Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: z96m9Iypju29hDvV4FtCE1KIiMVcW5L13tsohAJ24YQ=
Subject key identifier: C0:5C:04:FB:5B:C1:95:C3:4D:32:4A:83:A7:45:A9:79:84:5F:19:6B
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019676E7B2BBFC577781C2DEDA874A10A24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 1558
Signing time: Sun 27 Apr 2025 11:00:18 +0000
Manifest this update: Sun 27 Apr 2025 11:00:18 +0000
Manifest next update: Mon 28 Apr 2025 11:00:18 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: xQvoE2AqiVvYJsRuvgOqkO4fbicCagX6JhOBsFwOm6w=)
2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b2:bb:fc:57:77:81:c2:de:da:87:4a:10:a2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Apr 27 11:00:18 2025 GMT
Not After : Apr 28 11:00:18 2025 GMT
Subject: CN=c05c04fb5bc195c34d324a83a745a979845f196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:41:e3:ce:ca:df:2f:a8:41:6c:17:54:6e:
94:2a:7a:03:5f:14:38:4a:0a:26:62:a8:ac:a8:37:
d0:ff:d0:46:49:70:53:4f:4e:cd:e7:c5:95:5a:90:
d3:f4:17:5a:72:43:e0:08:d3:bf:f3:34:59:d6:24:
83:a8:ab:06:d8:e1:59:de:7c:e1:27:0e:02:6d:eb:
6e:81:fd:23:40:de:54:48:29:1b:71:b0:f2:41:a1:
db:65:0d:3b:2c:ac:21:f5:a7:e5:b0:e0:f5:4c:ba:
dc:3c:2e:03:61:6d:d0:8b:20:86:b0:a9:a3:2a:c2:
55:71:3c:bf:9f:1c:42:f5:ea:49:83:4d:61:03:8b:
54:d0:02:2f:e8:84:dc:d2:f7:02:54:4b:86:16:cf:
ba:0a:ba:6a:e5:b3:d6:b9:10:16:9e:14:49:ef:2a:
e0:de:81:f9:91:68:0c:23:6b:66:b7:46:1e:1d:c0:
41:ab:ac:e9:c4:cf:f7:14:73:19:a7:01:3c:cb:8c:
26:14:bb:26:f4:3d:a9:1f:76:1e:e7:04:c4:bf:c9:
38:73:21:49:1d:2e:cd:a6:62:79:ac:2c:61:2a:50:
44:37:75:5a:20:32:51:f4:dc:2d:06:bd:b7:48:b8:
07:5f:68:59:46:88:97:f6:eb:88:0b:55:a7:bb:cb:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5C:04:FB:5B:C1:95:C3:4D:32:4A:83:A7:45:A9:79:84:5F:19:6B
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:26:3c:96:09:a7:0d:43:41:e3:78:47:66:a9:ea:5f:0a:23:
06:28:0f:e8:0b:fa:da:97:fb:aa:e3:f2:01:2d:5a:37:8f:7c:
29:57:21:43:41:e2:37:26:be:31:0e:4b:7a:e7:84:c6:41:3d:
96:6b:d3:cf:d0:b8:ea:ba:4d:7c:33:df:c0:7c:f2:8a:99:ca:
74:e5:64:74:67:71:86:80:6c:fd:24:36:f9:9c:4d:79:f0:53:
7b:ae:e5:5c:01:e7:f7:ee:c9:16:8c:57:05:9e:14:1c:fe:08:
41:48:06:62:1b:6b:84:60:f8:b0:f5:3c:fc:a2:3b:89:08:7f:
a2:fe:bb:ab:9e:9a:1f:b1:00:15:5b:1b:11:95:74:33:96:da:
50:3d:a1:15:1a:f9:b5:d4:f4:d2:2d:c2:37:45:83:8b:64:30:
b3:87:6e:6f:db:f2:b2:4f:0a:e3:26:46:66:05:0e:16:bf:5d:
5d:55:e2:4e:bd:26:92:b1:4b:96:8f:3d:f7:9c:88:a4:f9:e2:
99:ab:a4:8c:fd:f8:cc:1a:d8:9d:2e:4f:e4:61:b3:d9:d8:03:
71:56:02:19:5f:bf:16:61:c6:80:d5:af:70:4f:74:bc:8e:54:
bb:58:b0:e4:e3:5e:74:77:44:86:c6:88:ec:57:6b:c2:11:2c:
4b:f6:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:29 2025 by rpki-client