Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: 46t2SctUj9Y94BekqCuaigqfWv+B+il6ilCiTN3gJ4I=
Subject key identifier: E8:6D:61:5B:69:8E:CB:67:F4:6C:31:FB:23:53:41:78:AE:8C:48:DC
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 0198D4E010CB237AE880B090702C0DF036EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 11B6
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: of76iHdNEEW9gwaEhF2WYpKVcbAP8sndIwP2jieriPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:10:cb:23:7a:e8:80:b0:90:70:2c:0d:f0:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=e86d615b698ecb67f46c31fb23534178ae8c48dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:17:65:06:90:d7:c4:dd:7a:11:a5:0c:fb:
3b:dc:d4:52:5f:36:a0:71:56:12:00:90:eb:b8:61:
36:c7:c1:c6:c3:93:da:8d:e9:d5:7c:82:aa:44:21:
1b:3b:15:3d:db:b2:a9:0e:1c:44:22:b1:2c:0a:1b:
94:36:aa:74:1a:a0:de:98:29:bb:79:ad:e0:e3:6d:
97:2a:38:88:ca:83:9b:07:52:b9:cc:56:1f:e5:01:
e7:79:bd:7b:49:6e:60:55:50:1c:3c:d0:12:c9:37:
03:7f:ac:0c:35:e5:99:b1:47:fd:35:33:d2:79:9f:
2a:a8:2f:e4:04:ca:7c:c8:ad:71:1a:c0:69:6c:a5:
ed:fe:ea:a9:2f:60:7d:49:ab:e2:c9:2d:6a:2c:c4:
17:3f:76:f7:30:73:1f:f4:22:58:4c:b3:a7:fb:4a:
b8:b2:e3:1d:d4:86:18:29:1b:75:e2:39:ca:5e:8a:
02:0e:95:6d:90:59:0d:99:df:53:0e:f6:c9:ac:df:
2f:27:17:aa:ff:dc:d8:51:07:35:49:4a:e8:16:63:
c4:5f:30:9f:d4:35:96:3c:06:1d:be:00:13:ac:22:
0e:38:08:87:31:b4:51:4f:be:34:8b:3c:fc:1d:40:
77:4d:cb:84:2a:ed:c9:8a:6b:89:51:de:1d:7c:2a:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:61:5B:69:8E:CB:67:F4:6C:31:FB:23:53:41:78:AE:8C:48:DC
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:90:51:2d:e3:42:55:61:93:53:2c:12:84:f7:18:2d:37:2a:
cb:bf:5f:5b:0a:4a:b7:0c:49:ef:06:3b:9c:8b:c0:20:73:df:
70:35:c9:fc:11:4a:14:76:26:42:e8:6a:6f:e0:ea:48:ed:05:
fc:6c:d1:83:2c:e1:c6:d3:0e:32:af:52:64:74:2d:93:c4:04:
52:ba:2e:93:3a:2d:da:66:ed:d7:18:14:71:e9:6f:c1:4e:58:
81:0b:61:f8:b4:56:67:49:bc:d0:c1:79:b8:26:f7:e9:d1:fc:
98:88:e7:c2:57:1e:3d:40:07:48:a8:bc:b2:6c:dc:03:88:93:
e3:00:a8:c8:f0:fa:7a:b4:23:94:c2:ac:c3:2a:53:c3:43:8e:
4b:ae:e8:7d:0f:a1:fd:4c:4a:70:f8:86:0f:bb:84:95:fd:05:
ae:a9:a7:93:b2:c0:a0:52:eb:71:d2:19:ef:1e:ec:0f:9c:53:
ee:7a:4e:51:33:77:81:f7:e2:e6:a0:c0:d1:6e:62:8f:13:dd:
6b:d0:6c:57:6d:9c:52:96:2c:0d:42:6b:cf:f0:07:f9:60:a4:
47:38:36:85:ba:cb:41:63:bf:c9:60:a9:be:de:b8:cd:3e:6b:
02:a6:32:0e:7a:77:22:22:55:3b:30:c1:3e:66:0d:6a:fe:a5:
3a:12:fc:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BDLI3rogLCQcCwN8DbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
EyhlODZkNjE1YjY5OGVjYjY3ZjQ2YzMxZmIyMzUzNDE3OGFlOGM0OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWAXZQaQ18TdehGlDPs73NRSXzag
cVYSAJDruGE2x8HGw5PajenVfIKqRCEbOxU927KpDhxEIrEsChuUNqp0GqDemCm7
ea3g422XKjiIyoObB1K5zFYf5QHneb17SW5gVVAcPNASyTcDf6wMNeWZsUf9NTPS
eZ8qqC/kBMp8yK1xGsBpbKXt/uqpL2B9SaviyS1qLMQXP3b3MHMf9CJYTLOn+0q4
suMd1IYYKRt14jnKXooCDpVtkFkNmd9TDvbJrN8vJxeq/9zYUQc1SUroFmPEXzCf
1DWWPAYdvgATrCIOOAiHMbRRT740izz8HUB3TcuEKu3JimuJUd4dfCpXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhtYVtpjstn9Gwx+yNTQXiujEjcMB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5BRLeNC
VWGTUywShPcYLTcqy79fWwpKtwxJ7wY7nIvAIHPfcDXJ/BFKFHYmQuhqb+DqSO0F
/GzRgyzhxtMOMq9SZHQtk8QEUroukzot2mbt1xgUcelvwU5YgQth+LRWZ0m80MF5
uCb36dH8mIjnwlcePUAHSKi8smzcA4iT4wCoyPD6erQjlMKswypTw0OOS67ofQ+h
/UxKcPiGD7uElf0Frqmnk7LAoFLrcdIZ7x7sD5xT7npOUTN3gffi5qDA0W5ijxPd
a9BsV22cUpYsDUJrz/AH+WCkRzg2hbrLQWO/yWCpvt64zT5rAqYyDnp3IiJVOzDB
PmYNav6lOhL86w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:10 2025 by rpki-client