Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: oirWkLJQAW4GBesQnZ8KJJQSYFWVcwjAe0VUsUxFUfk=
Subject key identifier: 51:1D:72:F9:4A:95:86:AF:B1:F7:1B:A2:D9:3A:8C:75:5B:FB:00:A5
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 019873748BCFD1B9E0641013B2BD10176441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:01:14 +0000
Manifest this update: Mon 04 Aug 2025 05:01:14 +0000
Manifest next update: Tue 05 Aug 2025 05:01:14 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: hDjhrCKp8MXoVPXhadbWV52KK30VckFWCHPWb2xdhQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:8b:cf:d1:b9:e0:64:10:13:b2:bd:10:17:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Aug 4 05:01:14 2025 GMT
Not After : Aug 5 05:01:14 2025 GMT
Subject: CN=511d72f94a9586afb1f71ba2d93a8c755bfb00a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:7d:52:fb:74:c8:31:81:79:c1:ea:c3:69:
7b:af:07:6f:51:2c:48:97:03:9f:f7:88:2d:14:0b:
df:ce:1e:b4:d2:34:74:1e:41:97:7e:e9:da:73:45:
02:ab:1d:9f:e9:a8:f4:9e:e8:01:05:c0:30:32:a8:
7a:c3:ea:e4:43:2f:67:9b:6b:ca:d4:f6:4f:3f:54:
75:f0:5a:41:9c:93:e2:02:ce:30:ec:b7:50:68:c4:
2e:c0:78:af:80:eb:0b:82:36:c0:8d:38:dc:a8:e9:
85:7c:20:ea:dc:92:23:4b:21:e4:da:c1:b7:d0:7a:
62:9f:ca:ad:85:31:e6:c7:0b:4f:5c:00:b6:8b:e9:
01:7c:45:90:d1:5f:93:68:55:23:4d:84:05:c9:1d:
a1:b1:54:22:eb:aa:2d:4b:89:c5:e6:02:23:79:47:
ec:64:bb:0e:15:56:5f:d2:bb:50:35:96:9c:a7:7d:
00:6e:f1:be:f6:8d:21:8a:62:bf:e1:9b:13:7d:b2:
18:cc:e6:62:34:1a:ea:0f:90:a0:6e:bb:e0:66:c8:
71:be:d9:8f:2d:73:5d:39:cd:bc:86:7c:1b:c1:77:
21:b8:3a:bf:91:be:1c:87:b1:84:83:e4:e7:e1:41:
46:8f:2c:6a:6d:6a:50:da:0c:f2:2f:6b:74:17:c3:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:72:F9:4A:95:86:AF:B1:F7:1B:A2:D9:3A:8C:75:5B:FB:00:A5
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0f:ed:5d:f5:a5:38:d3:08:99:5d:97:83:10:94:68:0d:ed:
85:5c:64:7d:2b:d9:d7:b2:cc:15:1c:9e:8b:7b:8a:eb:cd:cc:
d9:71:a0:9f:3d:71:a0:c2:30:c4:8d:41:62:5e:2b:e5:42:4d:
5e:99:05:96:dd:5a:33:21:ff:28:ec:d7:56:b7:8c:28:d4:c1:
93:e3:97:73:44:60:dd:44:f8:7e:57:47:a5:f1:8b:90:bc:fc:
f8:40:9c:27:df:df:5c:5d:93:4f:90:4b:4a:48:ba:c7:38:19:
46:73:f2:13:d6:8f:02:94:34:94:4e:d0:87:28:92:db:e2:b0:
9d:21:7c:a3:be:5b:5d:da:8c:37:bc:6c:ff:a2:49:97:a2:f7:
bc:81:70:1c:41:16:45:b3:b6:55:67:48:23:99:96:bd:31:a5:
bc:3a:4d:2f:57:e6:98:65:06:78:7f:eb:e6:0f:85:b9:28:56:
99:6d:99:2e:01:c2:af:ca:c3:46:5e:82:b1:6d:34:0c:cc:18:
ba:70:77:9f:8f:b9:0a:a6:b1:0f:6a:76:2f:1c:45:15:cc:e0:
18:b0:10:45:32:16:e0:84:54:2d:0d:e7:1d:7b:01:a4:2f:4b:
26:e3:b5:ad:b5:3c:ae:25:72:70:50:37:44:fe:fd:71:81:f3:
42:01:8c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdIvP0bngZBATsr0QF2RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh
ZDJmMDkwHhcNMjUwODA0MDUwMTE0WhcNMjUwODA1MDUwMTE0WjAzMTEwLwYDVQQD
Eyg1MTFkNzJmOTRhOTU4NmFmYjFmNzFiYTJkOTNhOGM3NTViZmIwMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mh9Uvt0yDGBecHqw2l7rwdvUSxI
lwOf94gtFAvfzh600jR0HkGXfunac0UCqx2f6aj0nugBBcAwMqh6w+rkQy9nm2vK
1PZPP1R18FpBnJPiAs4w7LdQaMQuwHivgOsLgjbAjTjcqOmFfCDq3JIjSyHk2sG3
0Hpin8qthTHmxwtPXAC2i+kBfEWQ0V+TaFUjTYQFyR2hsVQi66otS4nF5gIjeUfs
ZLsOFVZf0rtQNZacp30AbvG+9o0himK/4ZsTfbIYzOZiNBrqD5CgbrvgZshxvtmP
LXNdOc28hnwbwXchuDq/kb4ch7GEg+Tn4UFGjyxqbWpQ2gzyL2t0F8O/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEdcvlKlYavsfcbotk6jHVb+wClMB8GA1UdIwQY
MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt
MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz
LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA/tXfWl
ONMImV2XgxCUaA3thVxkfSvZ17LMFRyei3uK683M2XGgnz1xoMIwxI1BYl4r5UJN
XpkFlt1aMyH/KOzXVreMKNTBk+OXc0Rg3UT4fldHpfGLkLz8+ECcJ9/fXF2TT5BL
Ski6xzgZRnPyE9aPApQ0lE7QhyiS2+KwnSF8o75bXdqMN7xs/6JJl6L3vIFwHEEW
RbO2VWdII5mWvTGlvDpNL1fmmGUGeH/r5g+FuShWmW2ZLgHCr8rDRl6CsW00DMwY
unB3n4+5CqaxD2p2LxxFFczgGLAQRTIW4IRULQ3nHXsBpC9LJuO1rbU8riVycFA3
RP79cYHzQgGMaA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:53 2025 by rpki-client