Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: avcZhWIWiHzYGWHeCKSkkAn2LN1oxTY+lPKOWqIerQA=
Subject key identifier: B0:A8:13:D0:8B:6F:D3:C3:5A:EE:53:EE:D7:B1:D1:E0:42:73:68:E4
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 019927E9C50D021A54138484E6A8DC4E1C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 16BE
Signing time: Mon 08 Sep 2025 06:00:55 +0000
Manifest this update: Mon 08 Sep 2025 06:00:55 +0000
Manifest next update: Tue 09 Sep 2025 06:00:55 +0000
Files and hashes: 1: 4VZ9cyXhGhxm5Tn9Idx--URlnKM.roa (hash: Cia+lcB5DKt9KwiNDJP0PQVbg2qQjwIiWHZ3vsXGfh8=)
2: 4e2_MxEbAwSKyK_yMLyvMMWQTvc.roa (hash: Nw78uZqDKd/Z7FYgKDCdKH3T/mzlREHr9wc28wcO45A=)
3: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: KHkoASFHJso9KplbvS79EXLvyIEwsgTAjMq144pfi/k=)
4: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:c5:0d:02:1a:54:13:84:84:e6:a8:dc:4e:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Sep 8 06:00:55 2025 GMT
Not After : Sep 9 06:00:55 2025 GMT
Subject: CN=b0a813d08b6fd3c35aee53eed7b1d1e0427368e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:d5:43:2e:38:c4:b2:08:b4:11:ef:d4:e5:
2b:a4:ea:e8:54:7d:30:eb:fe:b8:71:95:2b:a0:15:
dd:f8:c9:8b:a9:cd:5b:fb:5d:44:11:f0:36:88:bb:
d0:9a:c7:bb:14:03:6e:79:20:09:1f:08:01:36:ee:
2d:27:1a:8a:6a:2e:58:32:9e:0b:11:3a:bd:35:7e:
71:fc:b1:c9:55:e3:8a:27:44:09:5c:f5:f0:db:a4:
34:13:f2:96:36:8c:5b:38:04:61:07:19:13:e2:cc:
d1:7a:f4:91:5b:70:de:68:ad:3d:51:b4:18:60:44:
aa:64:7c:fe:c3:50:d0:2e:af:ca:91:1d:87:ff:1e:
b9:ef:2f:2f:15:0c:7a:3d:58:af:d9:d6:cc:91:16:
ba:7c:f4:1b:b0:97:79:5a:b9:31:d2:32:6f:86:cd:
76:65:9f:59:0f:a2:fa:a4:41:d1:53:54:6e:be:b6:
f6:83:90:3e:93:31:17:64:f3:d1:eb:4c:7e:e8:9b:
28:a9:59:3c:47:32:c1:68:16:08:58:c9:7b:a3:21:
4a:69:ca:ac:74:5b:bf:91:a7:91:ec:55:3f:97:34:
20:b1:a6:5c:35:bb:d2:ca:b9:da:11:89:e0:f9:48:
37:dd:ff:b3:72:ca:43:67:a3:e4:6f:9d:a9:66:b0:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:13:D0:8B:6F:D3:C3:5A:EE:53:EE:D7:B1:D1:E0:42:73:68:E4
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:1a:04:3f:a2:33:80:dd:54:68:bd:7e:1d:f2:cb:e7:05:
7e:7c:5e:41:eb:61:7f:39:dc:a0:c1:33:94:b8:37:d8:04:86:
93:03:dc:7e:c3:8e:95:93:3b:d1:7e:b4:aa:3c:35:72:bf:53:
d3:73:89:f3:87:bd:fc:40:3b:ab:a2:de:09:14:27:a0:b5:43:
78:97:19:d0:47:69:69:ff:d5:9a:bf:76:8e:50:83:da:53:42:
0c:55:2e:4e:d2:03:ed:7d:77:bd:86:c3:69:46:22:32:6c:3f:
34:de:89:2b:e1:56:38:6b:ca:33:67:2d:88:10:df:40:95:97:
47:dd:cf:ee:be:85:a0:c1:4f:af:3a:47:4f:20:8c:74:00:cb:
a9:80:1a:fd:d9:50:58:38:44:ed:90:13:b0:bf:fc:0c:54:4d:
59:cf:ab:a6:1b:17:79:85:12:6a:56:b3:a8:a9:5e:a4:06:37:
e4:1c:d4:86:42:07:28:31:cc:9b:51:3b:b3:93:ed:94:96:17:
b7:2b:5f:46:4f:6a:81:1c:d8:c5:b0:bf:68:26:d5:32:d0:b7:
5f:97:1f:7f:ee:8e:13:e0:ad:fd:06:a2:f8:3d:44:48:eb:ef:
77:9e:f8:81:4e:72:cb:9c:96:e4:7b:6a:e9:22:97:d0:11:9a:
69:cf:95:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:03:03 2025 by rpki-client