Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: psiqpzV8lXVClJjN7qVSg8eFBE963x/jg3EwqIAamqU=
Subject key identifier: 55:9D:56:19:5B:1F:1D:5F:9E:3A:6C:9D:7B:ED:7F:86:53:DD:B3:D9
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0199FD6ACE499A27E0468058DC803564EEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: 8J/R8hQTgc3TyjGm3THMmcxWpvp4PYOcujdVTclQisI=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ce:49:9a:27:e0:46:80:58:dc:80:35:64:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=559d56195b1f1d5f9e3a6c9d7bed7f8653ddb3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:d4:19:e6:c6:ff:2c:7d:fe:3b:0d:5f:64:
e9:c2:1b:fb:b3:da:71:74:1f:89:d1:e9:14:0e:5a:
e7:fa:93:5a:b4:da:64:41:d9:86:0f:cf:2c:0c:cf:
be:d9:eb:37:a4:84:53:60:c7:a7:21:cf:cb:b3:f3:
0a:e3:50:11:e9:79:3e:56:08:ff:1e:8d:6b:a4:18:
12:66:0e:fa:34:48:a3:c9:e5:de:55:26:b7:cb:39:
47:f0:07:a0:4e:73:4f:c9:0d:81:3f:4f:25:79:71:
17:23:9e:41:24:39:88:08:d4:6f:07:e5:d2:a7:56:
2f:32:46:9a:95:11:69:ef:35:27:62:38:58:b3:53:
fc:54:a3:4f:35:78:1b:66:67:b5:d1:8f:b1:4d:be:
8e:6f:ed:04:81:28:9a:a5:cd:e8:87:71:bb:35:62:
42:79:3b:f3:72:d3:d4:c4:31:80:38:d1:be:1b:42:
b8:77:65:5d:f6:d1:24:de:a2:17:21:40:d4:95:4e:
87:1e:ae:ce:12:a7:ab:cd:e4:05:23:26:05:ce:7e:
74:76:f8:34:db:bd:57:f9:1d:47:20:2b:f1:e5:f2:
11:53:ee:34:17:d0:c8:5f:85:da:72:db:3b:1e:ba:
f6:fb:33:00:3b:86:34:ea:da:b9:d0:a8:e0:73:f3:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9D:56:19:5B:1F:1D:5F:9E:3A:6C:9D:7B:ED:7F:86:53:DD:B3:D9
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dc:48:ca:60:a3:aa:b3:31:c5:5e:c2:64:d9:e9:e7:38:80:
41:6b:2a:f4:c4:32:85:f0:f0:1e:5b:57:d1:47:6f:8e:07:f5:
2a:be:a1:f8:d3:ff:99:72:33:a5:f1:e3:1f:e2:13:b8:1d:57:
d4:94:44:86:4a:78:4c:44:79:cf:73:3f:94:22:e0:b8:33:b2:
65:c7:43:be:4a:08:dc:85:10:8e:68:19:66:56:52:71:89:c0:
6f:1b:40:da:dc:99:fa:c5:63:13:18:f7:01:27:bc:36:69:22:
31:90:4f:66:19:a9:63:cb:d3:7f:91:b2:ad:46:65:b6:12:9c:
f0:7e:38:be:0e:30:0b:93:4a:b7:35:a2:14:13:df:18:be:df:
49:be:ac:df:74:43:79:a0:09:06:a4:0b:d7:f6:6b:2a:62:ca:
76:ec:b0:ad:30:b8:d9:5f:10:e1:81:b1:2a:30:d7:0d:da:04:
c6:47:fb:11:3b:3f:fa:b2:27:17:b7:c0:29:12:0a:d3:84:de:
76:7f:e5:4f:29:6a:9d:e3:fe:85:9d:5f:52:be:29:0d:89:eb:
14:d0:0f:61:60:25:c6:05:e3:f8:ca:28:d9:71:fa:3e:ae:82:
54:a5:93:f7:c0:97:12:1b:98:7e:44:52:11:42:c8:58:25:3c:
11:a5:b3:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9as5JmifgRoBY3IA1ZO6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjUxMDE5MTcwMDU5WhcNMjUxMDIwMTcwMDU5WjAzMTEwLwYDVQQD
Eyg1NTlkNTYxOTViMWYxZDVmOWUzYTZjOWQ3YmVkN2Y4NjUzZGRiM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IPUGebG/yx9/jsNX2Tpwhv7s9px
dB+J0ekUDlrn+pNatNpkQdmGD88sDM++2es3pIRTYMenIc/Ls/MK41AR6Xk+Vgj/
Ho1rpBgSZg76NEijyeXeVSa3yzlH8AegTnNPyQ2BP08leXEXI55BJDmICNRvB+XS
p1YvMkaalRFp7zUnYjhYs1P8VKNPNXgbZme10Y+xTb6Ob+0EgSiapc3oh3G7NWJC
eTvzctPUxDGAONG+G0K4d2Vd9tEk3qIXIUDUlU6HHq7OEqerzeQFIyYFzn50dvg0
271X+R1HICvx5fIRU+40F9DIX4Xacts7Hrr2+zMAO4Y06tq50Kjgc/PpeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWdVhlbHx1fnjpsnXvtf4ZT3bPZMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtxIymCj
qrMxxV7CZNnp5ziAQWsq9MQyhfDwHltX0Udvjgf1Kr6h+NP/mXIzpfHjH+ITuB1X
1JREhkp4TER5z3M/lCLguDOyZcdDvkoI3IUQjmgZZlZScYnAbxtA2tyZ+sVjExj3
ASe8NmkiMZBPZhmpY8vTf5GyrUZlthKc8H44vg4wC5NKtzWiFBPfGL7fSb6s33RD
eaAJBqQL1/ZrKmLKduywrTC42V8Q4YGxKjDXDdoExkf7ETs/+rInF7fAKRIK04Te
dn/lTylqneP+hZ1fUr4pDYnrFNAPYWAlxgXj+Moo2XH6Pq6CVKWT98CXEhuYfkRS
EULIWCU8EaWzuw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:45:00 2025 by rpki-client