Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: gmrPi6gXsv5rbb5gKS+QIYw2Gk2BAASJoR/DHjp60ws=
Subject key identifier: 02:D7:4C:A5:0D:58:E9:ED:EF:9A:77:8C:1C:DD:F1:E5:2A:80:5F:A7
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0198D5833C162F6EEBD95058B43293FFD2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 15BC
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: qkeyIZMk60uNwwIn9C4o+9A99vDay4m7pY4Fmflfq/I=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3c:16:2f:6e:eb:d9:50:58:b4:32:93:ff:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=02d74ca50d58e9edef9a778c1cddf1e52a805fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:d5:18:1f:db:a2:39:e4:c4:89:bc:15:6f:
c5:7a:93:ce:27:ef:23:e7:4f:b0:88:3f:12:16:52:
6a:84:7d:96:4c:82:fe:37:67:6f:f6:24:16:30:66:
04:bf:df:a6:76:bb:fd:77:53:43:bf:5c:7e:d8:94:
9b:e3:44:8a:8a:c3:bd:11:f5:6a:2a:7d:fd:2a:81:
a2:0b:63:82:d7:d4:eb:2e:5c:a7:09:17:e3:ef:14:
39:f7:eb:fb:a2:cc:89:5f:56:c4:f8:8a:52:4c:8b:
03:14:5e:5d:eb:c1:7e:74:36:8f:7d:a4:c7:04:19:
e1:c5:b7:02:66:ef:18:f1:31:b4:e6:87:69:1b:1a:
c4:3a:97:7c:b0:12:61:1d:3f:39:52:3e:a0:9d:ef:
55:65:5b:16:86:cc:a3:d0:f5:0f:21:b7:3f:67:21:
6c:84:c3:4a:44:42:01:ae:35:14:33:ba:d9:e4:a1:
c2:22:68:a9:27:ca:53:1a:b7:6c:37:f9:2d:63:2d:
9c:95:4a:f6:bb:9f:1e:a1:a6:9a:18:7f:4c:42:9d:
26:7a:6c:dd:f2:80:20:7d:5f:6a:21:a3:d8:7e:81:
11:01:db:bd:66:0c:ab:80:5c:8b:61:cb:4b:04:13:
9a:90:a5:55:c8:4a:9f:ec:3b:8e:d2:1f:cc:02:e7:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:4C:A5:0D:58:E9:ED:EF:9A:77:8C:1C:DD:F1:E5:2A:80:5F:A7
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:a2:57:5c:c5:b4:4b:92:9d:d1:e2:17:75:51:61:fa:09:
42:43:67:e0:dc:c0:1c:4e:c1:35:ea:78:20:dc:dd:12:e1:cb:
09:9a:89:d0:45:20:55:54:15:09:18:15:76:70:37:c5:f8:89:
43:f7:cf:73:36:42:17:cf:92:ac:61:5c:11:24:f2:1c:e1:83:
3e:98:9b:f0:7e:4e:fe:71:53:d0:45:4a:44:64:02:75:c9:e5:
89:3b:43:7f:2d:a9:0f:86:16:70:5f:c4:66:4c:76:c7:fc:e9:
3a:44:fd:b2:32:f6:05:40:22:94:e6:86:b0:f4:04:3d:26:04:
ec:50:14:60:69:25:59:bc:5a:a0:f6:c1:bb:56:c8:7f:91:87:
4c:8c:27:e4:98:80:41:ac:69:23:d4:81:c4:b9:eb:9c:e2:68:
5e:52:59:9d:52:ca:27:37:45:ff:0b:ae:18:1c:1c:f7:a6:50:
04:ef:eb:29:f5:f6:c6:76:54:23:74:18:d4:02:29:22:b7:ed:
7f:3a:5a:d8:95:df:a8:e4:97:46:60:72:ae:06:b4:a8:fb:c6:
cb:50:d1:39:0e:b6:f2:15:93:34:d7:ba:20:67:63:45:9c:2c:
2c:b3:53:c1:90:c6:ab:67:d3:ff:42:02:64:1b:d8:59:b8:64:
f4:9f:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:45 2025 by rpki-client