Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: D7JdJc3s48Qp40Hb7G77F/XUcVlhkea/BNsXjopImok=
Subject key identifier: A7:C7:61:79:E5:E0:17:55:A1:A7:E9:39:A7:AC:CC:3D:30:5C:34:A3
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 019A4F62BA09AFCE748FD1B0A362D5CDEC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:01:01 +0000
Manifest this update: Tue 04 Nov 2025 15:01:01 +0000
Manifest next update: Wed 05 Nov 2025 15:01:01 +0000
Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: oItDXDuLX20mQBg+rHRQQIyu1TDt3Pe04/2LGUYGm/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ba:09:af:ce:74:8f:d1:b0:a3:62:d5:cd:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Nov 4 15:01:01 2025 GMT
Not After : Nov 5 15:01:01 2025 GMT
Subject: CN=a7c76179e5e01755a1a7e939a7accc3d305c34a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:03:fc:73:17:53:91:75:52:4c:05:15:56:
2c:ac:a4:b0:80:ea:cc:2f:5b:b3:6e:50:fa:20:18:
33:66:7f:c6:2e:34:0c:99:7e:f2:2c:c2:f8:71:a7:
c8:00:df:25:88:f6:0b:69:5b:7b:85:19:a3:cb:ab:
eb:c3:3f:0e:ec:a8:9c:97:26:38:d6:1f:fd:01:28:
17:05:4a:fb:a4:2d:87:30:04:f7:7e:12:fc:2d:7c:
a9:36:2b:a4:c4:eb:e5:3b:9d:05:86:93:dc:e5:bc:
ba:31:8e:66:b9:38:25:ad:2d:35:57:0c:67:53:58:
3c:e2:2b:5e:7b:4d:85:d9:e5:8b:a3:ea:87:26:c8:
4b:19:a0:f3:76:d8:b3:f0:c9:e3:6b:ae:b0:d0:51:
22:f7:86:0a:0a:b0:8b:3c:02:55:e0:ed:f2:57:7b:
f5:11:46:0b:fd:02:5b:58:fc:c4:c9:d2:27:bf:2f:
af:92:e2:16:35:e5:bc:9e:58:31:09:26:b6:a4:5c:
2a:6a:18:44:f6:b3:72:cd:3c:03:4c:37:8b:3b:75:
71:49:2b:c5:63:84:1c:9b:69:08:b0:d8:96:cb:6b:
98:e3:00:b4:9c:33:5d:c4:61:dd:2b:da:32:3e:ee:
27:20:c1:71:94:63:ff:20:37:05:33:65:46:98:f1:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:61:79:E5:E0:17:55:A1:A7:E9:39:A7:AC:CC:3D:30:5C:34:A3
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:92:92:47:67:af:85:f6:e3:4e:14:5a:d1:28:51:86:a8:
c2:ee:47:1e:ea:c0:9c:04:79:c0:b6:ee:f9:db:3f:19:91:be:
1d:5c:c8:ef:c7:b5:22:6d:8f:73:8c:ae:21:48:07:4c:59:9d:
da:36:7d:6f:b9:03:0f:2a:85:69:fc:f3:39:0d:e5:fc:af:ea:
c6:31:5f:0e:95:c6:ce:8c:22:44:5f:d4:d0:08:68:86:85:ca:
5e:7e:49:fe:73:f9:d1:06:58:50:ea:d9:a7:78:0a:bd:3b:79:
82:db:b5:17:98:fa:de:a3:0a:f6:67:a3:26:ed:8e:f9:38:9d:
75:c3:17:fc:81:9c:5a:9d:51:99:96:6d:01:29:c3:a5:36:61:
d7:80:15:2f:e8:92:3d:21:a2:2e:cc:b7:53:14:01:36:71:46:
81:56:e8:74:0e:4f:ba:db:6c:b1:c6:ee:e7:3b:a5:70:f4:6e:
86:9f:a4:e5:ff:72:fb:4c:e0:2c:6a:89:97:51:82:9b:21:1a:
b4:6a:bc:64:ff:fa:15:59:5e:45:81:f2:0c:83:1b:8e:ce:6a:
95:14:a4:68:64:c0:7b:40:a1:46:24:c9:8a:d8:ee:26:60:76:
d7:4b:a8:0a:82:ce:bf:87:6f:0a:6b:39:ce:5f:26:0e:4f:33:
b4:49:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:55 2025 by rpki-client