Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: yQJ5emMlctfskEgPlo6UBsEp/v36W4AWrBYJswdiDaI=
Subject key identifier: 63:0C:C1:78:DE:C0:65:7C:F6:CA:1D:09:2C:C9:5B:BE:66:2B:A7:35
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0198D705D82734C4B9DAF4582A5727196ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0D0A
Signing time: Sat 23 Aug 2025 13:02:21 +0000
Manifest this update: Sat 23 Aug 2025 13:02:21 +0000
Manifest next update: Sun 24 Aug 2025 13:02:21 +0000
Files and hashes: 1: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (hash: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=)
2: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
3: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: YpmHOqOnqRUPFqhRjfoU2jFDJMD3qUy5AqZhsJqxg6Y=)
4: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d8:27:34:c4:b9:da:f4:58:2a:57:27:19:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Aug 23 13:02:21 2025 GMT
Not After : Aug 24 13:02:21 2025 GMT
Subject: CN=630cc178dec0657cf6ca1d092cc95bbe662ba735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:10:a6:03:0c:ae:22:8d:64:b8:88:8a:82:
ab:b9:d9:d2:8d:c4:9c:e1:12:a3:7c:ea:07:75:1e:
b6:6d:7e:4b:31:68:b6:d7:a6:97:5e:1a:62:7d:db:
c9:73:fc:42:e4:73:45:29:0d:05:72:52:e4:d8:1d:
6c:14:3a:27:71:02:bf:6c:22:1b:61:b0:16:89:76:
32:45:f5:98:87:a1:13:e9:ee:26:ed:d6:16:56:d7:
d9:0e:74:a6:1c:55:eb:1f:55:ea:c6:d8:34:27:b2:
f3:e5:5c:56:8f:dc:e6:60:cc:f1:68:54:9a:da:7c:
1b:2d:21:c1:25:39:4f:e2:7e:43:f2:63:2d:a7:61:
d6:0b:e3:f1:14:d9:9e:00:5c:03:d0:30:3c:a5:56:
dc:d1:7f:8d:03:1c:11:43:51:e2:9e:1e:89:9f:6b:
e3:64:7b:98:17:22:4a:d2:6f:54:af:e2:69:f2:65:
73:f5:57:45:23:e6:61:25:0a:6f:33:0b:e9:e3:1a:
4b:41:e1:ee:6d:ea:d6:a1:d4:a2:d2:1e:41:fc:09:
6d:09:cb:ae:e6:6e:18:db:94:a4:11:19:da:1f:a2:
fa:05:a7:0c:2b:71:29:d5:fc:da:9e:29:04:27:48:
24:e5:af:c7:67:65:39:64:58:ad:b5:8e:e0:58:ff:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0C:C1:78:DE:C0:65:7C:F6:CA:1D:09:2C:C9:5B:BE:66:2B:A7:35
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d5:6e:ae:24:67:5a:90:1b:1f:2a:2e:e7:d3:3f:20:6c:78:
a5:da:f0:6f:11:16:64:fd:95:c0:b3:95:29:14:a5:e8:4f:45:
19:44:e4:94:56:36:4d:c7:75:43:2b:7a:23:d8:9e:7e:18:9e:
77:7d:9e:08:79:9e:83:0e:6c:02:83:42:ca:8d:79:32:cb:6a:
13:9e:0c:a1:41:45:e4:ff:51:48:1b:65:e5:41:5c:4a:27:6a:
1a:b0:5a:83:a4:cf:7c:7c:2e:54:0c:a8:91:ff:5d:af:8e:d9:
1e:84:eb:d5:05:44:2d:f0:c0:88:e8:a8:30:b9:1e:4c:cd:fe:
b6:9a:71:17:7b:1f:c5:58:70:cd:cb:c7:d4:02:61:b9:b1:12:
ed:fe:29:99:a0:a0:92:08:e9:cb:af:b0:39:fe:45:d2:40:27:
3a:1c:fc:32:b4:ae:9e:7b:8a:99:a8:39:54:50:6e:2b:13:48:
c9:28:8b:0f:d5:66:1e:05:56:72:ad:96:41:af:7a:ab:58:23:
09:11:52:47:34:4f:07:cf:59:ac:7d:9f:b3:4c:21:54:b4:09:
5a:56:bc:cf:27:d4:be:d9:da:9e:2e:c2:5e:a0:bc:be:92:61:
fc:1b:3f:79:08:b0:80:35:c1:fc:59:6c:35:a0:5f:bc:57:6b:
16:5b:fb:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBdgnNMS52vRYKlcnGW7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz
OTQ1NTEwHhcNMjUwODIzMTMwMjIxWhcNMjUwODI0MTMwMjIxWjAzMTEwLwYDVQQD
Eyg2MzBjYzE3OGRlYzA2NTdjZjZjYTFkMDkyY2M5NWJiZTY2MmJhNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1QQpgMMriKNZLiIioKrudnSjcSc
4RKjfOoHdR62bX5LMWi216aXXhpifdvJc/xC5HNFKQ0FclLk2B1sFDoncQK/bCIb
YbAWiXYyRfWYh6ET6e4m7dYWVtfZDnSmHFXrH1Xqxtg0J7Lz5VxWj9zmYMzxaFSa
2nwbLSHBJTlP4n5D8mMtp2HWC+PxFNmeAFwD0DA8pVbc0X+NAxwRQ1Hinh6Jn2vj
ZHuYFyJK0m9Ur+Jp8mVz9VdFI+ZhJQpvMwvp4xpLQeHuberWodSi0h5B/AltCcuu
5m4Y25SkERnaH6L6BacMK3Ep1fzanikEJ0gk5a/HZ2U5ZFittY7gWP9NWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMMwXjewGV89sodCSzJW75mK6c1MB8GA1UdIwQY
MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt
ODQxOGE5NmY2Nzk1LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1
LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdVuriRn
WpAbHyou59M/IGx4pdrwbxEWZP2VwLOVKRSl6E9FGUTklFY2Tcd1Qyt6I9iefhie
d32eCHmegw5sAoNCyo15MstqE54MoUFF5P9RSBtl5UFcSidqGrBag6TPfHwuVAyo
kf9dr47ZHoTr1QVELfDAiOioMLkeTM3+tppxF3sfxVhwzcvH1AJhubES7f4pmaCg
kgjpy6+wOf5F0kAnOhz8MrSunnuKmag5VFBuKxNIySiLD9VmHgVWcq2WQa96q1gj
CRFSRzRPB89ZrH2fs0whVLQJWla8zyfUvtnani7CXqC8vpJh/Bs/eQiwgDXB/Fls
NaBfvFdrFlv7uw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:50 2025 by rpki-client