Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: Y6ANUxBzS5v/vSdRYfIxS268VxxWVnd5Zh3hyO1s3Hw=
Subject key identifier: B2:4D:13:AE:0B:B8:D5:3C:C7:57:76:35:0E:1C:4F:9C:87:BF:5B:D9
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019881D4B4AD74E544992F4C3A714A79BE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 118B
Signing time: Thu 07 Aug 2025 00:00:57 +0000
Manifest this update: Thu 07 Aug 2025 00:00:57 +0000
Manifest next update: Fri 08 Aug 2025 00:00:57 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 72cUkngSFUSuCq+t6BfmfDOmEyqdPCfsV5ckyu1fJd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:b4:ad:74:e5:44:99:2f:4c:3a:71:4a:79:be:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Aug 7 00:00:57 2025 GMT
Not After : Aug 8 00:00:57 2025 GMT
Subject: CN=b24d13ae0bb8d53cc75776350e1c4f9c87bf5bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:30:c5:68:2a:12:10:3e:79:e3:90:b9:19:
90:de:71:01:83:e1:49:45:d1:0e:a3:7e:e7:ed:5c:
cb:5c:e5:fb:26:0c:f1:79:db:f8:cb:cf:63:ec:46:
c1:d8:e4:29:63:b4:49:b2:07:2a:af:f8:4e:4d:6a:
de:2c:89:eb:86:ce:72:e6:81:4c:f7:69:a8:f5:df:
b5:d5:ef:12:94:93:56:dd:09:8b:53:c7:81:a0:eb:
64:4d:45:03:d1:21:65:db:c9:75:eb:27:39:27:c4:
58:67:2d:45:14:b6:63:c3:ac:79:61:5b:48:9a:cd:
87:bd:96:41:5a:13:07:da:a9:d8:b2:b3:e5:30:8c:
d4:7f:43:d7:28:f3:7d:94:f5:de:f4:ae:e5:ae:e1:
18:16:04:0a:ba:2e:2a:de:a6:d0:4e:82:6e:4e:2a:
3a:02:69:7e:2a:2c:cb:7a:bd:f7:8a:0f:dc:db:3a:
a0:e4:2e:49:9e:59:8c:a8:b5:c0:67:97:33:f2:55:
e2:d3:52:a7:4d:4d:7f:e7:a5:cf:39:07:63:81:ca:
12:e4:e4:4e:5d:b0:17:b0:45:72:de:ea:1d:41:6a:
f7:cc:0e:73:c7:6b:39:31:ce:02:80:51:a3:d0:39:
23:a1:cb:6c:f5:38:72:9a:da:ad:ef:56:36:ef:68:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:13:AE:0B:B8:D5:3C:C7:57:76:35:0E:1C:4F:9C:87:BF:5B:D9
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:7f:86:0c:73:d9:8e:c3:79:57:19:86:1b:59:5d:57:dc:
fc:34:b2:cc:12:ef:dd:66:e6:f1:fd:24:af:3d:7c:d0:fd:ea:
ed:65:a3:a9:16:08:e4:94:94:58:f9:80:05:0d:2d:90:e1:d9:
28:25:d7:f5:d8:70:ac:e5:f8:9c:3e:c7:9b:64:79:01:a0:0e:
85:52:83:be:c2:49:3a:b4:09:8d:a4:d8:d1:4c:c6:91:17:23:
7c:f2:ce:82:de:da:d0:b8:49:e8:88:a5:74:3c:e9:b2:4d:c1:
f7:34:7e:91:76:0a:fa:82:ca:36:55:d9:cc:40:44:3e:fd:9b:
c8:85:27:18:45:bc:31:e6:13:69:fd:19:72:0e:d5:c4:5d:8e:
c5:40:47:bf:3e:12:d0:98:a7:0d:3c:c2:6c:b2:fb:40:72:eb:
3f:f4:c8:f9:f3:c9:2d:80:eb:2d:79:ba:ea:98:18:b8:42:b2:
8a:fd:8e:3e:4e:d1:40:1d:49:ca:4e:da:02:0f:4f:27:aa:7d:
6c:d1:0b:b0:6a:62:dd:0a:db:25:68:c5:3c:08:05:ed:4f:93:
ff:19:cc:67:da:fa:cd:8a:80:e7:2f:c5:26:27:fd:9a:be:fd:
44:d9:e3:ca:01:ed:f1:28:8b:4d:db:89:f4:02:e5:a9:e6:6a:
f5:6b:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:06:22 2025 by rpki-client