Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: etsoKNu6iFBIgayFF/ogkGeh08Lu7ufgRZLOqkxkrss=
Subject key identifier: F7:AE:7B:62:E9:75:AE:4A:24:13:EF:8E:E6:BF:E8:CB:30:FA:8A:14
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0196759E59D493EB66E9A8DA69A370B5364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1520
Signing time: Sun 27 Apr 2025 05:00:33 +0000
Manifest this update: Sun 27 Apr 2025 05:00:33 +0000
Manifest next update: Mon 28 Apr 2025 05:00:33 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: V/VT20npOzw7VW+gAQYOZmrVWxZ77rgDOrBeaqA/FbQ=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:59:d4:93:eb:66:e9:a8:da:69:a3:70:b5:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Apr 27 05:00:33 2025 GMT
Not After : Apr 28 05:00:33 2025 GMT
Subject: CN=f7ae7b62e975ae4a2413ef8ee6bfe8cb30fa8a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:6f:1a:be:16:1e:78:b5:9e:49:3f:0e:74:
ec:bc:38:a2:12:6b:90:d7:1f:d0:34:91:40:64:02:
02:00:1b:49:19:c0:61:80:4a:24:2d:7b:3f:09:3d:
54:2e:5d:fe:71:10:b0:0f:c8:3a:b7:65:b9:84:7c:
d5:45:ff:74:83:1d:80:0c:14:c6:9e:58:a3:35:bd:
d9:dc:31:27:71:64:24:ce:6c:72:13:37:69:46:9f:
aa:52:0a:13:03:ea:7d:32:57:0b:d2:ce:ff:72:76:
fe:34:8d:1f:48:0f:a2:05:20:52:35:8c:94:36:51:
86:43:fe:f1:7a:bb:17:d7:1b:e9:63:c6:59:38:ea:
52:76:48:26:1e:57:84:58:21:80:40:e9:ba:dd:f7:
fe:60:ef:0e:47:67:82:bc:49:f4:e4:b8:cf:02:36:
2f:8b:95:38:32:9a:3d:34:e6:4c:d7:d6:92:0c:cb:
a3:22:ff:0f:ee:0d:7f:9c:05:52:6e:cb:21:c6:c2:
0d:26:7c:6b:69:0c:99:fd:31:9f:f7:15:75:e9:eb:
7f:d4:54:da:1d:86:ce:00:a2:4e:de:73:3e:ed:49:
f5:b7:6f:7d:38:8b:88:0e:a7:c6:d0:24:47:ae:96:
b8:30:d2:82:26:2d:65:1d:8f:42:45:ae:9a:2e:e4:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:7B:62:E9:75:AE:4A:24:13:EF:8E:E6:BF:E8:CB:30:FA:8A:14
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f7:f9:8b:09:0b:e1:de:40:79:2d:54:ae:66:f1:c0:17:c9:
5e:5e:d0:26:c9:49:d8:69:e5:bf:3f:e4:a6:07:9c:ca:2c:6d:
32:da:12:d2:37:8f:ea:8b:d5:3b:e2:c2:a5:73:3c:dd:94:be:
5d:79:95:3f:eb:b9:1f:55:d7:e1:c1:6c:cf:6f:7a:97:25:72:
27:36:3f:8a:50:63:fa:df:06:b8:b1:72:04:ab:0c:b8:8a:f5:
48:96:b4:01:91:72:54:39:21:30:5f:71:1b:34:22:84:75:2e:
90:36:ad:87:74:ef:37:e1:e0:93:7d:85:7d:f4:c1:d8:fc:b9:
b8:f1:ca:f4:2b:9c:80:d9:65:28:4f:36:53:50:44:9b:fd:e2:
48:9a:02:0c:a8:71:95:85:b5:d5:b2:eb:bd:c6:e4:64:05:81:
a7:ed:57:9c:5c:4f:f8:44:5e:64:6c:3b:77:cb:a5:d7:65:13:
c0:51:91:90:da:1c:90:40:01:4b:0e:6c:50:83:b7:e8:ac:e2:
1e:7d:ed:a9:37:ad:06:e5:9e:d0:a1:d1:be:22:0f:a5:a6:1c:
24:69:e2:81:2c:be:67:f0:5d:d9:e4:10:2a:67:88:68:1f:06:
f6:6f:96:13:b1:e1:65:eb:29:5e:82:80:ba:a4:68:fc:8b:a0:
1e:13:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:23 2025 by rpki-client