Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
File: HqzGEKc4PxkkhnIDC9mkR80JQck.mft (raw, json)
Hash identifier: w/4ulKztresXiERxQTpYeqdXEkz18LZSHiwbd/iVvmQ=
Subject key identifier: F0:F0:FF:0D:80:16:E1:65:EF:BA:59:3A:AD:B1:A5:51:2B:4C:73:2A
Authority key identifier: 1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
Certificate issuer: /CN=1eacc610a7383f19248672030bd9a447cd0941c9
Certificate serial: 019A706E42A450C1AD1E7F7E3D543B857905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
Manifest number: 44
Signing time: Tue 11 Nov 2025 01:01:05 +0000
Manifest this update: Tue 11 Nov 2025 01:01:05 +0000
Manifest next update: Wed 12 Nov 2025 01:01:05 +0000
Files and hashes: 1: HqzGEKc4PxkkhnIDC9mkR80JQck.crl (hash: J6tsASck5MRVmdVmpQpAx245O6U/slB6m/rMXaZMBtk=)
2: NN7HcWfwho6Wg205AV2VgvpmbLU.roa (hash: +KCs1tl2HUeqWBjr2lOeJY8VcQb8CSyBUASdC9OhN/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:42:a4:50:c1:ad:1e:7f:7e:3d:54:3b:85:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eacc610a7383f19248672030bd9a447cd0941c9
Validity
Not Before: Nov 11 01:01:05 2025 GMT
Not After : Nov 12 01:01:05 2025 GMT
Subject: CN=f0f0ff0d8016e165efba593aadb1a5512b4c732a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:d3:89:38:b1:e5:1a:46:3b:c0:80:53:90:
99:88:66:c9:43:a8:3f:15:d1:e5:55:f3:ba:3b:43:
7f:13:b4:47:87:63:92:00:4a:04:84:67:50:41:b8:
d0:44:96:bf:b9:2f:d0:ed:07:04:19:b2:68:5a:d1:
e1:02:e4:da:7b:94:55:1a:02:68:ae:79:07:bb:6f:
35:df:e7:d9:9f:b7:f9:78:f2:2f:e3:48:54:84:25:
7d:60:a5:d8:63:2d:0f:47:a2:1a:ed:01:b8:8e:7c:
c9:e4:1b:b9:52:5a:de:13:62:d5:45:34:a6:98:ed:
22:ed:63:cc:03:3d:bb:ec:e0:bd:29:b8:b9:e0:ca:
78:7d:14:77:0b:f4:f1:fc:5d:78:a5:84:2b:c5:27:
64:76:e2:12:5f:e5:c5:95:fd:14:6b:05:b4:d2:0a:
38:b3:36:45:68:4c:d7:60:b8:55:08:43:c0:e9:cf:
6a:91:01:4f:da:59:f8:0e:90:a5:41:95:68:13:a3:
a1:b8:df:1a:56:50:7e:16:45:23:82:af:b5:e8:df:
e8:6d:fa:d1:d1:7a:c2:ba:82:e1:1a:b5:b7:5f:90:
90:d5:ee:29:e5:d2:93:b1:b5:e2:b1:63:02:cf:fe:
29:ea:da:65:36:85:e1:d7:d9:56:d9:bc:cd:ce:53:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:FF:0D:80:16:E1:65:EF:BA:59:3A:AD:B1:A5:51:2B:4C:73:2A
X509v3 Authority Key Identifier:
keyid:1E:AC:C6:10:A7:38:3F:19:24:86:72:03:0B:D9:A4:47:CD:09:41:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqzGEKc4PxkkhnIDC9mkR80JQck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/7f3d29-418e-4136-8b52-fe502599369e/1/HqzGEKc4PxkkhnIDC9mkR80JQck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5d:b5:14:b2:59:ff:4c:b7:64:73:71:f5:b4:ed:95:19:ae:
82:3a:3e:ce:d5:60:73:62:82:5c:cf:68:b3:63:76:90:3a:de:
8b:51:8c:db:18:33:af:7f:37:c1:4b:3a:34:cf:d8:8e:34:f3:
cb:41:d6:86:dc:65:39:44:83:a4:15:21:b6:09:f2:9a:b8:54:
8a:fe:a1:a4:94:a9:41:a2:b9:d0:73:64:d5:1d:4a:6b:46:22:
b5:11:40:11:a3:a4:18:52:e0:24:c7:ab:5e:b1:dc:e8:e1:22:
d0:c3:2b:d7:a4:a1:56:c9:da:f8:d0:71:c3:22:54:7d:fe:56:
d3:80:f7:c9:3a:30:ef:69:c5:9f:24:81:41:43:3f:86:ca:3f:
29:83:de:05:82:07:a5:05:c4:23:af:4b:0a:3e:12:4f:13:d7:
ef:87:19:e1:6f:b9:f5:05:40:c4:ae:be:f1:ca:37:e2:c8:82:
92:e2:43:2c:5c:80:0d:a3:58:45:b7:f7:0e:c7:0a:36:c7:fc:
76:78:29:6f:6d:35:17:b8:d6:d4:71:6f:13:64:d3:3b:c3:85:
04:6e:75:98:fd:20:a8:4a:97:f7:e4:43:a3:e4:79:b6:7a:82:
8e:ff:52:b6:f3:b9:32:48:79:4a:a1:c3:32:aa:5a:f8:76:72:
74:55:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:55 2025 by rpki-client