Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: ahUZ+c2Musg72wYnEDbgXUKRAThlCvPbt3lnqbLnfrM=
Subject key identifier: F3:17:26:C8:14:46:CC:D5:DB:FB:5B:9C:74:46:10:D6:B5:77:13:7C
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 0199FFC742F9DFEF394DF2C1079A91CB7B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 1496
Signing time: Mon 20 Oct 2025 04:01:12 +0000
Manifest this update: Mon 20 Oct 2025 04:01:12 +0000
Manifest next update: Tue 21 Oct 2025 04:01:12 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: d0ciOoffGs08kuxj0DZQ2zjMYn1p0rh2dYyOkj5owIQ=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:42:f9:df:ef:39:4d:f2:c1:07:9a:91:cb:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Oct 20 04:01:12 2025 GMT
Not After : Oct 21 04:01:12 2025 GMT
Subject: CN=f31726c81446ccd5dbfb5b9c744610d6b577137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:79:52:43:38:99:c1:b7:fb:a8:2b:c0:46:
63:bf:18:90:b7:0a:f7:9d:f0:cf:fc:0d:02:f6:ce:
bf:03:39:7e:4d:6b:1b:86:3e:0f:01:d6:c1:0e:84:
8f:15:d3:bd:99:dd:e4:aa:d8:ab:dc:6e:c2:49:2f:
b6:47:48:ab:a6:fd:d3:ca:ab:f0:e7:82:5a:bf:33:
50:47:d8:6f:39:1f:05:97:2c:e9:fb:86:85:ab:40:
8e:9e:8c:22:6e:08:2e:65:20:51:e7:7e:e6:b7:f3:
e4:e2:eb:de:9c:0c:12:a7:1d:4d:69:ee:36:7c:00:
90:ae:8c:dc:af:b7:ac:8e:6f:7e:e5:2c:7c:bf:9b:
73:19:4e:78:94:61:87:5f:ad:80:d5:e4:50:a6:17:
58:27:7c:9c:0a:e1:cd:26:a8:84:7f:24:59:ad:6f:
44:5f:24:87:43:66:d1:83:ed:ef:39:b6:23:79:86:
8a:0f:20:c8:c1:c1:ee:1e:da:ab:f0:2f:8e:ee:66:
47:3d:94:e6:9a:bd:df:33:dd:2c:50:d0:16:19:52:
16:41:f9:7b:77:ec:66:94:4f:42:a0:ac:69:86:f6:
27:0f:45:bc:d4:a8:60:56:aa:41:41:79:93:53:c2:
4b:96:76:74:cb:8d:c7:53:38:b6:0c:b6:70:18:04:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:26:C8:14:46:CC:D5:DB:FB:5B:9C:74:46:10:D6:B5:77:13:7C
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:cb:96:30:e6:52:4b:0e:a0:96:3f:57:5a:c6:2e:77:49:
13:7e:65:29:4d:d2:9d:31:33:3f:bf:62:1c:f9:da:06:7d:07:
03:54:2c:0d:2b:f2:36:fc:88:1f:80:47:1f:0e:07:e1:49:38:
06:f0:ed:0b:b6:9d:72:e4:39:50:8c:e1:82:b4:c7:c7:6e:42:
9b:5a:96:55:2c:ed:2e:30:14:c1:8e:23:22:ae:1e:51:af:1c:
c9:69:c8:95:94:cd:e9:05:41:06:f0:87:00:21:bc:f7:76:e8:
07:60:02:10:01:01:ab:68:7e:73:60:c0:2b:dd:02:4a:38:7b:
2d:39:9a:a7:bd:bf:3c:f9:df:b2:1e:d1:09:b4:44:54:5f:d8:
71:c6:27:39:d4:c4:87:5a:65:9c:c8:20:7f:a2:a7:85:bf:d6:
42:cc:60:10:38:e2:c4:e8:eb:f7:85:f0:5a:00:dd:9d:bb:dc:
ab:fc:f6:3e:03:2c:f5:93:af:d5:55:da:08:46:cc:bb:b5:93:
75:89:34:7c:95:24:73:94:76:46:a1:6b:e4:40:e8:eb:e9:27:
b4:32:0a:a8:42:a0:b0:0e:a9:68:a5:b8:d5:a7:5f:62:63:37:
6a:2b:50:ae:a6:8d:ae:58:9e:91:46:38:ee:83:7d:17:1b:b5:
5f:6e:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:29 2025 by rpki-client