Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: zPtwI690muyoBJ2MGSSoZBOzauZ+T+khL1wxxYz6KBA=
Subject key identifier: 8D:6E:D8:3E:D6:65:60:E9:27:1C:0B:99:C3:5E:43:3C:F1:86:77:EE
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019A307C1CE18CC28277F79A78A93BB6EF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 126A
Signing time: Wed 29 Oct 2025 15:00:31 +0000
Manifest this update: Wed 29 Oct 2025 15:00:31 +0000
Manifest next update: Thu 30 Oct 2025 15:00:31 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 3izTc5qsIQRZuBxtQiqBq+DSxcXQJqOlGQea3J/NUKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:7c:1c:e1:8c:c2:82:77:f7:9a:78:a9:3b:b6:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Oct 29 15:00:31 2025 GMT
Not After : Oct 30 15:00:31 2025 GMT
Subject: CN=8d6ed83ed66560e9271c0b99c35e433cf18677ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:68:d4:79:2e:46:41:88:73:9b:d1:74:7f:
17:b3:1c:b4:8a:9a:d7:46:09:61:6c:e0:ee:b8:49:
1c:be:f5:cb:1d:cd:30:f9:d9:79:c8:4b:de:d9:0d:
2b:92:bd:d2:74:e7:e8:2d:81:eb:2d:17:4d:0c:00:
68:c9:1d:d0:3b:ff:9d:d2:80:d5:99:64:5a:b1:68:
7d:48:ec:9e:4b:40:5c:bb:e0:f5:09:25:b5:26:c8:
a5:d6:1b:ca:1a:97:65:5b:26:26:1c:ec:f0:c4:69:
cd:dd:f0:9f:15:c4:d3:bc:0e:d6:b0:58:ee:62:e5:
d5:94:c3:7f:ce:9c:ff:5a:5c:e2:f9:28:cb:03:cf:
62:d3:b2:40:6b:b5:e1:b2:4d:8d:ff:09:01:91:4b:
b8:ba:04:24:ab:31:db:8a:be:44:de:67:fe:0d:bd:
10:81:7f:e5:13:7f:1c:3f:dc:40:1a:fb:6a:ba:51:
d9:0a:2c:d3:de:c6:82:04:1e:5f:57:29:82:f4:cf:
e9:e2:b6:fc:84:8f:a6:e0:ec:99:a8:b1:6d:b8:bf:
fc:24:5a:4a:e4:d4:50:28:9a:bc:7a:46:14:ad:17:
66:4a:7b:9f:e6:b9:fc:b8:c8:92:c5:fa:e8:a4:5d:
fb:a0:c1:05:1f:52:01:b4:38:02:8a:fd:69:e9:ee:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:D8:3E:D6:65:60:E9:27:1C:0B:99:C3:5E:43:3C:F1:86:77:EE
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c8:8a:14:6d:0f:bc:15:4f:b3:e3:06:b3:df:18:3b:7a:82:
fb:5c:07:95:90:fb:26:8c:60:ef:4b:14:39:fe:26:d0:81:b4:
11:1b:47:d4:d3:fc:b7:8c:15:42:7f:2f:0b:6b:e4:9d:9d:74:
f5:0a:1e:e3:54:93:20:32:b8:7b:9f:ea:3e:f2:0f:46:ba:ad:
fb:92:69:fe:2e:a5:f7:9d:5a:24:0f:f3:bb:8e:57:b6:2e:4e:
89:f5:b7:4a:38:b5:20:d0:a3:31:16:3c:b5:9a:9a:71:3f:c5:
74:3a:cd:9e:17:0f:87:b2:9f:ad:79:76:e4:7c:5d:48:fc:66:
b6:ac:14:fd:c0:7c:22:1a:2a:97:69:2d:c2:a7:ab:6d:db:36:
aa:2c:47:0d:c7:4b:fe:f9:cb:2b:83:cb:3b:7d:d7:33:2d:10:
03:ad:48:f6:7d:60:d2:8b:a0:9d:79:a3:96:74:65:3e:5a:b0:
f1:60:42:d8:b1:23:a9:03:82:0f:f4:ea:2e:dc:88:36:eb:45:
48:27:1e:61:79:90:50:ec:64:17:be:a7:fc:89:ff:54:3f:b7:
67:11:17:60:8d:56:65:be:a6:50:4f:3d:bb:a8:a9:bf:b8:82:
90:ed:e2:11:91:30:51:b9:9d:da:ef:cf:72:33:87:ce:53:4c:
fe:e9:e1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZowfBzhjMKCd/eaeKk7tu8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDY3MmM5OWY4N2YwNWNkODNmMGI2MjdkMzE4NzFmZTgw
YmUwMWYwHhcNMjUxMDI5MTUwMDMxWhcNMjUxMDMwMTUwMDMxWjAzMTEwLwYDVQQD
Eyg4ZDZlZDgzZWQ2NjU2MGU5MjcxYzBiOTljMzVlNDMzY2YxODY3N2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZZo1HkuRkGIc5vRdH8Xsxy0iprX
RglhbODuuEkcvvXLHc0w+dl5yEve2Q0rkr3SdOfoLYHrLRdNDABoyR3QO/+d0oDV
mWRasWh9SOyeS0Bcu+D1CSW1Jsil1hvKGpdlWyYmHOzwxGnN3fCfFcTTvA7WsFju
YuXVlMN/zpz/Wlzi+SjLA89i07JAa7Xhsk2N/wkBkUu4ugQkqzHbir5E3mf+Db0Q
gX/lE38cP9xAGvtqulHZCizT3saCBB5fVymC9M/p4rb8hI+m4OyZqLFtuL/8JFpK
5NRQKJq8ekYUrRdmSnuf5rn8uMiSxfropF37oMEFH1IBtDgCiv1p6e7n7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1u2D7WZWDpJxwLmcNeQzzxhnfuMB8GA1UdIwQY
MBaAFB0Gcsmfh/Bc2D8LYn0xhx/oC+AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTIt
NDk0ZjRjNGRhNDI2LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZTRmMDgtNjczMC00MDUxLTk3OTItNDk0ZjRjNGRhNDI2
LzEvSFFaeXlaLUg4RnpZUHd0aWZUR0hILWdMNEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsiKFG0P
vBVPs+MGs98YO3qC+1wHlZD7Joxg70sUOf4m0IG0ERtH1NP8t4wVQn8vC2vknZ10
9Qoe41STIDK4e5/qPvIPRrqt+5Jp/i6l951aJA/zu45Xti5OifW3Sji1INCjMRY8
tZqacT/FdDrNnhcPh7KfrXl25HxdSPxmtqwU/cB8Ihoql2ktwqerbds2qixHDcdL
/vnLK4PLO33XMy0QA61I9n1g0ougnXmjlnRlPlqw8WBC2LEjqQOCD/TqLtyINutF
SCceYXmQUOxkF76n/In/VD+3ZxEXYI1WZb6mUE89u6ipv7iCkO3iEZEwUbmd2u/P
cjOHzlNM/unhAw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 16:43:19 2025 by rpki-client