Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: grupgSdJFvifdKJPQaoqFtT1CbtV+IGjdb1CR7MkeUc=
Subject key identifier: 4E:8E:CB:A4:5C:8B:29:18:09:CA:00:2B:9A:2B:1C:97:83:68:5A:AB
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 0199C456B47E5C32EE5059A7DF5EAC378761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 16C9
Signing time: Wed 08 Oct 2025 15:00:40 +0000
Manifest this update: Wed 08 Oct 2025 15:00:40 +0000
Manifest next update: Thu 09 Oct 2025 15:00:40 +0000
Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: Y+uCoXTg6GgiCM2eV/LlUKHPVfNoqEyJeRDTzIvsAmc=)
2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:56:b4:7e:5c:32:ee:50:59:a7:df:5e:ac:37:87:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Oct 8 15:00:40 2025 GMT
Not After : Oct 9 15:00:40 2025 GMT
Subject: CN=4e8ecba45c8b291809ca002b9a2b1c9783685aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:84:06:14:9e:cf:43:e9:da:a9:ec:fa:bb:
86:e0:26:19:02:fd:0c:21:7b:cb:2d:6c:68:94:e4:
26:40:53:2c:7e:3c:ea:11:70:e1:39:b5:77:70:a2:
fe:d5:eb:0e:0b:c2:b5:0d:3d:7b:2a:a8:92:0c:5a:
d3:ae:a0:58:f0:f0:cb:d4:c3:05:c4:1b:60:7d:83:
c3:6b:54:99:13:01:b7:7e:62:06:31:78:38:dc:8c:
bb:2b:d7:47:82:14:cc:79:e5:b2:87:62:9c:01:af:
d2:98:52:e3:52:9b:21:d4:59:b3:3b:d7:8e:2b:d4:
96:21:05:d9:70:a0:8b:c1:c8:b7:07:c1:c7:62:51:
1c:f8:89:57:c4:4b:9c:1c:58:82:5f:a0:11:3f:e3:
9d:3a:6a:8e:da:ea:81:6e:2d:a0:39:6b:d1:ee:2c:
63:02:45:7a:9b:be:16:67:e1:22:3f:d0:66:bd:c4:
74:46:a3:dc:2a:38:0f:b9:1d:11:9f:a1:42:42:29:
1e:27:8e:6e:21:8c:c6:2b:cc:ab:f7:fd:a7:f8:91:
09:8e:0d:c2:f3:d2:dd:4a:82:c9:a2:79:52:31:41:
a6:67:24:bd:5c:1b:26:ee:f8:d8:3e:bb:c0:ac:71:
8d:f4:5a:d5:f6:0a:39:da:8d:26:9d:5f:00:fb:16:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:CB:A4:5C:8B:29:18:09:CA:00:2B:9A:2B:1C:97:83:68:5A:AB
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f8:0c:0c:22:f2:d0:e4:ee:e6:65:f2:d0:32:17:60:a0:6e:
22:71:96:06:cd:b4:eb:f5:3c:29:5b:02:f2:80:53:f8:9d:0c:
4b:67:c0:37:ea:e9:e9:98:a6:30:bb:1a:2e:a0:d2:b6:05:5a:
8b:4d:4e:33:3f:63:23:e0:4b:eb:e7:04:79:27:68:eb:45:b5:
00:7d:af:be:77:6d:a7:84:1e:21:5f:3c:6e:2d:8e:bd:04:f1:
d5:01:bc:47:77:99:4c:66:9e:ef:0a:cc:df:9a:66:e2:71:21:
9b:25:a0:67:66:8c:dd:37:c4:1b:50:ca:87:73:60:2a:f3:12:
64:07:35:ad:d0:83:c9:f1:94:ff:e6:af:29:29:2c:56:a8:eb:
be:dc:1d:ff:37:b2:13:ab:2c:28:77:28:55:09:12:97:0e:20:
32:4d:01:e7:ce:18:0a:25:08:33:c3:25:00:ea:00:2f:99:e4:
08:d9:b7:b9:69:f9:97:9b:57:c7:b3:74:ee:19:1a:84:24:be:
e7:84:64:3a:4c:ce:2b:65:89:f9:ae:58:1e:cd:04:28:5c:5c:
a3:84:e7:b2:a4:92:66:04:1e:1d:f9:31:73:df:09:56:09:60:
28:6b:f6:dc:01:52:d3:20:d0:05:09:b7:64:42:b1:36:db:7d:
34:0a:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:24:51 2025 by rpki-client