Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: 3vFZ2Oq7LajCZBmjTNTxGzapIgoZBNHZKgQwz9Q8obI=
Subject key identifier: 01:1C:CA:B4:0B:A0:5F:92:E9:E3:B4:04:56:88:4B:2C:C2:96:C4:3C
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 01994F9BE36B53279B66EED9162215C859A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1689
Signing time: Mon 15 Sep 2025 23:00:40 +0000
Manifest this update: Mon 15 Sep 2025 23:00:40 +0000
Manifest next update: Tue 16 Sep 2025 23:00:40 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: 8EBB5WK9m85L+KcZqP+iDz9o5h9sBk6IFesq3hltjUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:9b:e3:6b:53:27:9b:66:ee:d9:16:22:15:c8:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Sep 15 23:00:40 2025 GMT
Not After : Sep 16 23:00:40 2025 GMT
Subject: CN=011ccab40ba05f92e9e3b40456884b2cc296c43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:6d:8d:9e:d7:8b:6d:6a:af:c5:10:cf:83:
d4:2d:2f:57:90:e3:c0:64:a4:6c:cd:6a:70:78:f2:
4d:38:09:65:f0:fe:80:94:d8:c2:d5:27:43:b9:2d:
a8:a2:47:7c:fb:da:59:00:5f:e0:bb:5e:82:59:76:
d6:e4:4a:73:1d:5d:50:17:a2:4b:b4:64:98:7a:ac:
25:98:f1:25:49:f9:fa:e2:e0:2e:fe:ee:8f:93:85:
ce:7b:63:cb:f0:65:6c:14:19:d8:bf:1e:d7:92:55:
eb:dd:df:20:a4:59:51:f5:9c:80:76:1a:33:dc:3c:
52:e1:76:00:2e:e1:8a:bc:00:c0:77:43:6a:02:8d:
d6:df:40:ce:f0:e6:a0:f0:17:8f:d7:1e:0c:a2:7c:
b9:82:ef:bb:b7:62:40:79:68:ef:e2:a9:f6:ad:e5:
2e:09:12:ca:29:2e:df:2f:fd:1d:97:be:7b:ed:41:
f8:75:dc:cd:6c:ae:6d:5c:0d:ab:45:5f:02:a6:7c:
c9:cf:f4:6a:96:d7:8e:af:db:14:bf:c8:4e:11:e8:
08:33:e5:e8:02:c8:50:44:94:71:2e:50:44:c5:c1:
b9:3d:5b:dd:3f:64:7a:0d:e3:39:3a:0e:a2:c2:78:
f5:5a:62:fd:27:4f:ae:71:18:cf:8f:f6:90:3d:e9:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:CA:B4:0B:A0:5F:92:E9:E3:B4:04:56:88:4B:2C:C2:96:C4:3C
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:88:7c:bf:eb:e7:a7:69:b6:07:65:4f:cd:27:c9:32:82:
7a:a8:a9:b1:d2:cd:a9:34:56:1d:7c:ac:a5:86:64:5f:9a:f2:
09:4d:9f:eb:3b:0c:be:00:10:93:4e:37:51:a3:4b:6a:31:be:
07:ab:75:d5:69:54:5a:7a:79:8f:44:54:ee:0b:68:18:60:44:
4b:52:13:05:eb:e7:19:14:bc:7c:29:67:f1:4c:a6:5e:7c:c0:
81:fd:a6:51:a6:91:6d:7d:8f:3a:b7:b1:b8:92:5a:6f:4c:ee:
38:6e:45:17:cc:fd:0a:e8:3f:a8:41:57:8a:ea:0b:62:18:fe:
81:51:b2:fd:c5:bb:40:0e:c8:c1:35:03:8a:d2:36:39:bb:4c:
33:02:a4:d3:bc:59:71:07:a1:33:1a:1e:a1:e8:7a:59:bb:21:
c9:98:ef:0b:8b:37:26:96:5f:be:4a:bc:f7:ba:a0:36:59:e2:
8b:1d:db:ec:e0:db:d7:a9:6c:3f:e4:1a:b4:71:cb:1d:12:80:
34:5e:6e:f6:59:50:dc:c0:45:9d:5e:dc:7c:9d:58:c2:bd:a5:
04:fb:7a:82:86:26:95:48:96:44:ca:35:ea:3e:76:ea:e4:57:
7f:91:48:19:74:df:36:4e:72:fd:c3:97:7f:ef:d5:5b:02:66:
54:03:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:57:46 2025 by rpki-client