Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: q8jc9nMyhmD36TIulSmNsCky4dl4of+7Ng7zDLo2PLU=
Subject key identifier: 0A:95:7E:11:EC:4B:14:38:5B:28:A9:BA:56:C8:05:55:3F:74:62:1A
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 01963CF81F6322B14410DF14E2C282B90F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 153A
Signing time: Wed 16 Apr 2025 05:00:15 +0000
Manifest this update: Wed 16 Apr 2025 05:00:15 +0000
Manifest next update: Thu 17 Apr 2025 05:00:15 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: HVmBy0MnDunMhIJmiVWaIldS2pZMNei+iz6yPupJFO0=)
2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:1f:63:22:b1:44:10:df:14:e2:c2:82:b9:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Apr 16 05:00:15 2025 GMT
Not After : Apr 17 05:00:15 2025 GMT
Subject: CN=0a957e11ec4b14385b28a9ba56c805553f74621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:79:8a:03:d4:6c:e2:14:3c:72:c0:99:82:
d4:fa:c0:f6:ee:41:79:50:c4:f3:e6:c1:12:66:1b:
a1:bb:39:43:1a:4e:1c:8e:e6:55:5b:a8:0c:b4:0c:
2b:f9:1f:0a:69:5d:ba:2b:37:06:a8:48:3e:f7:fd:
c5:30:13:c8:3f:bf:cf:e0:bb:63:97:55:39:a1:76:
8a:43:fa:fc:0e:be:53:d8:8a:fb:dc:48:61:93:c1:
c9:95:a4:30:a2:06:32:64:1f:88:f0:2a:eb:35:6f:
c1:26:43:e7:24:36:f6:d2:85:8c:13:5e:35:40:c6:
46:cb:ea:8a:52:37:d2:6a:a3:2d:03:39:0d:88:ea:
5d:5b:0e:44:65:22:f4:83:f5:a0:74:7f:99:86:e2:
ef:64:5f:84:94:5c:de:24:96:75:62:9b:d0:65:d7:
db:7e:52:89:e9:93:a3:6b:37:73:5b:31:8f:a0:b6:
a6:04:38:79:33:83:7d:cc:58:e4:d4:6e:0d:5e:ab:
95:d9:ce:ff:ae:e6:5c:ea:14:92:0e:0a:e7:5d:be:
00:cd:e1:68:d2:30:a9:a1:3e:64:0d:ce:35:7f:04:
f9:a3:9f:b7:43:d6:dc:f7:90:a4:75:62:5b:22:6d:
b7:27:11:b4:8a:a2:3d:65:fd:4c:6e:f5:9a:8f:ed:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:7E:11:EC:4B:14:38:5B:28:A9:BA:56:C8:05:55:3F:74:62:1A
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f4:b5:0c:3d:98:72:75:b2:90:cf:4d:37:16:ca:1a:05:6b:
46:42:4d:75:a6:09:e3:27:b9:dc:c7:74:e3:80:44:33:6b:10:
19:0a:48:99:ca:a1:59:9e:fb:42:3a:d9:2b:cd:19:fb:18:41:
49:7a:63:c1:02:b3:46:6a:23:06:83:e1:4d:6e:bd:a4:d1:93:
52:ba:de:66:91:10:6f:f7:10:70:82:97:10:2c:04:19:f3:26:
46:10:54:3e:8a:de:04:08:e9:92:f2:5b:cb:32:69:73:ff:a3:
bd:60:20:9f:9f:12:51:c1:97:d8:2a:f6:5f:9d:f0:29:50:b9:
0e:87:27:21:11:96:9f:fa:af:7d:05:cc:48:e3:e2:96:20:ea:
00:de:a8:75:5e:a5:fa:25:5f:fd:b8:0a:ec:b2:fe:ff:61:bc:
d5:fe:ec:f5:86:a4:a5:69:1a:2f:db:07:3f:d4:14:c8:a0:bc:
a0:b8:6c:88:16:3f:d2:7b:a4:e9:f3:c6:b5:b7:ec:1a:98:ea:
0d:61:d5:b5:1b:b6:37:8a:ea:ab:63:78:c9:97:09:5a:3e:fa:
66:85:02:ab:61:39:69:fb:78:35:bf:47:90:8c:5e:d5:a1:dc:
44:80:79:5b:fa:3b:bd:92:71:d4:63:70:75:2c:ea:cd:87:ff:
39:20:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:15:34 2025 by rpki-client