Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: NYsrHcqvB3ucRf0fy8J0Ile2kFJxdyFeDLBU+PXp/dE=
Subject key identifier: 62:4F:C4:10:0E:C4:DB:A6:12:9C:A9:92:7A:20:37:CA:77:9A:A0:FC
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 01964632B8A6B314A808D61AACA0F4A5E86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 1063
Signing time: Fri 18 Apr 2025 00:00:51 +0000
Manifest this update: Fri 18 Apr 2025 00:00:51 +0000
Manifest next update: Sat 19 Apr 2025 00:00:51 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: VUpGjQDSxs5E9iQNksXa6fwKe9wXF92s8c/INFP2eAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:b8:a6:b3:14:a8:08:d6:1a:ac:a0:f4:a5:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Apr 18 00:00:51 2025 GMT
Not After : Apr 19 00:00:51 2025 GMT
Subject: CN=624fc4100ec4dba6129ca9927a2037ca779aa0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:39:e9:be:b5:7a:c7:8f:16:a8:be:14:56:
cd:27:11:68:96:d1:82:65:aa:d2:02:dc:3f:46:75:
ab:7a:ba:44:f4:c2:eb:79:33:d9:3b:1c:11:d6:af:
33:7a:c5:47:f6:29:66:93:19:43:c2:e7:72:5c:88:
2c:b2:f3:c0:a0:0f:70:22:41:f2:27:64:ef:7d:ea:
97:ca:0a:24:4d:cd:0e:2f:eb:2c:87:14:6c:45:e8:
c8:2c:33:eb:7c:4e:ca:9d:82:e9:46:62:5b:27:8f:
50:86:ec:05:a3:9d:5f:bb:b2:0d:dd:2d:87:0b:31:
90:82:25:59:ea:60:16:c0:20:b7:d9:e8:85:1b:27:
eb:26:c0:a8:15:fc:fd:e9:84:a2:79:4c:fc:07:a8:
36:2b:da:b4:5d:35:76:7a:4b:ee:dd:49:84:a5:df:
e2:8b:e3:29:f8:6d:23:f8:9f:8a:79:ea:dc:f2:8b:
cf:76:ec:43:df:aa:3e:c5:3e:05:54:0d:95:04:79:
96:2c:7f:24:08:00:b7:54:af:a6:d4:e9:3d:b1:1b:
cc:38:ff:fc:7d:51:34:0f:18:20:12:86:a4:18:4c:
a9:3f:3b:22:59:b7:2f:35:a4:e0:d1:f1:04:9a:f3:
d2:c0:81:28:c2:52:4e:2a:72:c5:61:95:4e:f2:d4:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4F:C4:10:0E:C4:DB:A6:12:9C:A9:92:7A:20:37:CA:77:9A:A0:FC
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:55:c3:c8:cf:41:58:52:49:cd:eb:d7:a6:3c:61:d8:25:
3c:b1:4c:73:f3:8d:a0:88:53:d5:3e:28:14:96:7f:9d:32:a5:
1a:b3:d1:a8:64:d3:a4:b1:fc:81:ed:d1:22:8b:af:b4:cf:00:
e7:1a:32:95:45:27:da:d6:83:92:a4:13:a3:f3:ce:ba:2b:63:
f8:15:c0:fe:24:cd:07:2f:29:8a:ad:9d:e2:a9:ce:ef:d6:12:
05:b0:a6:dc:16:31:69:d3:76:29:f8:ee:40:a0:59:cf:00:00:
ce:e5:04:df:ce:c5:3a:94:ce:28:17:e2:1a:2b:18:7c:d7:f5:
9c:e9:e1:88:cc:40:b2:c0:b3:eb:c5:1e:26:9d:41:e1:f2:5b:
35:d8:2e:5b:09:b9:07:24:38:80:aa:c6:91:da:03:64:f2:d9:
43:60:9c:ef:72:a3:61:d0:75:e4:a1:5e:26:2a:6f:fc:7f:40:
63:13:5d:8c:4d:54:05:d8:c8:81:21:7b:a5:a9:8c:2a:fe:ad:
2b:da:de:b1:8d:97:be:41:6b:22:dc:c6:64:ea:a0:63:9d:4b:
ac:af:f7:0c:8d:88:d9:fc:23:4d:04:4d:b4:4c:63:13:e4:a7:
9e:2c:49:3c:64:36:5c:9b:32:b4:13:ed:7d:4c:29:d2:9a:e8:
8a:07:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:57 2025 by rpki-client