Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: kwlSEbxTjrfsPwmYQck18cETjeP94aRBSDM5oAm86hs=
Subject key identifier: 72:7C:70:14:B6:B4:4F:E4:8C:DE:64:55:BF:D8:29:5C:A6:64:52:06
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01984EC2CF7CE37B010AD7300E08E5D367C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 02:00:46 +0000
Manifest this update: Mon 28 Jul 2025 02:00:46 +0000
Manifest next update: Tue 29 Jul 2025 02:00:46 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: 2RD0eJGszxdXt1W1h3xoobvQZ/hfrgL8pgtELhwHlcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:cf:7c:e3:7b:01:0a:d7:30:0e:08:e5:d3:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Jul 28 02:00:46 2025 GMT
Not After : Jul 29 02:00:46 2025 GMT
Subject: CN=727c7014b6b44fe48cde6455bfd8295ca6645206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:c8:8e:95:aa:8b:94:ac:a5:0d:9c:b1:a8:
7f:af:fb:dd:d9:0b:ba:8b:9f:c3:f8:9c:4a:9e:16:
05:5c:d0:b5:b2:2e:b2:37:49:b3:58:b1:e3:b9:94:
04:a2:46:93:98:60:4b:3c:cf:1a:06:6b:c6:ea:19:
1c:d1:ef:88:4b:f2:8c:09:9d:dd:5c:95:ef:3a:d9:
05:39:8f:71:ce:6d:7f:c2:49:4d:21:fa:ec:e6:fa:
d2:86:96:83:c9:88:71:e4:fd:40:e1:06:f1:fc:60:
3c:54:63:35:d4:8d:9a:7b:33:86:7a:a3:72:90:71:
1b:04:41:66:31:33:1b:ba:d1:10:a4:60:b5:5f:54:
ef:4b:8e:3e:5a:2b:87:51:22:de:ad:a5:34:3d:3a:
ae:f5:95:7d:e3:2c:c7:4c:1f:af:f7:49:57:02:cd:
b0:0d:21:02:d2:33:d6:0a:76:ef:e1:1f:28:04:b5:
62:77:db:3f:4f:a6:a4:a5:d4:ca:96:10:f1:a3:43:
b6:f5:78:c5:18:c4:2e:5d:d4:78:24:fe:c8:82:81:
47:54:40:9c:85:62:9b:da:bc:ab:5b:b9:e6:9f:dd:
b9:4b:05:bd:ee:74:f2:61:0f:3a:cf:5b:50:af:c1:
1f:5c:84:32:f7:bb:4d:13:06:dc:a7:79:80:92:06:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7C:70:14:B6:B4:4F:E4:8C:DE:64:55:BF:D8:29:5C:A6:64:52:06
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:ba:cf:5e:e9:34:dd:74:14:21:57:7a:bb:44:63:b1:1f:
03:8d:f0:d4:90:c6:5d:a6:c7:64:28:b7:44:92:20:5b:59:c7:
7a:d0:97:c2:5a:40:ef:2a:f7:af:54:45:92:94:5b:6c:18:13:
b7:95:0b:00:bd:21:06:5f:1a:b9:c2:d0:4d:06:61:7e:a6:dc:
ea:cb:4c:7c:e4:88:58:92:9e:0a:0d:03:90:2f:c2:a2:d3:f7:
62:86:31:fc:bf:93:fc:03:d0:0b:3b:20:11:36:b3:ca:9d:e9:
b0:68:20:04:70:de:1f:7b:12:3c:4c:8f:44:ae:09:1d:1a:f9:
e8:80:51:f7:cd:5b:9a:e3:82:46:40:13:31:cb:82:df:fd:58:
46:de:25:22:7b:3f:d9:2f:ea:d1:7a:1a:66:d7:8a:36:e6:ac:
17:51:d0:1b:a2:e1:9c:4b:9d:90:fd:ce:47:05:f2:fc:5f:57:
8b:6c:2f:1b:87:e6:12:15:ec:5d:d8:7e:37:b1:45:6e:3f:e4:
24:45:3a:e5:15:43:52:6a:a4:21:e5:2d:96:64:6c:40:99:ac:
99:6c:52:5b:c9:44:90:25:24:82:a7:31:5d:b6:35:c0:dd:a7:
56:02:e3:53:95:ef:39:44:bb:77:9d:10:92:a7:6a:e3:1e:be:
35:cf:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:41:58 2025 by rpki-client