
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: CVGXWuPlw3AAts0S+LG443BwbO36nSkUxx/Da+P6RJk=
Subject key identifier: FE:C4:46:D3:B8:31:BC:BA:D0:80:DE:74:99:59:AB:6E:47:F9:4B:20
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 0199FC58315C6CD730490F3F67F6D37A580A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: wJDpkBDPUJsW3Fq4anxOj4iytN9sDP1tGu9OMgJJfZc=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:5c:6c:d7:30:49:0f:3f:67:f6:d3:7a:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=fec446d3b831bcbad080de749959ab6e47f94b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:8f:b2:5d:85:5f:1f:ab:bb:08:59:73:90:
0e:42:af:dc:70:5e:95:ee:52:11:7d:1a:d0:28:94:
a3:a0:91:db:69:ac:70:92:94:05:af:4f:d9:92:1f:
51:48:17:b2:5f:e3:46:3d:c3:d2:2a:28:5c:47:63:
86:f3:48:4a:67:97:f2:d6:a9:86:35:98:54:8b:89:
8e:84:9d:c1:6c:8d:71:10:d3:a8:c4:00:f9:1d:01:
c2:56:2a:81:bb:12:c0:67:84:f0:8a:92:a1:c2:f5:
2c:7f:72:88:a7:0e:67:fc:57:ad:97:9f:af:91:71:
de:a8:4a:6a:2a:76:2a:5c:ff:ec:81:c9:5c:d3:05:
8d:43:fe:9e:ab:4a:45:dd:33:c6:61:c8:ae:3c:fd:
bb:b1:66:6f:b9:1c:62:bc:20:d0:d9:dd:3e:ff:c6:
19:84:96:40:a9:1f:05:63:3c:6c:cf:52:a7:f9:39:
8b:af:cb:99:fb:79:42:d8:7a:ac:e4:78:28:19:90:
1d:75:56:8d:ee:73:d3:4c:62:dd:21:03:b6:1a:ea:
af:78:dd:87:4c:e2:79:8e:43:10:e7:69:5a:1c:25:
e4:89:d6:ff:2a:48:d9:b4:63:e4:35:91:5b:e5:4f:
2a:b0:8e:51:87:52:ad:88:54:3b:12:f6:4f:19:ff:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:46:D3:B8:31:BC:BA:D0:80:DE:74:99:59:AB:6E:47:F9:4B:20
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:29:7a:59:01:81:ac:03:ad:23:06:7a:e5:a0:a2:51:b8:
9c:f2:69:c1:af:bb:7f:c1:68:e9:54:25:5e:85:8b:d3:3e:0e:
47:73:4e:57:20:f0:4e:d8:0e:a3:2a:b9:e4:73:2f:24:c3:bb:
11:29:62:50:d4:12:b6:ef:ac:75:a4:c6:88:90:7e:89:01:97:
4c:c9:06:71:1d:ad:ef:88:1c:4d:30:2f:dc:9a:a7:dc:75:8e:
7b:31:93:16:13:a1:16:22:f8:0e:d1:dc:a7:24:d2:86:e7:9e:
2f:c4:37:f5:f9:23:87:ab:22:4f:ef:93:08:24:bd:1d:1c:9c:
42:b1:f2:b8:ab:96:6c:5d:b0:6c:4c:e0:63:0b:77:c1:82:3f:
1b:97:c9:05:0a:a7:b9:28:0a:b4:a8:a2:6d:a7:f1:48:0c:c4:
49:ee:ae:31:e1:c6:7a:fe:51:19:b9:a4:09:9a:22:64:09:9c:
ab:02:26:e4:a9:45:b1:e1:b6:18:7f:34:b6:d2:c8:3f:ad:e8:
fc:0c:4d:77:59:ac:be:92:ac:59:f8:f2:4d:05:c7:8d:fd:86:
9b:6c:ff:0e:1a:59:23:f9:aa:ce:07:02:28:01:f8:36:51:35:
da:ea:13:29:e5:07:c8:0a:e0:a9:09:eb:aa:d6:5b:36:63:58:
a6:f6:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:01 2025 by rpki-client