Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: +I69bgIpFssvr+R04TILFGNYoPmO3xtaD0jaHLFSsJM=
Subject key identifier: EC:88:65:9E:52:93:59:15:B4:AF:05:0F:E9:82:B8:04:44:E5:FD:86
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0199FCFDA59EFE0016C6543CACA3D8BB8719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1655
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: ZqjfqmRx/aDQ8PB6tZJZ62yGjZyTqTx/EiTzJi97fQk=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a5:9e:fe:00:16:c6:54:3c:ac:a3:d8:bb:87:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=ec88659e52935915b4af050fe982b80444e5fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:88:ad:8e:0d:d3:84:92:e0:6b:3c:1a:56:
a3:f2:43:1f:51:ad:b3:3c:f9:2a:6e:67:88:ac:36:
b1:88:f4:65:49:cf:fe:52:87:d5:71:b7:3f:30:8b:
f2:66:62:78:0a:01:25:66:bd:49:3e:00:9a:f5:98:
48:89:92:4e:01:45:d4:2b:99:16:e5:c6:33:85:d5:
7e:80:eb:36:ef:35:d0:d3:15:d5:1f:49:b9:2e:99:
e5:97:bf:f9:37:b4:0d:9b:f5:d3:15:b5:f1:9e:5d:
84:a4:1f:20:8a:47:f9:46:2d:e7:16:ed:fc:d4:5c:
bc:d4:0c:15:c0:65:a6:b6:b5:5d:8d:f0:99:de:3c:
3d:a1:6d:34:cb:88:b3:d4:1e:6b:42:03:c6:27:e4:
7a:8a:3e:c9:1a:76:28:61:3c:34:9d:58:c1:27:48:
ec:ee:90:60:2c:88:9d:32:7c:2e:0a:ed:1b:be:fc:
a5:27:ac:a6:69:93:19:c9:b8:73:30:a5:7b:c5:e2:
c5:fd:0a:30:47:16:75:c0:c1:6c:73:7b:7f:57:64:
04:78:88:e0:05:fd:e1:07:73:65:08:7a:18:46:87:
83:f2:92:f0:8c:ec:bd:dd:ab:82:42:c2:e8:dc:38:
4f:d8:bb:0e:60:66:6f:c4:60:8a:01:03:d2:a6:31:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:65:9E:52:93:59:15:B4:AF:05:0F:E9:82:B8:04:44:E5:FD:86
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c3:f8:64:5d:4d:11:9f:41:af:70:c0:6b:44:63:87:e6:07:
38:20:18:56:41:21:a5:55:a3:63:43:94:7a:fb:33:0d:9a:94:
6f:eb:6e:47:62:5d:90:52:d7:0f:68:7f:f8:34:1a:03:96:55:
d5:05:47:cc:45:c5:08:95:52:4a:69:61:f6:f9:28:ba:50:e7:
18:1c:c2:08:dd:02:b0:72:20:3f:9c:a2:7b:a9:e6:6b:f1:5d:
ac:52:91:c9:ef:df:ef:e4:f8:d8:8c:ab:5c:fc:fe:82:c8:15:
58:3e:6d:9a:59:7e:50:e7:13:2f:e5:21:e5:55:64:5e:cd:4b:
22:57:4e:dc:55:24:7a:de:2c:9a:14:8b:37:b6:3c:f9:ce:60:
2a:38:ca:8c:72:36:46:a4:b8:d6:27:c2:cf:eb:dd:b5:9c:24:
c9:bc:ac:1d:76:ba:52:76:96:c6:33:34:57:cd:67:a2:8a:a0:
c3:c1:4d:53:0d:83:42:2e:f1:af:6c:36:86:30:4b:c8:ff:93:
88:39:09:67:e8:28:c5:40:f9:17:c7:1c:dd:9b:52:dd:13:6d:
e4:8f:da:70:d8:54:92:e5:03:28:1b:47:44:d2:40:e2:c5:c9:
14:4f:9e:b2:e2:78:d0:60:df:6a:a8:55:d2:cb:cf:d2:61:6e:
12:af:6e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/aWe/gAWxlQ8rKPYu4cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzQzM2ZhZmE1OWYwZDUxMmEyYmViYjA5N2U2OTQ2M2Nj
MDY3NTkwHhcNMjUxMDE5MTUwMTQ1WhcNMjUxMDIwMTUwMTQ1WjAzMTEwLwYDVQQD
EyhlYzg4NjU5ZTUyOTM1OTE1YjRhZjA1MGZlOTgyYjgwNDQ0ZTVmZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqIrY4N04SS4Gs8Glaj8kMfUa2z
PPkqbmeIrDaxiPRlSc/+UofVcbc/MIvyZmJ4CgElZr1JPgCa9ZhIiZJOAUXUK5kW
5cYzhdV+gOs27zXQ0xXVH0m5Lpnll7/5N7QNm/XTFbXxnl2EpB8gikf5Ri3nFu38
1Fy81AwVwGWmtrVdjfCZ3jw9oW00y4iz1B5rQgPGJ+R6ij7JGnYoYTw0nVjBJ0js
7pBgLIidMnwuCu0bvvylJ6ymaZMZybhzMKV7xeLF/QowRxZ1wMFsc3t/V2QEeIjg
Bf3hB3NlCHoYRoeD8pLwjOy93auCQsLo3DhP2LsOYGZvxGCKAQPSpjHodwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyIZZ5Sk1kVtK8FD+mCuARE5f2GMB8GA1UdIwQY
MBaAFBx0M/r6WfDVEqK+uwl+aUY8wGdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0Nzkt
MTJmNDFhMGNjMGMxLzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zOWE1YjUtM2M1MS00NmUyLTk0NzktMTJmNDFhMGNjMGMx
LzEvSEhRei12cFo4TlVTb3I2N0NYNXBSanpBWjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMP4ZF1N
EZ9Br3DAa0Rjh+YHOCAYVkEhpVWjY0OUevszDZqUb+tuR2JdkFLXD2h/+DQaA5ZV
1QVHzEXFCJVSSmlh9vkoulDnGBzCCN0CsHIgP5yie6nma/FdrFKRye/f7+T42Iyr
XPz+gsgVWD5tmll+UOcTL+Uh5VVkXs1LIldO3FUket4smhSLN7Y8+c5gKjjKjHI2
RqS41ifCz+vdtZwkybysHXa6UnaWxjM0V81nooqgw8FNUw2DQi7xr2w2hjBLyP+T
iDkJZ+goxUD5F8cc3ZtS3RNt5I/acNhUkuUDKBtHRNJA4sXJFE+esuJ40GDfaqhV
0svP0mFuEq9uuA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:41 2025 by rpki-client