Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: yTF2TzWdWVgiEbJmX7LMbY2q4MKKi8AppHQPTd3fLVw=
Subject key identifier: EF:DF:55:B6:3D:69:32:6C:CD:1D:0D:80:3D:33:97:CD:D6:DE:4D:FC
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 0198D4743507902CE5D0683D1F5D7BC5CD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:04:02 +0000
Manifest this update: Sat 23 Aug 2025 01:04:02 +0000
Manifest next update: Sun 24 Aug 2025 01:04:02 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: h06g4f4bS6FoVFRpF3Sfa24P+5asRoU8L6qqtutGMAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:35:07:90:2c:e5:d0:68:3d:1f:5d:7b:c5:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Aug 23 01:04:02 2025 GMT
Not After : Aug 24 01:04:02 2025 GMT
Subject: CN=efdf55b63d69326ccd1d0d803d3397cdd6de4dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:bb:fc:95:b2:d4:7f:ff:d1:59:c6:a0:c3:
b5:f9:f4:24:ee:c7:b0:cd:e3:90:eb:8a:e8:a0:56:
fa:72:cb:ea:f1:dd:ff:e3:a9:7d:87:f2:9c:fe:6c:
3b:d5:ae:e6:24:24:21:31:a2:e0:12:b7:29:20:54:
78:29:64:35:46:5e:f0:9e:5f:7b:5a:d9:4e:cf:ab:
93:d6:a5:fa:c4:8a:d6:3f:db:46:a6:13:25:52:20:
15:e0:6a:f6:0b:99:62:74:00:36:c2:6c:77:9b:f2:
ac:ef:85:88:b7:9c:08:84:f6:eb:e0:4d:c2:d5:de:
33:1b:03:23:11:96:04:a0:77:67:48:18:7e:4d:3f:
2f:71:8b:d0:3e:a6:9d:b8:b4:ed:e9:b7:eb:c3:f2:
8e:fc:b1:a3:55:64:89:e8:a5:b8:2b:e9:a4:f8:f1:
cc:0e:02:59:e4:1d:02:2d:04:24:c6:a0:9c:d5:9e:
74:d3:61:af:f1:ad:08:77:82:92:4c:92:e0:3c:df:
84:da:37:12:f7:6f:8e:29:44:80:cd:f7:f1:b3:20:
ed:66:3a:6d:3d:14:bc:cc:ab:80:dc:64:56:50:38:
03:a6:a3:5f:a4:48:2e:0c:b2:46:cc:e3:77:0e:78:
ca:f2:82:0d:e2:65:b0:bb:86:b8:80:70:5f:fc:bb:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:55:B6:3D:69:32:6C:CD:1D:0D:80:3D:33:97:CD:D6:DE:4D:FC
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7f:6a:60:91:43:ac:39:d5:9a:9b:e2:94:c8:dc:ee:1c:e8:
0b:2b:1c:fc:fb:f0:6c:58:2b:25:b3:7d:bd:2d:09:12:3e:fc:
66:a1:c2:e4:f7:15:cf:3e:e1:63:a3:5b:cc:74:94:e5:e9:8c:
e2:56:c7:9c:ce:12:3d:d1:ca:d3:3c:88:1c:f5:e7:b1:33:7c:
a8:c2:1d:32:3b:1b:14:c3:13:48:13:77:a6:74:c2:9d:28:04:
e5:89:b5:bf:37:c6:66:f5:3d:f1:03:6a:45:f5:9d:75:12:66:
fc:4b:fc:ea:8f:c1:67:aa:fe:24:11:ae:bc:73:4e:8c:1e:75:
e0:22:21:68:b0:bb:d2:c5:95:4e:0a:c2:b9:3d:47:cb:df:84:
f2:c4:76:47:d3:aa:fc:50:c1:8c:31:73:54:5d:20:0e:11:54:
08:9e:88:63:0b:a1:a1:77:3e:a5:5f:64:cb:20:e4:a7:df:fe:
d7:01:c7:54:76:ab:ec:cd:ab:85:ec:36:f2:99:27:25:aa:da:
72:2a:0f:ac:c9:bf:04:3a:4d:7f:21:13:83:ab:d4:33:6d:00:
24:1c:09:37:85:bc:72:8d:5e:8c:31:60:c6:e5:c1:74:73:94:
37:c8:c6:69:12:31:28:7f:d3:54:a2:0f:68:7f:cd:f7:51:3a:
b4:9f:bb:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDUHkCzl0Gg9H117xc18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3
MWRjOTMwHhcNMjUwODIzMDEwNDAyWhcNMjUwODI0MDEwNDAyWjAzMTEwLwYDVQQD
EyhlZmRmNTViNjNkNjkzMjZjY2QxZDBkODAzZDMzOTdjZGQ2ZGU0ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPy7/JWy1H//0VnGoMO1+fQk7sew
zeOQ64rooFb6csvq8d3/46l9h/Kc/mw71a7mJCQhMaLgErcpIFR4KWQ1Rl7wnl97
WtlOz6uT1qX6xIrWP9tGphMlUiAV4Gr2C5lidAA2wmx3m/Ks74WIt5wIhPbr4E3C
1d4zGwMjEZYEoHdnSBh+TT8vcYvQPqaduLTt6bfrw/KO/LGjVWSJ6KW4K+mk+PHM
DgJZ5B0CLQQkxqCc1Z5002Gv8a0Id4KSTJLgPN+E2jcS92+OKUSAzffxsyDtZjpt
PRS8zKuA3GRWUDgDpqNfpEguDLJGzON3DnjK8oIN4mWwu4a4gHBf/LutrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/fVbY9aTJszR0NgD0zl83W3k38MB8GA1UdIwQY
MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt
MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh
LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH9qYJFD
rDnVmpvilMjc7hzoCysc/PvwbFgrJbN9vS0JEj78ZqHC5PcVzz7hY6NbzHSU5emM
4lbHnM4SPdHK0zyIHPXnsTN8qMIdMjsbFMMTSBN3pnTCnSgE5Ym1vzfGZvU98QNq
RfWddRJm/Ev86o/BZ6r+JBGuvHNOjB514CIhaLC70sWVTgrCuT1Hy9+E8sR2R9Oq
/FDBjDFzVF0gDhFUCJ6IYwuhoXc+pV9kyyDkp9/+1wHHVHar7M2rhew28pknJara
cioPrMm/BDpNfyETg6vUM20AJBwJN4W8co1ejDFgxuXBdHOUN8jGaRIxKH/TVKIP
aH/N91E6tJ+7rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:47 2025 by rpki-client