Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: 075OJrXRd4/f/kqzV7m6sclng+CfuAd8dAvGi5L2d8Q=
Subject key identifier: 6E:90:20:FF:72:D9:E0:FE:FB:8F:46:6E:33:47:8B:F0:3C:50:70:D5
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 019A4F62DCC16C683C59FFAFE56F6898010A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 127A
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: a5pSDNtUhSYUL+1up0raqyiTTeqMy8HVK486+JHDpmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:dc:c1:6c:68:3c:59:ff:af:e5:6f:68:98:01:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=6e9020ff72d9e0fefb8f466e33478bf03c5070d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:79:66:64:6c:cd:11:48:03:47:c4:27:18:
56:4d:c9:64:a8:fb:87:19:b4:31:ac:4d:2f:0e:88:
9a:53:9b:44:82:5e:e6:5f:90:ab:bc:ed:0a:d0:de:
de:ee:83:97:6b:c2:1e:bb:51:33:bc:15:ac:20:9e:
69:26:58:88:90:3f:9c:d6:69:c2:bf:cb:b1:ad:d8:
13:19:b8:df:cb:d3:8d:5d:27:46:9a:75:b7:0c:89:
57:ae:76:63:16:d0:e5:2a:af:84:61:4a:b0:bc:4e:
ee:29:a8:d4:c4:3d:85:1b:0e:2a:d9:1a:76:9b:cb:
aa:96:5b:be:e4:97:55:6d:40:0c:ca:f7:0b:1a:c8:
8f:e8:0f:86:cf:22:60:ba:78:07:79:bf:2f:9c:6d:
73:8d:d5:51:3d:a1:12:c6:1d:37:de:68:56:d9:89:
cd:e5:b9:84:66:81:a6:30:f2:5a:0b:4b:92:e2:b4:
cc:6e:81:32:af:2a:66:f3:2c:a8:01:2a:67:35:94:
f3:6d:8a:d7:28:dd:a0:34:3d:a3:fe:a0:54:17:c5:
10:40:75:ab:df:61:91:de:bd:0f:1f:2b:c2:87:92:
91:0a:23:d8:15:13:a9:4e:d8:76:3d:d9:f9:22:7b:
07:ec:1b:28:a8:21:d4:39:b3:b5:64:67:77:b9:7a:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:20:FF:72:D9:E0:FE:FB:8F:46:6E:33:47:8B:F0:3C:50:70:D5
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:96:d2:f7:9c:73:d7:7d:df:f8:41:fd:07:f9:88:7b:1b:88:
07:38:03:10:a1:8f:d1:a6:ef:2e:da:4d:79:69:17:ed:83:2f:
77:b4:c4:fb:8d:0b:f3:95:f3:3b:bd:c7:42:44:99:af:d5:df:
e2:f2:e2:02:54:e6:3f:6b:42:ff:d3:eb:a3:70:33:48:0a:95:
e8:65:08:ba:31:5f:12:7e:9a:04:82:e6:a2:40:05:b3:4e:53:
f1:24:ba:d1:f7:00:e1:b5:9a:0d:f7:63:06:f4:1c:40:12:6e:
df:b1:d3:d5:a0:b9:6c:08:ce:2e:89:68:87:d3:33:19:1b:7d:
7b:e9:ab:8d:4a:a1:9d:bc:9a:63:cd:3c:ac:44:4c:fd:b5:1d:
51:6d:03:1b:bd:c2:d1:a5:5c:45:18:9d:cb:6c:0d:6b:73:ca:
c1:a5:53:e6:f6:f7:e9:7b:a2:c5:06:29:05:cb:35:38:3f:5d:
a2:58:5c:29:c2:0b:56:c5:0a:ba:5c:aa:29:fa:a5:d3:20:78:
5f:48:ea:b5:65:70:96:2d:b4:29:0d:cf:d5:c9:db:4b:ee:c8:
3e:11:b6:83:b5:ce:ba:41:3d:c7:35:3e:9a:82:11:74:da:06:
75:81:1b:5f:b8:64:54:16:86:a8:28:2f:d6:f4:1f:e1:b6:2a:
4e:55:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:10 2025 by rpki-client