Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: IouDX/Qv6RF1QBF3ILJeRyjtcK7F9JW4Yi0LLpKCsPA=
Subject key identifier: A7:B4:DB:DC:BD:91:6E:32:13:09:CE:15:14:B9:3D:57:EE:5F:12:32
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0199FC8F3B23C5CAB4C7F610DD2AF02B39F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0DA2
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=)
2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: io/Cjrk9Euhwf9qw+VdsALfuR227B3mfAhxUtN58Qww=)
4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3b:23:c5:ca:b4:c7:f6:10:dd:2a:f0:2b:39:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=a7b4dbdcbd916e321309ce1514b93d57ee5f1232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:3f:4e:34:88:be:c1:42:9c:dc:4d:46:4c:
5e:d2:7d:db:0f:06:92:f5:cf:ea:16:33:5f:5c:c0:
c9:13:0a:bc:51:5b:f8:e6:63:ca:60:f6:f9:36:22:
27:2e:5f:72:74:23:b2:98:67:52:f3:62:ec:1f:7b:
bb:c5:8c:5c:05:69:01:2a:da:f1:e8:e2:4a:41:3a:
64:61:22:2b:56:02:c7:01:fa:f8:49:d6:85:89:29:
be:10:cb:04:7b:8f:7a:ad:0a:ed:6d:8a:42:19:36:
d7:f8:4e:eb:2d:ae:50:c0:e0:06:af:92:b1:a4:4a:
56:2e:66:e4:0f:26:27:1f:f3:77:69:f1:86:68:e7:
64:52:74:4e:b5:d6:7d:c0:6a:23:6a:13:99:c1:5f:
fc:04:6f:78:46:35:03:81:c3:6f:24:b1:8d:0d:8a:
1b:17:69:08:05:af:f3:00:16:8a:52:4b:cd:a7:9a:
e6:24:7d:9a:94:51:14:49:a6:c4:2c:bd:81:fd:1b:
70:1b:c1:a9:8c:c9:9a:a8:51:92:f5:86:fe:c8:35:
2b:4e:94:fc:da:12:7d:a8:59:81:57:9a:d2:a5:e9:
81:50:6c:f6:17:0a:5a:c3:f5:44:4f:2f:23:7c:c6:
4e:f6:57:aa:c0:03:66:c0:15:f6:32:51:92:d3:b9:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:DB:DC:BD:91:6E:32:13:09:CE:15:14:B9:3D:57:EE:5F:12:32
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:21:8e:e9:be:59:28:94:60:53:17:e7:8e:82:85:94:bc:
5b:aa:f1:01:30:8a:d3:b2:75:17:18:bb:26:53:e3:10:68:cb:
d7:8c:ba:bb:d3:fc:b3:c7:2a:32:3c:61:dd:88:3d:ed:30:6a:
0e:10:39:6d:71:cf:8e:46:9d:14:01:e2:23:df:0c:b6:79:a0:
b5:9d:53:ef:6a:a2:f8:99:4b:e6:42:73:ed:20:57:26:21:25:
f0:62:ba:e5:89:0f:17:d8:c4:d1:48:ab:08:4c:1b:67:60:d8:
f9:ff:02:6c:aa:4f:78:ac:26:d9:37:9a:80:81:f3:05:e9:e3:
a9:94:b1:c1:71:fd:2d:f7:39:6c:b7:c4:85:bc:2a:cb:06:b8:
83:6d:89:5d:be:ed:47:b7:b6:0e:d4:52:71:c8:27:ff:0c:3d:
83:8a:4b:6f:63:a2:06:8e:5a:7f:c5:5b:f9:9a:a5:cf:ae:e0:
71:30:ab:5f:61:7c:65:1a:e1:1d:a5:50:2f:98:4e:3d:bb:96:
5a:c8:d8:06:9e:c1:9f:89:cc:25:fd:88:f6:04:c7:a8:f8:33:
51:a1:5f:11:26:20:0c:4c:bc:2a:6f:a2:7f:f0:96:20:cb:cd:
b3:88:42:e7:50:96:a0:d9:88:ac:49:de:39:1c:d9:85:39:af:
15:1c:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:19 2025 by rpki-client