Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: xs1arODQvRcvThA0OsgE83Op42lkZSDSXHkRaWdLCms=
Subject key identifier: 6B:A3:87:66:5B:77:4F:78:A7:34:DF:E0:E1:37:F5:AA:0C:3C:EC:D3
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 0199FBEABDD31D46B1ABA98DE232EB731294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: whDfoiXZNwoUnFWbg0zmojBsd2f5z6PIqytoWVNAYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bd:d3:1d:46:b1:ab:a9:8d:e2:32:eb:73:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=6ba387665b774f78a734dfe0e137f5aa0c3cecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:2e:fe:3a:fc:d2:81:6e:b2:25:d5:ce:a0:
d7:66:59:e7:3b:cc:20:c3:06:0d:00:56:92:59:d5:
5e:c7:07:c5:db:1f:3f:ff:8b:7a:42:0b:12:05:e1:
de:f8:59:eb:0a:da:96:25:41:28:bf:89:4e:f5:51:
ba:57:3b:db:df:a4:8d:4c:58:b6:b5:de:95:69:9f:
b9:cb:95:1f:26:4d:a0:cd:17:12:a7:28:c7:1b:cc:
92:5d:e6:f5:63:36:ca:44:df:30:e4:db:24:ed:26:
2f:2f:49:a3:35:03:39:3b:5f:80:39:22:e4:3a:e6:
83:36:c7:4c:c8:99:36:21:b4:19:c0:7e:f5:a3:cb:
8f:04:5f:5f:d7:15:bf:be:32:f3:1d:c5:b3:e0:46:
65:88:35:29:84:39:fb:51:eb:11:87:bb:a3:02:30:
30:53:32:2f:f7:c2:e2:95:3b:74:d0:0c:5c:b3:1c:
5a:ef:98:aa:ab:62:af:ab:5d:15:00:5a:cb:db:37:
fd:ef:5a:4e:62:10:7b:ce:60:1c:d7:05:28:14:22:
9f:f9:f2:cd:01:3a:98:b8:7e:10:4a:f6:a8:77:0b:
e5:81:96:fa:a1:0e:0c:de:25:0b:09:aa:4e:4d:0e:
e7:a2:33:7f:6b:d3:fc:f6:0d:6f:04:68:1f:95:1f:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:87:66:5B:77:4F:78:A7:34:DF:E0:E1:37:F5:AA:0C:3C:EC:D3
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:05:a4:6d:19:82:f9:5c:b9:98:3a:56:c6:53:72:6b:2f:
04:33:71:ae:cb:20:6b:02:87:79:ed:ee:7f:06:06:98:39:3e:
79:79:cc:a5:ef:02:8e:aa:1c:77:4c:33:c6:17:12:b0:75:1b:
97:fc:65:24:c1:78:3d:25:d6:bd:d3:12:2b:af:ba:f9:2c:e8:
18:a1:b3:46:f2:ca:c0:e7:42:30:33:e4:7e:4a:12:2b:83:ec:
d3:22:eb:75:f1:b0:a9:f1:4f:67:f3:0c:72:34:c8:af:f7:f6:
e6:0e:4c:db:59:e8:ea:d3:37:d1:ed:6a:d8:f6:34:da:a2:9d:
95:7e:83:1f:90:0b:a7:3c:3f:09:29:89:af:9c:6a:8e:36:dd:
07:16:30:de:6b:2b:32:b3:8a:33:03:31:2a:2f:5c:2f:08:45:
ff:0c:f7:3d:2b:5c:b1:8c:4e:4d:48:15:35:7d:b0:88:0a:0b:
4d:7d:35:49:42:d3:cb:d2:bd:a0:9b:9b:eb:d6:52:1b:b2:06:
5f:01:1b:37:03:c8:95:2b:56:37:c6:83:d9:1c:44:0c:c0:9c:
14:fa:5d:f0:a1:d0:89:f9:c5:83:19:cb:b6:42:e4:0f:82:94:
0b:cc:ef:4c:99:79:ca:ee:9d:d5:1a:ff:5c:d0:a9:46:87:ed:
a6:9b:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:36 2025 by rpki-client