Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: uiIpjnHQZwOf4NmgSjQULjx7X2dWFrF6XbOBwhEbMBU=
Subject key identifier: E9:79:F0:15:FF:5A:24:99:29:EF:80:E5:9F:72:99:FA:80:4F:BE:3E
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019A2C9F6D3EA53861DF5BE3651456B9622B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 1745
Signing time: Tue 28 Oct 2025 21:00:36 +0000
Manifest this update: Tue 28 Oct 2025 21:00:36 +0000
Manifest next update: Wed 29 Oct 2025 21:00:36 +0000
Files and hashes: 1: 4VZ9cyXhGhxm5Tn9Idx--URlnKM.roa (hash: Cia+lcB5DKt9KwiNDJP0PQVbg2qQjwIiWHZ3vsXGfh8=)
2: 4e2_MxEbAwSKyK_yMLyvMMWQTvc.roa (hash: Nw78uZqDKd/Z7FYgKDCdKH3T/mzlREHr9wc28wcO45A=)
3: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: roYQ6TWIbBOny4kBATxDRyIjHzhm+TxoA42Vsx0r8Oc=)
4: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:6d:3e:a5:38:61:df:5b:e3:65:14:56:b9:62:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Oct 28 21:00:36 2025 GMT
Not After : Oct 29 21:00:36 2025 GMT
Subject: CN=e979f015ff5a249929ef80e59f7299fa804fbe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:d4:f8:35:fd:7d:f5:86:5c:36:22:0c:62:
4f:4d:f2:16:a8:b3:16:c2:41:2a:1b:d8:57:cd:06:
60:e8:39:67:4b:ca:f5:2e:4c:8d:86:cf:0c:1f:24:
38:e9:48:0d:f0:ae:71:de:d4:93:98:d4:95:a6:b4:
0b:70:7f:d9:a0:96:98:ec:b5:5e:3d:8e:0e:8b:d0:
77:35:dd:af:46:e0:d8:d7:6c:ac:70:e9:a8:87:ee:
3f:fb:4e:f7:8f:0a:2b:6d:8d:ae:ed:04:12:a2:1d:
0f:f3:63:b9:a5:de:73:18:24:68:70:91:66:99:f2:
c1:1e:c2:13:81:75:f7:dc:c1:56:48:59:d2:55:17:
26:43:3f:c9:41:ca:21:29:68:6a:0d:f6:95:21:b9:
21:bb:d5:ef:ec:39:4c:1f:72:9c:96:bf:90:ff:ec:
23:9e:20:fd:35:4c:d1:e8:bb:6d:32:9b:50:11:78:
02:da:f6:f1:b1:bb:24:78:2f:6f:8a:97:fb:d3:46:
77:7e:29:e8:6c:58:72:9f:2d:30:92:5a:0c:71:10:
47:e7:16:32:52:cb:35:95:8e:d2:e8:53:48:a7:3f:
d1:de:ab:b3:e5:29:c3:64:d8:c0:7f:9f:e0:48:98:
5a:b1:3d:da:ba:a5:09:a2:be:10:03:0f:40:89:7e:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:F0:15:FF:5A:24:99:29:EF:80:E5:9F:72:99:FA:80:4F:BE:3E
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f4:5e:f0:db:d3:fb:19:47:78:8b:19:ed:65:04:da:c9:e0:
f3:90:5a:75:88:fc:26:0f:c8:96:ec:c2:71:24:0d:5a:ad:e3:
13:d0:36:32:29:da:96:1c:5e:26:24:72:31:21:7d:eb:ec:d0:
71:41:2f:fb:ff:64:b0:83:63:96:f4:ef:67:39:8a:13:dd:55:
b4:e0:43:90:dd:8f:8d:05:4c:2e:6e:17:61:22:e4:0b:d4:5c:
bb:86:90:1e:6f:23:89:52:04:9f:36:cb:09:10:90:30:40:84:
ba:a0:91:c8:00:77:20:4b:f5:cc:3d:c4:e7:5e:0a:f6:01:a5:
e6:9c:70:c8:68:16:43:a9:1a:85:1c:0e:3e:ee:00:36:24:2c:
ab:4e:e6:c4:d0:2f:6a:63:79:0a:fb:17:17:00:a7:07:2c:09:
d5:d6:f4:6e:ca:fc:20:5a:c8:7d:58:84:73:7a:c8:7f:5e:c0:
b7:2a:51:80:33:be:5b:88:e6:6b:fc:a4:ee:5e:b0:b6:95:fe:
2a:9b:d6:ea:c4:d2:b0:e8:63:92:64:b1:9c:2e:1a:89:06:76:
30:a0:97:19:de:2f:cb:40:9c:ed:8b:01:12:60:2b:da:41:b9:
1a:9a:e6:19:e3:91:c3:00:c7:b4:f3:cd:86:3c:39:06:f8:e3:
85:6c:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:50:50 2025 by rpki-client