Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: 7Ajnclf++hcGjX9JN2Czo3tbm6OHBD0QEcNihUHYolM=
Subject key identifier: B3:2A:7F:9D:A7:8F:F8:EE:C2:E1:1E:CE:AB:D3:27:10:7C:43:B0:3A
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0199FF5932514428F1A62B8AB3F143806A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 02:00:59 +0000
Manifest this update: Mon 20 Oct 2025 02:00:59 +0000
Manifest next update: Tue 21 Oct 2025 02:00:59 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: zx8utu4ndEaOjp+UH3vTSSyffIugQxvr4VrMz1k17sw=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:32:51:44:28:f1:a6:2b:8a:b3:f1:43:80:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Oct 20 02:00:59 2025 GMT
Not After : Oct 21 02:00:59 2025 GMT
Subject: CN=b32a7f9da78ff8eec2e11eceabd327107c43b03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:6d:e9:51:ce:30:95:51:38:a6:af:7d:0a:
8e:3a:65:82:31:dc:60:de:51:c0:21:a5:35:2b:b4:
24:c3:72:ab:b6:e3:8a:64:9f:54:d1:bf:12:d0:02:
5a:35:48:80:dc:5b:49:78:8f:d9:95:7a:a3:f4:a3:
8b:80:d4:30:fe:b3:d9:6f:b5:86:ca:1f:80:5e:7e:
7c:85:9c:bb:1d:45:ea:74:53:e2:5f:9d:65:73:99:
d8:53:a4:04:6d:47:c2:5c:4c:c4:44:9c:64:92:94:
c1:b1:b6:d7:2e:b2:5a:4b:f3:86:28:2f:4e:00:bc:
96:c2:ca:2b:ac:a5:a2:a6:18:c1:92:68:c4:67:38:
23:44:85:50:54:58:ce:06:a4:ce:7f:7e:9e:0d:75:
54:f2:e3:2d:ef:d4:87:27:12:54:73:9b:7f:31:df:
62:3f:a0:7b:c1:29:74:18:f9:47:1b:ec:a0:f9:de:
12:db:96:fd:84:5c:96:fb:9c:6b:47:da:94:c4:f7:
f0:cd:d6:8b:3f:6d:6d:98:9b:ff:88:e1:7b:ca:83:
bc:50:cf:c4:4d:d3:ce:2a:f3:8a:1c:14:5b:64:25:
c8:8d:f9:99:e2:00:df:67:42:ab:99:29:e4:2f:8a:
99:34:b0:4f:64:a6:2e:20:30:65:7f:da:15:89:a9:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:7F:9D:A7:8F:F8:EE:C2:E1:1E:CE:AB:D3:27:10:7C:43:B0:3A
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:e3:02:b5:3c:41:40:c6:f1:d3:d9:f6:9f:e6:b1:93:ca:b0:
bb:77:fb:3d:c5:f4:18:2c:87:61:c1:af:0b:d3:95:ff:bc:ba:
05:02:0c:dc:b1:93:ec:43:3d:da:d5:fb:ff:95:90:c5:52:be:
4e:d8:37:03:96:dd:5b:23:23:57:c8:18:22:bf:02:c9:1f:49:
44:c8:af:8e:61:85:46:72:8b:2b:91:f3:62:e6:39:91:4f:4f:
9d:c4:4f:f1:84:eb:24:be:9e:17:21:fa:bf:24:62:28:50:e7:
4c:25:91:1b:ba:d2:32:93:bb:8a:c6:b4:0d:62:ef:76:6c:a4:
84:9f:a3:0c:cc:7d:c7:d1:de:c4:6e:c7:3c:4e:17:2f:d9:b1:
e7:e7:4c:73:2e:40:c4:3a:c5:de:a4:5e:02:a7:5d:aa:aa:6a:
ef:d3:9b:da:5d:92:f3:62:68:15:88:ac:fe:1f:4f:47:13:8a:
09:1e:37:06:10:66:0a:a4:59:78:6c:bf:8c:7c:fa:b5:1e:c1:
03:7b:86:e9:0b:66:b8:3e:7c:83:5f:8b:de:6a:69:d8:d2:b8:
66:40:49:d2:c7:2a:e4:89:a4:2b:49:0a:ff:f1:82:43:61:fc:
9a:7d:f8:0f:54:f6:f0:1a:e7:11:32:a3:09:04:03:38:e5:1b:
ff:77:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:57 2025 by rpki-client