Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: kklPrfMgN+7WVqg8fLkqEQ//4rddhHTqkskPo/DaYq0=
Subject key identifier: A0:DF:3F:C5:16:E6:D0:0C:4E:7F:68:FC:5C:EC:1E:39:E0:45:85:8F
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019932A4096469177AF151063AB0A4ED17EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 168B
Signing time: Wed 10 Sep 2025 08:00:34 +0000
Manifest this update: Wed 10 Sep 2025 08:00:34 +0000
Manifest next update: Thu 11 Sep 2025 08:00:34 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: 4n9P4FlxmvmRxUr3YJD8sfIJfGYWDCK7gYCAHDlZjEk=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:09:64:69:17:7a:f1:51:06:3a:b0:a4:ed:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Sep 10 08:00:34 2025 GMT
Not After : Sep 11 08:00:34 2025 GMT
Subject: CN=a0df3fc516e6d00c4e7f68fc5cec1e39e045858f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:d7:61:a5:1c:f2:67:fa:09:36:6c:4a:d6:
56:57:6d:6f:24:bf:5e:9e:0e:47:da:af:ea:1f:f7:
da:65:87:44:32:eb:23:e9:bf:f9:e3:4f:d5:8b:65:
a4:83:53:bf:94:10:1c:59:4c:92:8d:68:c8:8d:84:
c2:72:45:da:4b:00:81:b8:4b:6d:f8:b0:49:52:e1:
bc:55:ac:69:18:a4:75:8e:e4:c9:09:f0:1f:52:83:
00:16:11:04:67:2f:25:b6:15:e3:88:be:bf:1b:e7:
f6:3b:78:39:7f:6a:12:cf:11:51:95:23:a0:34:a9:
69:6a:f0:10:97:27:ad:1c:9d:5d:4e:de:e9:48:a0:
dc:a6:5a:6b:70:14:2b:0e:90:f9:2d:c0:85:0e:1d:
ca:93:43:5c:71:fe:f7:2d:32:11:ec:75:c1:1f:1e:
80:91:d6:e1:70:6d:73:b0:55:aa:ae:23:57:2d:87:
ed:6f:9c:e8:01:56:d9:83:ad:7e:72:fd:f4:80:7b:
ec:fe:5a:2e:33:c1:75:84:b8:78:d9:28:c1:1c:ae:
01:20:fe:9b:71:1b:e9:1c:34:5d:70:99:2c:84:64:
ee:2f:88:89:45:b0:bd:e2:ac:0f:1a:0b:a4:e8:a5:
74:ae:7c:50:6f:46:bc:34:3f:26:67:18:f8:97:cd:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:3F:C5:16:E6:D0:0C:4E:7F:68:FC:5C:EC:1E:39:E0:45:85:8F
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:83:ae:70:34:f7:29:b0:56:51:32:1a:25:6e:b7:3c:e0:
34:1e:1a:1b:ea:17:b7:ab:f3:45:2a:a7:aa:b2:70:a3:89:70:
f8:59:c6:0a:ef:09:8a:d5:c8:b8:c2:c0:ec:2f:b9:86:44:0d:
02:9b:23:cd:f0:0f:dd:c5:68:00:11:33:31:4f:d8:ec:04:43:
56:ae:df:01:7e:0d:1e:7f:e7:65:58:98:50:a1:f2:e6:2e:7a:
74:8e:93:d3:6e:43:02:a6:4a:b2:a6:f9:d6:60:de:6f:16:30:
01:4e:95:7f:d3:77:05:ab:af:fe:32:23:07:02:76:a5:53:53:
a5:f4:b4:d4:89:9e:7f:08:60:aa:37:54:b1:72:9f:9b:59:84:
a8:ef:83:12:78:42:6d:82:08:a3:a3:c5:94:52:16:4c:68:77:
f0:cc:7b:cf:73:17:d0:92:74:3f:90:f9:ab:15:7a:e9:5c:f2:
5a:4e:46:52:10:53:10:85:1c:2d:40:c0:42:66:a2:3f:74:50:
c6:2d:67:86:74:42:62:01:84:99:43:3f:6c:08:a8:e0:48:1b:
fd:d6:b0:e3:d6:4e:12:71:da:57:fd:97:eb:6a:68:fb:6a:0f:
c1:eb:ab:42:b5:8b:25:02:1b:59:7f:eb:d7:58:ef:f1:6a:33:
4c:68:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:01:27 2025 by rpki-client