Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: drzCdLJg83uS6JSjDDMIAc4VUe/S3XJH9Tyon+t+Rbk=
Subject key identifier: 68:01:35:56:B6:5A:6E:34:12:96:CF:A7:60:54:FC:85:3E:C3:CC:A1
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019A221B6A15711E83E5F5E4F1931A37FBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1707
Signing time: Sun 26 Oct 2025 20:00:13 +0000
Manifest this update: Sun 26 Oct 2025 20:00:13 +0000
Manifest next update: Mon 27 Oct 2025 20:00:13 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: iPHpGOchfeNkBo4Og7Dc+XFD+ZEgklYY2EcpvkrV82U=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:6a:15:71:1e:83:e5:f5:e4:f1:93:1a:37:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Oct 26 20:00:13 2025 GMT
Not After : Oct 27 20:00:13 2025 GMT
Subject: CN=68013556b65a6e341296cfa76054fc853ec3cca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:35:7b:2d:90:3b:c0:3f:aa:e5:e2:1c:f4:
1a:7a:72:a6:78:c4:11:06:c8:44:bd:07:35:2c:12:
2a:e3:4e:bc:9a:2d:a3:90:b2:04:40:02:39:60:9f:
9c:f8:4c:4d:cb:32:cb:9a:5a:a2:d4:b5:89:ac:92:
0c:d3:2e:85:2b:43:dc:94:17:8e:58:83:1f:e5:33:
31:1d:9b:ee:97:ee:76:27:d7:a7:41:42:02:59:2a:
9c:a1:a7:d5:3f:c1:1d:0b:02:1e:21:70:d7:88:1c:
27:7e:ad:c6:85:ad:02:83:5f:c4:55:b9:64:96:25:
7b:e9:13:58:28:37:eb:67:9f:62:ea:e7:e4:53:97:
af:e5:bf:5d:ad:02:b1:5e:71:9c:46:f8:57:d4:4f:
9b:08:60:38:6d:d3:1c:fe:cf:29:cb:e8:9c:3d:53:
22:a7:b6:5d:44:69:fe:9e:45:ff:73:49:d8:9b:a5:
66:b6:92:a7:ff:fc:93:02:8a:f8:58:4a:d7:4a:b5:
53:0c:c9:b5:24:0b:59:a7:49:b8:04:ea:b8:97:9e:
45:2d:94:e5:f4:bb:31:8c:75:7a:01:bc:fe:13:66:
60:fc:0c:5e:34:38:6e:af:4f:db:51:fb:0d:ac:90:
1c:19:02:36:ad:17:b3:c2:29:c8:33:7f:b1:7f:0c:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:35:56:B6:5A:6E:34:12:96:CF:A7:60:54:FC:85:3E:C3:CC:A1
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:dc:81:18:7e:f2:c1:3c:72:da:e9:5a:34:d7:e9:46:ec:94:
fc:36:ea:f2:56:40:f6:de:e3:62:c8:8a:22:ff:84:e7:a8:a0:
bb:7a:c4:ea:19:26:10:2a:15:29:b9:85:25:9e:51:a9:ec:18:
ba:13:dc:a5:6f:2e:03:14:29:26:5a:b8:81:4e:84:f8:17:71:
f2:14:d8:cb:52:11:90:2a:8e:75:68:e5:fa:33:1f:81:f4:26:
1d:84:85:80:67:6d:01:59:e5:87:8c:78:99:f9:ff:7b:0b:a2:
64:04:20:39:14:25:23:40:e8:d3:18:2f:bc:b4:3d:80:7c:3b:
14:e6:4f:a0:b1:14:f4:ac:a6:a2:14:12:c2:aa:d2:10:14:a6:
5a:6a:f9:8f:31:6e:b3:cc:28:44:fb:03:08:e0:e9:27:68:b4:
ea:31:f6:cd:1c:80:d9:e0:26:07:8c:09:a3:ad:d8:8f:f7:5f:
4a:af:7a:11:7c:bd:1b:7d:a5:ee:16:59:ef:cb:72:dc:30:d2:
d9:ad:0e:c5:88:fe:67:25:fd:3f:ba:32:47:1d:de:e4:28:a9:
29:bc:ee:eb:ee:28:dc:e1:c1:13:f9:24:65:f9:3c:60:a7:d3:
4c:b1:8f:47:e6:f4:8d:37:19:1d:56:f9:79:db:2f:c7:db:2c:
18:95:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:25:09 2025 by rpki-client