Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: xDjxLVE6mCw9nxfus3qfVd1ybLg7i2mjT2md83sejiw=
Subject key identifier: BE:30:AC:A1:D4:D3:F1:D7:C0:BB:86:B0:9D:E6:7A:8F:CE:2E:30:50
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 01984AE5F9F733E0CDAC6277599BC4BC64B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1613
Signing time: Sun 27 Jul 2025 08:00:42 +0000
Manifest this update: Sun 27 Jul 2025 08:00:42 +0000
Manifest next update: Mon 28 Jul 2025 08:00:42 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: lI73z1uZeXVE5QFsJ8nnzG7n0lCdQKpqVSpepEwe9+s=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f9:f7:33:e0:cd:ac:62:77:59:9b:c4:bc:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jul 27 08:00:42 2025 GMT
Not After : Jul 28 08:00:42 2025 GMT
Subject: CN=be30aca1d4d3f1d7c0bb86b09de67a8fce2e3050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:18:6d:8e:b8:c3:87:2c:90:57:99:46:86:
55:a1:d2:fc:c6:9a:2d:7d:8e:e7:5c:c6:9f:79:f0:
9a:f7:1f:c0:3b:45:68:74:b0:25:7c:e0:59:74:74:
39:ec:41:cf:6c:fd:da:4d:0e:0e:d0:fd:b1:40:67:
08:72:f1:d5:c1:76:13:55:8e:19:14:65:48:ca:e1:
cf:66:7f:cf:85:fb:9c:88:ae:b2:b3:45:4c:90:81:
18:07:a8:46:44:aa:f6:5a:06:5a:b2:e5:ba:d3:a0:
62:39:d3:27:0d:63:5d:3f:60:c5:ca:19:c9:11:42:
ad:a6:09:8e:57:e5:1b:2a:de:b0:cd:94:5b:86:b6:
3e:d0:29:8f:3d:f3:5a:76:a5:7b:3d:c1:2a:7b:f5:
57:1a:1a:3c:18:55:23:a5:52:9a:29:57:cf:b3:1c:
8e:72:13:3f:15:7f:68:0c:e0:b3:0b:44:d5:7d:75:
dc:ae:57:26:c0:4a:a8:13:52:01:a0:36:3d:a6:28:
ca:be:4c:bf:e8:38:dd:8c:e8:9d:43:ee:7a:fb:da:
d1:93:ab:db:3c:28:4a:a2:cd:eb:4c:f7:ca:3c:35:
c6:18:56:49:3f:1c:55:fe:c9:b5:74:8e:da:e1:76:
03:a8:e0:0d:7c:f1:51:ac:9f:24:e3:37:d8:7c:c4:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:30:AC:A1:D4:D3:F1:D7:C0:BB:86:B0:9D:E6:7A:8F:CE:2E:30:50
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:82:db:79:41:b8:71:f7:e7:97:6c:37:5f:2e:db:04:6a:9d:
d4:44:b1:1f:8d:8e:25:be:7a:1b:30:28:54:b2:b8:6d:7f:38:
a6:2d:4b:ec:e8:0f:22:2c:57:c0:78:95:b5:66:25:90:8e:d7:
43:61:e9:b7:d5:01:6b:00:95:5d:07:8a:c2:77:f2:f4:74:1d:
6a:41:89:72:48:6b:c2:f4:dc:3d:9e:c6:14:81:06:5b:eb:b1:
39:15:c8:45:62:dd:b1:ea:73:4b:d5:9e:2d:aa:0d:80:47:75:
70:dd:bb:14:9e:5b:47:7d:99:8a:84:4d:74:a1:07:fd:a6:70:
fe:c0:33:33:1f:e4:01:9f:61:17:69:b7:28:6b:91:40:62:24:
61:d0:fd:e8:18:a5:1c:39:44:e2:6c:78:cd:40:c1:d1:bc:d1:
1b:68:f5:67:d6:49:f2:0c:f1:ed:29:9c:2c:52:8a:22:5a:f4:
f2:71:d0:24:16:f1:ea:88:1c:de:29:ed:83:12:5c:8e:7a:3a:
bc:0c:24:17:ce:68:cc:32:7d:b7:0f:bc:02:2b:58:39:5b:cc:
9c:23:eb:2d:ca:d8:ca:90:ae:99:b8:65:5c:68:2b:12:56:05:
bf:ce:fa:e5:a7:a1:da:17:02:c8:c1:31:40:6e:38:4f:ae:d7:
93:bc:42:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5fn3M+DNrGJ3WZvEvGS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjUwNzI3MDgwMDQyWhcNMjUwNzI4MDgwMDQyWjAzMTEwLwYDVQQD
EyhiZTMwYWNhMWQ0ZDNmMWQ3YzBiYjg2YjA5ZGU2N2E4ZmNlMmUzMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm0YbY64w4cskFeZRoZVodL8xpot
fY7nXMafefCa9x/AO0VodLAlfOBZdHQ57EHPbP3aTQ4O0P2xQGcIcvHVwXYTVY4Z
FGVIyuHPZn/PhfuciK6ys0VMkIEYB6hGRKr2WgZasuW606BiOdMnDWNdP2DFyhnJ
EUKtpgmOV+UbKt6wzZRbhrY+0CmPPfNadqV7PcEqe/VXGho8GFUjpVKaKVfPsxyO
chM/FX9oDOCzC0TVfXXcrlcmwEqoE1IBoDY9pijKvky/6DjdjOidQ+56+9rRk6vb
PChKos3rTPfKPDXGGFZJPxxV/sm1dI7a4XYDqOANfPFRrJ8k4zfYfMRz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4wrKHU0/HXwLuGsJ3meo/OLjBQMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoLbeUG4
cffnl2w3Xy7bBGqd1ESxH42OJb56GzAoVLK4bX84pi1L7OgPIixXwHiVtWYlkI7X
Q2Hpt9UBawCVXQeKwnfy9HQdakGJckhrwvTcPZ7GFIEGW+uxORXIRWLdsepzS9We
LaoNgEd1cN27FJ5bR32ZioRNdKEH/aZw/sAzMx/kAZ9hF2m3KGuRQGIkYdD96Bil
HDlE4mx4zUDB0bzRG2j1Z9ZJ8gzx7SmcLFKKIlr08nHQJBbx6ogc3intgxJcjno6
vAwkF85ozDJ9tw+8AitYOVvMnCPrLcrYypCumbhlXGgrElYFv8765aeh2hcCyMEx
QG44T67Xk7xCwg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:02 2025 by rpki-client