Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: nVsG6YygxcJEdvuUHBl2pQpi9QuvvR5RKma5gEM4sB0=
Subject key identifier: 69:90:3C:BC:72:B4:33:51:02:DC:F7:D6:0B:BE:7E:C4:FC:05:9B:02
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 0194BB5FEA60503AABFC9DFF3493DAE0C986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 10E2
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: ZDU98pLej6G5Y69Flle0aPv1r5A.roa (hash: A41/y0PjRZXqiD5cmhEr4Mj1BgTXTsWtK/kWghBv8z8=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: rStCBLehFrq2GTWJ1EU+WfqGkDg/54ZQ5WXw+Cx5Fuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:ea:60:50:3a:ab:fc:9d:ff:34:93:da:e0:c9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=69903cbc72b4335102dcf7d60bbe7ec4fc059b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:52:af:be:ca:f4:5f:84:cb:f4:9f:c1:71:
76:2d:25:6b:7d:39:cd:b0:6d:b9:94:b3:06:49:c6:
c0:4e:89:fe:21:a9:11:92:06:df:03:d2:5f:57:73:
0f:4b:43:64:f5:3d:e3:9e:34:76:be:f8:27:c3:cb:
0a:f9:ba:6d:f4:76:81:09:86:7b:fc:9f:a4:a8:6e:
14:15:e9:21:38:60:1f:59:00:cd:a5:90:2e:2d:99:
ca:e2:eb:06:4d:aa:7a:b7:77:5d:c3:3a:16:c7:ba:
c7:9a:49:e8:57:38:48:5f:89:6b:62:38:86:df:4e:
09:cd:55:4c:ea:04:57:e7:93:7f:83:79:ea:b8:d8:
b9:4b:61:0d:3f:7a:2b:2e:46:e6:a8:6c:23:bf:05:
29:fc:71:38:85:08:6d:b1:ad:24:9b:ed:db:4e:8a:
e0:c4:3d:b4:ec:1b:79:b8:0c:2b:37:53:ee:40:aa:
3b:a0:31:ac:d2:c5:96:96:4d:d0:7d:1b:ef:3b:9b:
37:80:d1:d3:f0:a4:34:77:14:3a:84:90:0f:1c:69:
1e:6f:fe:63:53:79:da:fa:11:1d:11:4f:63:8c:6f:
42:cd:78:51:ec:7f:fa:2d:ba:78:88:48:ba:b0:14:
29:9f:da:d8:9c:08:04:95:54:ca:49:5f:7e:37:5c:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:3C:BC:72:B4:33:51:02:DC:F7:D6:0B:BE:7E:C4:FC:05:9B:02
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:6b:c6:52:79:cb:91:78:4d:18:8c:af:bd:dc:c9:34:be:
0e:09:84:9f:7d:bb:c3:b4:d3:70:40:43:76:5e:8f:e4:93:50:
e6:40:4c:78:5a:0f:f5:d8:1c:a5:0b:89:a7:8d:5a:97:1b:71:
38:b1:e1:98:65:c7:e3:a6:6e:9e:df:98:cb:11:d8:69:69:b1:
30:88:cb:5c:03:51:70:70:0d:fe:3d:69:e6:c8:c6:c5:8e:c7:
dc:85:7b:8f:4f:a4:ec:b5:cd:b1:5c:b4:39:94:09:ff:5f:cd:
49:a8:d4:52:78:7b:93:ba:d7:fc:64:eb:92:02:e1:ad:ae:28:
4f:6a:91:17:f8:3a:65:1a:1b:f2:33:cc:e2:5f:df:17:ef:22:
83:8e:9d:93:3d:d0:ae:a5:6b:d7:03:c8:91:68:7a:e6:f1:4a:
a7:20:8e:c8:11:12:b5:c0:d8:e2:97:3e:50:11:2f:49:45:5d:
b2:4c:6b:8a:81:05:0c:15:b6:c5:e3:0b:aa:78:cf:5d:93:ae:
95:95:25:ec:e2:24:81:a7:2a:1e:f1:40:2f:d6:c6:b7:fc:3c:
b4:30:0f:7e:0c:8f:7f:97:d8:80:e3:ab:e6:a8:2a:1b:e9:ca:
d0:b9:11:6a:81:25:65:18:77:b2:27:5c:00:70:7d:e6:c5:b2:
9d:f3:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:15 2025 by rpki-client on console-fra.rpki-client.org