5f:3c:6e:25:75:08:d8:e0:4a:cb:
b8:87:44:d0:61:23:30:0d:df:03:94:14:58:89:26:
bd:d3:12:ce:ab:cc:32:03:14:c5:62:3b:58:d9:bc:
9e:7b:bc:66:96:1b:e5:a8:b5:52:e5:cc:53:2e:e4:
d1:f8:08:17:59:95:08:29:8f:ad:75:80:86:16:2b:
61:ba:ae:0f:07:b3:95:3d:06:14:8f:5f:19:46:34:
81:54:7e:7e:97:89:ea:f5:af:cb:fc:48:df:8a:4e:
2c:6a:cd:f4:b9:03:d0:bc:c9:40:77:4a:b4:89:57:
49:c5:a2:1f:a3:9b:9e:0b:b8:dd:4d:bd:6f:e1:fd:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:CE:BB:1F:AE:2B:3A:23:CC:23:33:51:F1:95:A3:E0:38:F0:C7
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:e6:94:3b:26:c0:76:8c:60:f3:e7:01:e1:2f:80:47:48:
18:2f:4a:19:1d:40:cc:22:da:24:45:3f:df:04:d2:e2:15:36:
28:f2:04:bc:60:8f:ca:03:1d:f0:d0:84:98:c4:48:80:6b:e4:
2c:c3:87:07:4f:cc:d7:e2:44:a2:43:ff:7d:63:dd:2e:76:5a:
09:df:c1:2c:13:11:68:19:89:ae:f0:25:39:97:79:bf:22:9f:
d8:10:1a:02:13:ff:1f:25:e5:25:d1:41:bb:1f:03:23:f7:f4:
ef:4c:42:b6:9d:e1:aa:d2:0a:7b:ff:d4:e2:d8:95:75:65:06:
de:f9:c6:2a:c0:d9:65:84:ac:6a:0b:93:ec:83:fc:e1:77:79:
2b:85:1a:13:57:d9:8b:c0:3d:34:0a:3e:20:28:f9:43:a3:75:
e6:14:c5:1a:3d:8c:2b:79:18:e5:c0:e7:4f:55:06:61:17:6f:
aa:0a:25:a4:d8:fb:c2:23:8f:b1:97:7e:c4:b7:a5:10:68:f5:
d7:f3:2a:00:22:65:f5:52:9e:28:06:78:9a:74:57:92:16:a5:
b5:15:9d:14:ee:f5:b3:3e:bb:c5:37:45:17:f8:da:1d:d0:40:
65:36:7a:54:2a:e5:61:b8:d3:20:4e:43:10:f2:41:b1:de:4a:
ea:63:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:25 2025 by rpki-client