Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: BCNW93jByEHEEy4mKX0AVS79gGKdukkga2uI/iw3jcU=
Subject key identifier: 90:7C:14:33:11:9A:11:63:D7:AA:BD:E8:A5:7B:BF:F5:65:A1:C9:98
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 0198D4E09C8ABD10A7FD10A3C1D23C563989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 1693
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: 4VZ9cyXhGhxm5Tn9Idx--URlnKM.roa (hash: Cia+lcB5DKt9KwiNDJP0PQVbg2qQjwIiWHZ3vsXGfh8=)
2: 4e2_MxEbAwSKyK_yMLyvMMWQTvc.roa (hash: Nw78uZqDKd/Z7FYgKDCdKH3T/mzlREHr9wc28wcO45A=)
3: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: eO/30rp83wCJYYX02qTSo1a+eMlkM4RIvHHaVFO8c38=)
4: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9c:8a:bd:10:a7:fd:10:a3:c1:d2:3c:56:39:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=907c1433119a1163d7aabde8a57bbff565a1c998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:7d:83:92:48:28:07:f8:21:f9:2b:43:34:
f1:bc:71:d6:3c:ce:76:63:b0:9b:a3:9f:cb:bc:b0:
b3:31:43:91:9f:69:43:71:cd:87:66:9f:cc:e2:ec:
df:bf:a5:a3:bf:53:ea:b3:3e:71:8b:41:13:fe:56:
32:a4:cd:f2:a3:80:14:e4:05:e2:c7:b1:76:da:3a:
c1:36:33:3f:bb:fb:7f:db:c6:96:02:f8:e3:8f:22:
d8:0b:96:7e:c5:70:0c:dc:ef:9c:8c:d9:10:78:82:
f4:8c:ee:12:47:55:24:e7:e3:ee:49:7f:fe:20:d2:
be:df:fa:72:49:39:d3:23:ef:82:a6:42:ba:80:71:
e3:cc:fc:e9:c7:6b:ca:f0:18:d0:1e:92:46:99:36:
d1:63:59:7d:36:90:5d:54:4d:7a:a3:c8:55:00:2f:
ee:79:20:60:8f:61:16:6b:73:10:70:ce:30:c9:33:
0b:ad:ea:45:de:71:67:b4:a3:1f:09:82:3a:cb:ee:
e2:2c:7d:48:0d:09:0f:ca:3a:31:2c:4e:8f:01:d9:
93:7b:96:8f:10:a8:9e:67:e3:a0:f1:2b:e2:09:38:
78:84:48:b6:77:5a:b4:fd:ea:66:8a:ba:1d:60:59:
79:34:59:4d:5f:b1:f9:6f:55:60:46:56:89:67:6d:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:14:33:11:9A:11:63:D7:AA:BD:E8:A5:7B:BF:F5:65:A1:C9:98
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:cf:64:03:ef:60:16:e8:ef:78:9a:c8:d1:33:33:93:b1:
ab:26:0a:3a:12:14:23:fd:1e:07:b2:d8:68:ed:e6:11:03:82:
47:6c:88:ef:82:01:cd:cd:d5:c9:c6:87:c3:63:ef:c3:0c:a8:
80:29:3c:f5:6d:db:3a:13:96:17:4b:11:66:e1:34:81:e2:11:
e5:b1:7e:68:75:4f:08:ea:ca:81:e1:1b:d2:82:e4:ad:81:93:
97:de:87:bc:76:00:1e:a0:01:1c:23:1b:a2:ee:88:07:7e:04:
cf:42:f6:b7:67:b8:a6:b1:6e:00:26:18:ab:1e:15:f3:1e:2e:
9e:05:c1:e1:92:57:8e:7b:99:8d:cf:52:da:67:20:07:20:82:
34:96:3b:1f:a0:0f:9d:b5:26:15:b9:ef:3c:63:ae:e8:54:e9:
1a:f2:7a:74:6d:8f:10:d3:a4:c6:f0:21:01:9c:08:83:f0:2b:
06:b9:6c:5b:be:75:b2:c0:6d:2d:4e:3f:d0:07:39:23:7d:b4:
38:bf:30:71:9b:96:36:a0:18:c8:a2:89:2d:75:77:b9:b1:0b:
84:c3:d3:c6:f5:91:50:cc:0d:81:f7:c8:ab:79:38:62:16:00:
4a:28:12:50:80:4b:c2:26:72:02:8f:8e:5c:e6:f9:57:23:92:
58:80:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:58 2025 by rpki-client