Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: rZgEk5mkP9Fuvq02vs7ONbusI6dhAd7HSmNX8vNQSdQ=
Subject key identifier: 75:BD:FE:76:0F:39:C5:19:BE:90:85:27:3C:71:2D:BB:5E:9F:E5:A9
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019A1FBF17BE6A5C33048380B959579D6EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1667
Signing time: Sun 26 Oct 2025 09:00:08 +0000
Manifest this update: Sun 26 Oct 2025 09:00:08 +0000
Manifest next update: Mon 27 Oct 2025 09:00:08 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: 3oUgCj9R9Y3MN3kjxfJvgOa5ghvT+4r8/SNJhnso1AM=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:17:be:6a:5c:33:04:83:80:b9:59:57:9d:6e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Oct 26 09:00:08 2025 GMT
Not After : Oct 27 09:00:08 2025 GMT
Subject: CN=75bdfe760f39c519be9085273c712dbb5e9fe5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:f1:57:0c:64:99:d1:77:37:26:58:5b:48:
a1:49:ff:30:61:7d:4f:a3:49:9e:1f:de:96:22:a5:
57:de:e8:59:12:77:ac:5a:70:e7:61:14:7a:37:60:
4d:4e:ec:51:20:a3:52:77:65:0d:e3:7c:f0:fb:38:
cb:9e:81:2b:41:15:6a:63:d4:e3:09:85:06:d0:3e:
b1:2e:ac:b1:0c:88:5a:e6:f6:98:1f:67:3c:39:cc:
99:42:b8:51:ec:02:61:c2:16:aa:97:fa:ab:df:68:
2a:aa:f0:75:bd:73:5b:67:bb:12:bf:e9:19:02:e4:
5e:0c:f8:df:d8:1d:29:63:e5:1f:e1:b3:48:47:33:
98:61:92:ee:13:ae:86:5a:d5:dd:d7:dd:c2:bc:d6:
2e:13:3c:69:c5:f5:c3:63:0e:c4:34:b7:8e:08:7b:
54:39:1b:99:ed:19:e8:c5:9a:fa:6a:91:0a:bb:19:
60:c7:bb:c6:1d:27:a6:df:7b:f1:4a:dc:c4:8b:ec:
8f:05:11:f3:d2:00:e6:a8:0d:68:c6:66:40:86:13:
34:6f:6f:73:6d:fd:56:36:0f:3b:b8:87:57:25:8b:
37:71:61:44:99:cf:0e:e0:62:08:67:ba:e6:8a:0b:
01:02:01:03:01:83:f2:19:19:35:5a:96:bc:7e:e5:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:FE:76:0F:39:C5:19:BE:90:85:27:3C:71:2D:BB:5E:9F:E5:A9
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:57:8d:20:ca:eb:e5:c7:6c:1d:2d:ac:13:4b:11:bb:02:
0f:08:c9:46:ea:f0:09:12:4b:88:f2:a9:0f:cf:78:09:af:33:
30:2c:b0:69:c0:fa:07:d2:78:8e:a4:45:90:20:e9:e8:2c:76:
97:2e:3c:86:08:e8:a5:ef:44:20:ee:2a:04:60:5d:5f:1e:b2:
01:33:d7:5b:9c:c7:55:bf:23:9e:08:18:11:7f:b5:db:d4:f5:
50:81:e1:63:c1:66:90:3a:27:4d:c8:05:cc:c5:e2:44:73:74:
ea:cd:7e:bf:90:c9:f7:9e:88:62:80:d0:69:20:4b:fc:03:4f:
de:51:88:48:c9:9b:c1:d4:9c:5c:2c:2e:fe:4a:7b:ba:bb:52:
b7:0b:91:3d:2a:62:f1:4c:51:50:c2:16:2d:b4:e2:e0:4a:fd:
ac:f7:58:a7:c8:79:13:ff:11:6e:36:fe:5e:5a:df:e1:f2:cb:
61:61:01:28:e4:df:01:9a:2e:43:70:9f:e2:bd:bb:ee:4b:2c:
9e:1a:fc:48:e1:84:62:bf:98:36:e9:95:4a:3d:3c:60:68:85:
6d:83:1c:8e:96:4e:6c:37:bc:f4:d9:17:34:a8:4d:e3:20:e3:
16:c1:a7:67:96:78:b7:fc:a4:c0:60:64:7e:4d:74:8e:e5:8b:
59:76:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:22:41 2025 by rpki-client