Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: t9cMLuXAo75kpZiknKsKqylqeFy7xLFVYo8AVqxrI7E=
Subject key identifier: 68:DD:D8:0E:D9:81:FF:BB:4B:CE:06:B9:61:9C:8E:4B:96:28:4D:DC
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 0198537B133CFA1CC0222B901A974FE7DFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 1597
Signing time: Tue 29 Jul 2025 00:00:31 +0000
Manifest this update: Tue 29 Jul 2025 00:00:31 +0000
Manifest next update: Wed 30 Jul 2025 00:00:31 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: DrHS/LUxtYfqEr+8lQ06ZOA/N7PW3rhhz0L9cEb3KBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:13:3c:fa:1c:c0:22:2b:90:1a:97:4f:e7:df:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jul 29 00:00:31 2025 GMT
Not After : Jul 30 00:00:31 2025 GMT
Subject: CN=68ddd80ed981ffbb4bce06b9619c8e4b96284ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:c4:0a:08:35:cb:45:22:58:49:aa:6e:cf:
60:ef:7a:15:aa:29:80:ab:d2:27:6f:6a:88:46:44:
10:0a:6f:7d:89:04:ca:2e:de:c3:9c:12:8f:3c:78:
e2:01:ee:74:bd:05:fd:b3:5d:a0:54:3e:81:21:ed:
15:7c:46:7b:d9:41:29:14:40:54:6a:dc:1a:5f:31:
fc:9d:63:88:3c:a3:90:54:a4:3a:1f:99:c6:7e:db:
e0:1b:6f:f7:5a:3d:f1:c9:e0:1d:f3:be:cc:0e:6e:
f8:0a:86:0c:ab:3c:81:0e:6e:b0:1b:80:29:a7:e1:
61:f7:9d:06:6d:95:c5:19:ab:4d:cb:03:2e:6d:af:
b9:5d:94:b2:ed:cd:f9:87:88:2d:b5:cb:d2:5d:1f:
8b:f6:ae:e5:a5:2e:5e:f3:d7:e6:50:64:d1:ca:f1:
b1:a5:6c:2f:fd:2e:0a:e0:a3:5c:d0:07:94:f1:d4:
04:83:82:75:97:27:e0:a6:bb:56:84:8a:85:88:22:
4c:a1:77:5e:79:45:01:25:95:59:32:19:75:dd:45:
8b:fe:71:f4:80:ba:95:a3:64:37:b7:5c:4e:b4:2a:
c1:b2:c9:ea:eb:92:33:1e:06:df:84:44:64:21:83:
5c:c8:83:4c:c4:ac:be:e7:d4:2d:b3:f8:87:ec:e6:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:D8:0E:D9:81:FF:BB:4B:CE:06:B9:61:9C:8E:4B:96:28:4D:DC
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ae:9b:b1:ac:98:b2:dd:d8:53:11:23:8e:81:a9:9d:27:cb:
86:3a:6f:82:81:98:95:51:fb:7d:47:6f:ce:08:21:53:1a:17:
df:bb:f0:3e:03:95:0e:df:b1:6c:19:db:78:32:38:fb:a1:10:
dc:ca:b3:47:4f:f4:0e:84:df:0a:f6:a9:ea:e5:1d:d8:46:3e:
7d:9c:45:58:f6:4d:d8:8b:3d:f0:de:df:d3:c2:54:c0:ef:9b:
94:31:3e:9e:34:86:1c:eb:e6:1b:f5:d5:73:08:eb:f7:3c:c4:
e8:86:18:7a:52:4f:be:e8:b5:4d:2c:68:fa:65:ba:fa:57:2a:
2a:e0:1d:c0:73:a5:45:e1:20:03:33:f7:51:8d:7e:71:58:41:
09:c9:9f:d9:70:fa:86:c5:4a:77:b0:36:3f:c6:cc:3c:f9:ae:
7f:4e:e1:0e:44:af:8c:86:42:72:8a:e3:df:3b:48:68:8e:65:
14:b7:8d:06:a2:06:25:c0:b7:7d:8a:8a:70:af:a0:57:9f:7b:
f4:25:b3:61:bc:19:bb:86:50:63:2b:28:00:31:19:bb:c3:57:
21:15:99:cc:7f:84:7b:df:5f:89:ea:e9:fa:9c:77:86:52:87:
40:6d:43:01:4c:ed:89:39:85:8f:46:bc:54:00:3a:18:e5:d9:
a2:f7:2a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTexM8+hzAIiuQGpdP59/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjUwNzI5MDAwMDMxWhcNMjUwNzMwMDAwMDMxWjAzMTEwLwYDVQQD
Eyg2OGRkZDgwZWQ5ODFmZmJiNGJjZTA2Yjk2MTljOGU0Yjk2Mjg0ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18nECgg1y0UiWEmqbs9g73oVqimA
q9Inb2qIRkQQCm99iQTKLt7DnBKPPHjiAe50vQX9s12gVD6BIe0VfEZ72UEpFEBU
atwaXzH8nWOIPKOQVKQ6H5nGftvgG2/3Wj3xyeAd877MDm74CoYMqzyBDm6wG4Ap
p+Fh950GbZXFGatNywMuba+5XZSy7c35h4gttcvSXR+L9q7lpS5e89fmUGTRyvGx
pWwv/S4K4KNc0AeU8dQEg4J1lyfgprtWhIqFiCJMoXdeeUUBJZVZMhl13UWL/nH0
gLqVo2Q3t1xOtCrBssnq65IzHgbfhERkIYNcyINMxKy+59Qts/iH7OY2pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjd2A7Zgf+7S84GuWGcjkuWKE3cMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXa6bsayY
st3YUxEjjoGpnSfLhjpvgoGYlVH7fUdvzgghUxoX37vwPgOVDt+xbBnbeDI4+6EQ
3MqzR0/0DoTfCvap6uUd2EY+fZxFWPZN2Is98N7f08JUwO+blDE+njSGHOvmG/XV
cwjr9zzE6IYYelJPvui1TSxo+mW6+lcqKuAdwHOlReEgAzP3UY1+cVhBCcmf2XD6
hsVKd7A2P8bMPPmuf07hDkSvjIZCcorj3ztIaI5lFLeNBqIGJcC3fYqKcK+gV597
9CWzYbwZu4ZQYysoADEZu8NXIRWZzH+Ee99fierp+px3hlKHQG1DAUztiTmFj0a8
VAA6GOXZovcqpg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:36 2025 by rpki-client