Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: Ncl+a0AT40jFY/G54Y6b+Gd/4YLpmHjBN7tHSOGWxBk=
Subject key identifier: 11:2F:9E:A4:19:D0:CA:8F:AF:D5:95:AA:BF:E6:09:CA:E1:CC:92:97
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 0199FA6AC0E2955315365BA2390645AE8632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 124E
Signing time: Sun 19 Oct 2025 03:02:04 +0000
Manifest this update: Sun 19 Oct 2025 03:02:04 +0000
Manifest next update: Mon 20 Oct 2025 03:02:04 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: PiyPN7LuQ7k3E3dh5bvymp2AOWoEyUcxrDq2QExsJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:c0:e2:95:53:15:36:5b:a2:39:06:45:ae:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Oct 19 03:02:04 2025 GMT
Not After : Oct 20 03:02:04 2025 GMT
Subject: CN=112f9ea419d0ca8fafd595aabfe609cae1cc9297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:c6:50:ab:4b:b2:44:9a:fd:bf:03:fa:23:
da:9e:6d:56:d4:f6:0b:f1:25:c0:96:12:9a:f9:e3:
71:a7:b9:1f:37:da:8a:1e:50:8f:c7:79:40:8f:b1:
ca:a1:fb:d6:3d:84:24:bf:02:05:64:dd:87:f3:9b:
f3:81:64:f8:9e:9d:95:39:7f:e4:48:a1:86:82:15:
a2:4a:cf:15:1e:f5:f0:d5:3c:82:aa:d3:28:fd:c5:
48:5b:9c:11:70:93:8f:1b:c0:fe:84:b8:e8:cd:f8:
77:d5:c0:19:8b:71:24:9c:8f:11:1a:c6:34:c1:30:
ab:f8:2b:17:5d:75:ba:cb:65:ee:1e:09:07:54:0c:
06:b7:42:63:4c:19:0f:ed:42:27:af:5a:78:a8:28:
3e:4d:6f:15:64:87:5b:e8:9e:b3:fe:63:fb:c3:76:
6e:9e:47:55:4d:76:1c:14:8a:9c:af:01:07:c1:51:
39:ab:5f:6a:fa:e2:fe:41:91:3e:7c:41:99:97:0f:
eb:64:dd:7c:a9:0f:e4:b6:5c:bd:fe:f1:08:e3:15:
51:e1:21:b0:55:b3:70:29:bc:a6:06:12:f7:2f:18:
40:28:c2:29:08:d5:63:c7:fa:d0:c5:37:16:2c:66:
cc:1b:40:43:0f:d3:eb:aa:78:0c:ef:48:3f:8b:80:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:9E:A4:19:D0:CA:8F:AF:D5:95:AA:BF:E6:09:CA:E1:CC:92:97
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:b1:34:48:1d:f1:85:51:07:b2:fe:b3:c1:9b:d5:08:99:
27:7e:5a:7b:83:10:7b:a5:10:92:5a:fe:8b:a5:d0:79:d6:27:
5e:f5:00:6a:5c:ed:87:fc:1d:68:34:e2:11:a0:40:78:98:e5:
b2:7f:4a:bd:e9:13:14:bf:85:93:12:4f:33:9a:46:bc:aa:96:
b4:ff:01:54:02:20:0f:57:99:ef:0b:d7:84:9f:7c:40:6d:0f:
08:b6:e7:94:58:3b:68:1d:6a:21:5f:c0:24:85:c3:3a:d4:90:
3a:a4:9b:1a:88:30:fb:32:22:0e:85:36:65:8b:c6:7a:3f:96:
ca:ca:04:2d:af:f0:5c:74:f4:e2:f8:c4:af:90:28:43:80:1e:
40:6e:85:88:0d:b1:bc:30:ea:bc:1c:0e:c9:db:d4:01:1b:90:
f1:de:5b:1e:99:a7:ba:b5:37:1a:73:7e:9b:ca:77:58:a3:e5:
bf:65:0b:bc:8c:f4:b0:3a:dc:1c:2f:18:bc:93:07:52:ec:7f:
f7:bd:97:3e:04:85:77:e9:a8:75:48:c6:de:fa:15:2e:0c:64:
60:55:8f:2e:83:b7:8a:78:e7:76:58:85:a5:a6:ef:8c:c0:23:
96:e4:1e:f7:07:d0:e8:f7:ec:35:5f:d9:3c:a9:97:fa:35:e7:
9e:c3:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:55:12 2025 by rpki-client