Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json)
Hash identifier: /zffC7ZcJVAyuWx+BHKmZvbU/cVWuvhxfykf8co6Vkw=
Subject key identifier: A4:DE:E5:DB:CF:30:04:F2:F4:3E:37:23:10:2D:0D:E5:B1:4B:BB:03
Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9
Certificate serial: 0199FAA1229B77E3003E78FF2C04408505C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
Manifest number: 07
Signing time: Sun 19 Oct 2025 04:01:28 +0000
Manifest this update: Sun 19 Oct 2025 04:01:28 +0000
Manifest next update: Mon 20 Oct 2025 04:01:28 +0000
Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: bZHTTOrO/4Wb99NbXFt/zRlVdOdHj8S5MmkbkCUafuM=)
2: NN7HcWfwho6Wg205AV2VgvpmbLU.roa (hash: +KCs1tl2HUeqWBjr2lOeJY8VcQb8CSyBUASdC9OhN/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:22:9b:77:e3:00:3e:78:ff:2c:04:40:85:05:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9
Validity
Not Before: Oct 19 04:01:28 2025 GMT
Not After : Oct 20 04:01:28 2025 GMT
Subject: CN=a4dee5dbcf3004f2f43e3723102d0de5b14bbb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:3c:4c:25:bc:45:74:f3:cf:66:23:c0:ad:
16:f8:2c:b1:96:0f:2e:dc:8d:e6:24:33:aa:58:0d:
56:f9:db:1c:9b:0b:fb:ef:bd:e2:9b:42:01:fa:32:
7a:df:ad:44:be:37:1d:b9:95:e3:8b:ce:58:26:53:
ba:bf:bc:4e:c1:3c:94:c1:fa:a1:0e:4b:0b:d7:78:
fe:39:49:48:18:40:78:f7:76:8e:05:54:57:20:75:
c8:ed:c6:d9:e7:af:ec:16:a4:48:ee:3e:2f:2f:b9:
a3:79:4c:cf:05:be:fc:4d:1c:9c:9a:ad:75:35:f3:
61:84:4c:e2:28:77:9b:b7:3d:7c:e2:9f:47:71:84:
94:2c:19:1d:f5:aa:6d:5e:ad:63:71:be:f4:ff:30:
b5:c0:06:ec:9a:64:c7:c8:0c:9f:b0:5c:f7:91:f9:
4b:bb:a0:d8:6d:b4:7c:26:5a:37:9b:62:ac:49:0c:
27:4f:4c:2a:1e:6a:dc:e6:61:9f:21:1e:3c:c5:ff:
b4:a8:4d:c5:09:2b:2f:ba:93:3e:bd:d1:9c:3b:5b:
3d:db:02:7c:13:42:e3:7b:a1:50:25:76:2b:9d:ec:
2a:8e:39:80:bf:46:e6:3b:2b:5b:a8:07:5c:10:a8:
64:35:96:b3:ea:37:07:e7:a5:ff:ab:fe:c1:b8:27:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:E5:DB:CF:30:04:F2:F4:3E:37:23:10:2D:0D:E5:B1:4B:BB:03
X509v3 Authority Key Identifier:
keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c8:53:4f:92:8f:49:21:4d:87:32:1a:b1:60:7c:e4:27:a0:
31:9a:6f:02:9b:31:d0:0e:4c:a0:7e:54:36:3d:d6:59:1d:9d:
88:41:be:9d:24:54:e0:3b:f8:23:e3:88:a9:31:7e:31:a4:ba:
af:7e:27:8e:cc:69:e3:21:49:6d:a5:a4:78:ac:ce:3e:f4:ee:
99:06:67:f0:fb:fd:90:60:9a:1d:98:38:f9:4e:d2:6d:3b:94:
11:8b:d7:9b:4a:bb:2d:23:48:17:c9:3e:e0:ae:35:45:87:87:
ee:28:04:f9:a4:f0:0f:fc:b4:93:85:5e:6d:78:a1:66:e7:77:
98:7c:99:65:c8:a2:3c:ef:0b:a8:09:ca:a6:0e:14:d5:ad:38:
11:0d:55:53:da:cb:8e:6a:51:0e:b4:07:24:a8:04:8f:fe:e3:
e7:45:5f:02:87:fc:ed:bc:9e:90:6d:c5:d2:c3:10:26:01:d5:
25:51:ba:33:9d:bf:94:31:55:c2:6b:38:bc:27:aa:42:78:3c:
39:11:15:85:01:77:d4:a1:be:45:d1:3f:c4:a0:11:44:d0:9f:
4c:0f:5c:a6:2c:91:eb:6f:5c:df:43:07:cf:ea:12:0a:1b:e1:
9a:84:7d:ad:35:5d:67:0c:40:da:23:fc:3d:e1:45:55:73:b1:
91:d2:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:17 2025 by rpki-client