Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: 4v6nsu7YJYiNC+c3Bgz2cVm1zdwKj6wYTFS0n1I9ifo=
Subject key identifier: FA:68:F0:9D:DA:AF:9F:5D:7A:E3:D5:4F:74:A6:C8:CF:54:F7:B0:30
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 0199FB7C99EEAA048B999B8EA0D315E4D03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 0C03
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: vnpCetiy+PleUprqdYwphSl7EmDjJFAOtGxSZlmiV8M=)
2: cnFeqHBw9aaza2RenBeNwJKndxs.roa (hash: kjgI4uTxYMi7MCfdj3M5XWKqSFRmZG0IxbqIvN1jC7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:99:ee:aa:04:8b:99:9b:8e:a0:d3:15:e4:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=fa68f09ddaaf9f5d7ae3d54f74a6c8cf54f7b030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:68:d2:70:f2:dc:3e:6b:2a:49:a1:9a:08:
c3:5c:a8:54:60:e8:29:21:7d:a7:c0:e3:0c:60:1a:
54:7e:47:c7:e0:f0:10:92:27:75:1a:4e:ff:29:bb:
3f:c3:78:3f:13:f0:5a:66:4f:e4:3d:91:8b:bc:08:
35:d3:69:2c:27:7d:e4:a6:7e:f1:4f:57:41:bc:55:
d7:ce:f3:22:46:18:2a:bc:09:97:66:cc:64:2d:29:
b4:03:37:9f:2f:e6:e0:e4:16:3c:53:e5:9e:bd:78:
23:53:4d:35:d0:0e:7a:4a:cd:56:79:f9:18:e1:ce:
41:e6:5d:f5:6b:72:c1:40:e1:28:90:cc:a9:44:3b:
ac:7d:59:ae:79:56:e3:53:f4:0e:90:aa:d3:7f:bd:
06:4d:0b:88:fa:d5:25:bb:20:46:f5:a8:e3:a9:13:
4b:e0:e4:0f:e9:98:3a:c3:67:11:9c:5c:16:49:59:
10:9c:39:18:ce:d1:37:1c:e2:dc:11:af:c8:c8:35:
62:80:0c:03:69:ac:2d:a0:48:95:f9:f6:4c:ef:d8:
1d:26:1f:cd:e3:43:a4:13:c3:07:f6:c0:a6:bc:22:
79:03:df:d2:bf:43:d1:03:0c:3f:7b:b2:bd:1e:72:
ea:7d:49:e1:67:43:4c:09:66:f1:09:4f:61:2d:a1:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:F0:9D:DA:AF:9F:5D:7A:E3:D5:4F:74:A6:C8:CF:54:F7:B0:30
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:cb:e5:fd:03:e4:9e:94:91:58:97:ba:e8:8d:b4:48:1f:
cc:af:b2:f8:82:03:3b:e7:6d:06:2f:31:59:02:1e:8b:b1:69:
cf:77:93:25:1b:5e:08:5d:f1:8e:85:b8:ff:1a:1a:c1:e6:c3:
7c:e7:03:22:0e:56:3e:f6:76:ba:03:d1:60:70:a9:16:86:de:
f3:df:f2:f5:32:ba:fb:a1:a3:f1:52:92:2f:63:e5:c7:1b:19:
cb:3e:45:a5:1a:ca:21:5f:79:98:7a:96:b5:b1:f0:1f:53:5f:
0e:b0:f1:4f:78:51:cb:0e:ab:70:d6:7f:71:7d:b4:72:32:87:
a0:96:94:d5:0c:74:6d:aa:d3:28:c4:71:7d:56:88:a9:cf:e5:
11:dc:ce:bc:83:a5:18:20:73:4e:32:91:f4:a9:f7:a8:49:4c:
21:e6:8e:7b:c0:c1:5e:7f:1c:54:cd:e8:31:46:1f:61:6d:bc:
47:46:8f:26:23:de:d3:72:d5:d0:a8:d4:f9:8f:16:b6:8a:47:
7e:25:8f:69:28:08:5a:bf:31:e1:c6:9c:83:f8:02:ef:90:6e:
b4:05:5e:a2:9a:e4:eb:34:2c:f0:da:81:f8:dc:08:09:74:af:
24:87:a7:f6:46:01:77:fa:b6:eb:76:11:bd:17:79:47:29:bf:
8e:ed:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:19 2025 by rpki-client