Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: CXdbsuyGGrrYnGmScJbtYq0LWH2lE3GHnGrxbvopwKY=
Subject key identifier: 34:42:B8:47:97:6D:40:9A:3E:ED:F4:E3:B8:B8:3B:98:E7:3C:44:AF
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019934248B7D3FDF72881016EE64A120CAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 15ED
Signing time: Wed 10 Sep 2025 15:00:34 +0000
Manifest this update: Wed 10 Sep 2025 15:00:34 +0000
Manifest next update: Thu 11 Sep 2025 15:00:34 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: YKobxffTKqR1aCQlLkIontM2sSfRaa9fv9c70km98cI=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:8b:7d:3f:df:72:88:10:16:ee:64:a1:20:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Sep 10 15:00:34 2025 GMT
Not After : Sep 11 15:00:34 2025 GMT
Subject: CN=3442b847976d409a3eedf4e3b8b83b98e73c44af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:b8:e4:1a:ad:eb:e7:22:9e:d5:a2:78:12:
1c:02:ab:f1:38:dc:36:f8:91:96:02:14:c6:2e:a4:
8d:e5:6f:4f:11:28:c9:88:99:90:20:b5:53:5e:2f:
eb:b9:63:5f:fd:13:8f:06:eb:86:54:ea:a9:91:16:
93:a4:24:0b:e8:3a:22:b6:76:11:bd:60:9e:39:b3:
6a:cc:e3:7a:97:d8:00:7a:9f:2e:8d:4e:57:18:6e:
09:01:00:9e:ff:b2:60:da:71:1a:84:3e:61:38:cd:
51:cc:b7:1f:5f:46:7e:f6:ff:9b:f3:9d:c9:34:43:
f9:0a:8b:0e:84:ae:99:ae:f9:16:94:98:15:32:bc:
08:08:d2:41:dd:81:31:14:c9:6e:12:d4:5d:c6:f2:
c2:7c:76:32:65:c7:77:00:21:bf:88:a4:02:7c:d2:
a1:6a:10:9b:10:09:bf:57:57:d7:f5:ed:4c:b2:d9:
0b:db:1c:13:9a:3b:7d:63:aa:15:08:61:9d:57:c0:
40:57:da:af:79:cf:48:a0:43:8e:fd:8d:4b:14:46:
69:5d:d4:82:96:a4:bd:38:f9:af:8e:7d:bc:89:0f:
f7:b6:09:41:b4:45:75:86:b3:97:e1:e1:08:3b:c9:
83:54:43:1f:11:17:ec:83:46:05:71:f9:4e:61:2b:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:B8:47:97:6D:40:9A:3E:ED:F4:E3:B8:B8:3B:98:E7:3C:44:AF
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:9e:9e:49:72:65:3c:96:92:f1:58:30:70:d0:e1:c3:81:
be:5b:39:c1:09:ae:48:f7:48:96:3f:ea:84:63:98:7e:29:10:
f9:61:38:ee:15:fd:ee:52:05:d8:a3:84:12:3c:30:9e:ef:fa:
31:17:75:fb:d3:84:b1:33:bb:f9:ba:7c:96:7c:9f:67:a7:7a:
48:9f:f8:56:2e:5d:37:ff:d6:bd:d6:6f:d6:de:59:24:fd:b9:
8e:0c:b6:db:b7:05:8f:6d:63:4f:f2:3c:0a:ba:c1:ed:7f:c8:
c1:ce:46:89:55:55:f9:93:77:f6:9f:11:08:4a:79:41:8b:d1:
92:68:78:e2:c1:e3:a6:15:3f:d4:4c:d0:70:6a:bf:98:aa:b9:
96:3e:90:85:8f:e2:d2:a7:87:50:00:1a:65:de:54:06:9c:82:
29:f4:d1:31:e0:4a:80:49:30:2f:9f:fa:5c:e5:56:5d:e2:b6:
4e:76:ff:61:7d:c9:b7:db:ab:82:be:5e:76:02:40:0e:07:44:
5f:94:c1:40:cf:fd:2f:2a:db:97:d1:71:98:c6:9c:c2:28:5d:
59:46:9c:90:e2:cb:08:2b:3d:17:66:ab:c3:56:8e:b0:be:75:
f2:84:65:70:ab:2f:9a:06:30:cb:d8:f7:32:6b:09:10:28:4e:
d6:ee:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:31 2025 by rpki-client