
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: 6Gn1IsoPaA54ZVttwp+n7aeeHw02/pmLfaBKJA7BUnE=
Subject key identifier: A2:70:51:2B:BD:60:0A:02:B5:B9:80:1B:AA:1A:6C:E5:1C:E8:91:A4
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 0199FA6A341A60CDE4F3B872F5E334DD3B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 03:01:28 +0000
Manifest this update: Sun 19 Oct 2025 03:01:28 +0000
Manifest next update: Mon 20 Oct 2025 03:01:28 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: vWacMVdaY+U2eQtTJ/rnSM+9yf2Hw0b5qjxvyqXrR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:34:1a:60:cd:e4:f3:b8:72:f5:e3:34:dd:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Oct 19 03:01:28 2025 GMT
Not After : Oct 20 03:01:28 2025 GMT
Subject: CN=a270512bbd600a02b5b9801baa1a6ce51ce891a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:34:09:b9:c7:c1:4c:f0:07:6d:75:27:75:
10:c6:05:ca:73:e4:d4:3e:be:b6:8a:50:69:8e:b2:
3c:d9:f2:92:1c:2b:71:2a:b4:0e:a9:d2:d9:86:1f:
2d:4d:8a:ee:2c:bc:0c:09:9b:3e:f7:67:4f:90:da:
3d:bd:06:d9:f9:41:fc:25:fd:4f:91:f2:58:fa:82:
cb:6e:c8:57:bd:ee:b9:93:c2:a2:5c:ef:e8:4c:ab:
d3:9e:43:5e:24:cf:f8:c6:4e:cf:e6:27:7f:62:90:
15:88:f9:fe:25:66:68:2a:ce:3d:b0:81:0e:7e:f0:
61:1a:fd:47:a7:16:5f:a8:76:08:f2:c2:58:41:f2:
58:6e:4e:50:1a:53:b9:db:20:fa:cb:82:a5:36:22:
1a:8e:d1:95:23:b7:6c:ce:28:63:41:0d:fb:d2:10:
1e:ab:78:28:62:83:ac:d7:d9:05:71:04:25:d3:65:
1e:11:fd:2a:ae:24:04:45:98:19:7e:ae:7b:df:1c:
9e:98:2c:09:fc:a5:93:f2:98:e4:9d:18:aa:73:f4:
32:64:04:fe:ee:fc:79:8f:ac:61:45:52:f4:2d:34:
ce:c4:5d:ec:2b:36:a5:24:31:70:aa:1d:7b:84:a1:
0f:14:fd:37:0f:92:7c:7c:1e:77:59:1e:e2:bc:d4:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:51:2B:BD:60:0A:02:B5:B9:80:1B:AA:1A:6C:E5:1C:E8:91:A4
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6e:de:f6:a8:ed:58:df:88:d2:36:94:1f:2a:21:1c:ce:c0:
07:cb:7b:29:ad:f3:12:5c:68:22:e8:7a:bd:cd:46:5a:b9:34:
10:12:6d:bf:25:dc:48:8c:0a:07:e4:b3:15:8f:da:b7:12:2a:
43:d7:41:d9:05:6f:4c:34:02:16:b4:93:0b:42:41:da:a9:a6:
93:b1:25:cf:c1:08:f8:07:f2:24:59:53:2f:79:b0:e3:8e:34:
72:01:48:5c:8e:65:70:51:c0:2d:1b:05:49:11:e1:5e:41:93:
f0:de:33:f2:aa:7a:8d:75:c5:4d:07:8d:63:bf:7a:97:17:15:
15:8b:36:73:cc:83:fe:9e:02:f1:87:20:66:bc:5f:54:83:61:
3b:ed:9d:98:28:23:14:2a:31:3a:56:a4:42:c9:3c:e7:37:df:
75:78:f2:3a:f2:49:f3:85:c3:37:1d:e4:55:97:eb:ca:41:52:
3c:0c:f8:8b:bf:0d:06:45:33:59:dd:ad:09:ca:7b:91:d3:6d:
95:b7:3d:b5:02:62:05:fb:a7:87:9a:7e:ef:5e:e6:e7:9c:ba:
92:2b:63:65:4b:66:47:50:d1:e7:87:e4:04:3a:97:5c:3e:09:
8a:9d:9b:2c:cb:bb:ac:38:76:aa:3e:25:96:a8:3d:9e:2d:e3:
19:bc:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:17 2025 by rpki-client