Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: 1vLEnBUbp++e2OEfuwXhoEQM+UOCQAXhj9PFt9eWxtM=
Subject key identifier: 00:31:94:B3:E9:DF:DC:F3:28:68:6C:BE:0A:9C:F7:7A:52:68:1B:9A
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 0196748C45609596D06ADD4FF5203760B11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 149F
Signing time: Sun 27 Apr 2025 00:01:11 +0000
Manifest this update: Sun 27 Apr 2025 00:01:11 +0000
Manifest next update: Mon 28 Apr 2025 00:01:11 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: qUgj4snfsrILQM8k/0AiItAc3b6hKJ0vsilB6kfkCB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:45:60:95:96:d0:6a:dd:4f:f5:20:37:60:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Apr 27 00:01:11 2025 GMT
Not After : Apr 28 00:01:11 2025 GMT
Subject: CN=003194b3e9dfdcf328686cbe0a9cf77a52681b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:ad:a0:a6:77:c8:f2:ca:ef:d5:fb:d4:fd:
4c:12:92:07:21:d0:35:5d:05:b2:06:ac:a9:93:a6:
ab:e3:7f:3f:85:c9:9b:8d:87:a4:e5:8f:54:d6:1c:
ec:33:e7:ed:e9:7c:8b:bb:3a:84:cc:37:fd:66:1e:
64:c0:c4:bb:fd:a1:b2:26:1b:c7:b9:b5:34:52:91:
57:17:f4:c9:b1:19:70:53:7c:de:60:ca:76:5d:06:
23:90:8a:e2:8f:59:af:3f:50:8e:af:c3:70:db:0e:
4f:eb:cd:60:6d:f5:2b:65:d4:ba:a8:b5:81:35:cb:
6e:cd:cc:a1:99:63:f0:7f:9e:5e:8f:f3:cb:ba:15:
f2:19:0d:c0:c1:b6:73:2f:ca:fe:e4:ef:2c:03:30:
26:15:d2:74:df:19:16:59:43:99:9c:1f:23:bb:08:
c9:95:ec:75:05:19:50:a8:83:17:78:ad:cf:d8:10:
d9:0c:a1:c9:9c:4d:c3:7d:b8:0c:cd:f5:73:31:50:
eb:38:3d:63:a4:fe:2c:53:db:ec:7f:7e:1b:c6:07:
3f:7d:a7:9c:d5:9a:cb:ab:7b:1b:e1:07:47:91:d6:
00:93:db:35:8a:74:77:97:8f:22:98:f1:15:ca:44:
b1:1c:0c:f4:63:e5:3f:d2:27:24:7e:1b:63:fc:c4:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:94:B3:E9:DF:DC:F3:28:68:6C:BE:0A:9C:F7:7A:52:68:1B:9A
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:47:81:75:c5:e4:86:a7:1d:97:5a:46:f7:41:a2:5e:63:
40:49:d7:f2:ad:5b:21:9c:75:f9:f6:c7:4a:8f:0c:bf:a4:8a:
ae:5b:25:8a:2a:42:0c:b0:b1:fd:d4:a6:5f:e6:15:36:eb:1b:
ed:e5:d6:79:c1:5f:f5:e6:a7:93:49:f6:20:46:e1:5a:1d:95:
97:6c:58:f7:98:04:97:9c:7e:92:ef:f3:e1:14:22:69:a7:cc:
45:11:56:3e:82:ca:b3:ef:28:64:91:88:bb:e0:15:fb:0c:7e:
ef:0e:6f:7a:ae:6e:91:33:2a:af:22:c0:e0:5b:44:64:10:95:
6a:05:52:cd:49:89:a7:cc:63:b1:6d:6e:50:24:72:b9:53:05:
9e:1a:99:fe:80:78:07:59:5b:2b:95:6e:be:80:95:7d:d6:9d:
a4:9d:95:c5:87:85:30:47:1a:fa:27:50:43:3e:84:a3:29:d4:
27:74:f3:7c:41:13:be:88:62:37:ee:82:fb:f1:15:a4:60:c7:
d1:f0:0c:3c:e8:05:2d:1f:e9:03:24:e1:0f:21:71:72:76:e9:
d5:eb:c6:d4:04:48:6c:45:ac:a6:3d:58:31:1e:8c:3d:b1:a9:
1b:c2:9a:b6:33:06:cb:b2:5e:21:2b:4a:11:8c:1a:95:3f:ed:
a8:50:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:31 2025 by rpki-client