Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: 1O7z5G6bxoAJI1WdVfWl96KYiClcwyU4FZksHaLBRgY=
Subject key identifier: C6:24:6F:27:63:8C:E5:74:BA:FD:4B:B0:09:40:D3:9E:B2:09:37:4E
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019A4EF52BF16AD70FC9DCA69B3DE2C05B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: BOHhfNogVYd472+Ei85yvOJq2fP9cSVgfgIc9BVazrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2b:f1:6a:d7:0f:c9:dc:a6:9b:3d:e2:c0:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=c6246f27638ce574bafd4bb00940d39eb209374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:1d:8a:be:fe:75:0f:d0:db:aa:6f:c4:c4:
2d:f5:ef:b1:29:bf:11:62:02:9c:f9:07:85:54:f4:
09:2f:3d:53:ae:1a:b3:c9:47:16:d7:8e:cc:db:cf:
ee:8b:ae:72:65:94:50:01:2e:a4:b5:36:b1:39:72:
3c:65:84:cf:04:02:4d:ea:c5:c3:18:a8:5e:fa:42:
ae:e5:14:13:3f:bb:fc:d2:26:b2:32:24:6b:6c:a2:
f8:25:0e:aa:f3:49:25:73:b6:ce:e9:1b:59:25:aa:
ef:82:91:59:9d:a0:0c:57:12:71:da:6f:1c:60:9b:
cf:ac:62:5e:b2:8f:73:1e:ac:00:7b:7b:9a:a6:fc:
2e:09:51:f7:7f:6f:66:14:71:2b:b2:86:38:80:af:
4f:54:eb:15:9c:c4:14:2a:db:eb:58:47:40:40:71:
52:53:86:64:b8:a0:f3:12:ac:ce:fb:e4:9b:3c:79:
d6:b1:1f:0a:71:6b:85:dc:b4:04:16:4e:27:5f:21:
07:62:00:87:c7:0d:23:ca:12:17:f9:0a:a1:1f:0d:
47:f0:ab:6d:6e:ad:00:fb:77:38:a6:f8:e5:99:1b:
4c:fe:78:37:ed:6c:cd:6a:96:60:00:5b:da:96:5e:
51:c1:6d:dc:1c:21:7e:2e:f6:51:8d:c2:04:66:72:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:6F:27:63:8C:E5:74:BA:FD:4B:B0:09:40:D3:9E:B2:09:37:4E
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:fb:99:20:10:df:39:90:f2:9a:ae:ca:95:d2:81:91:4e:
a3:96:85:9c:77:36:a6:2c:b9:e8:db:e9:b3:a7:e0:97:1a:bb:
2d:67:fc:3c:db:df:92:af:b2:cf:a0:58:d6:67:b1:2e:3e:5e:
02:5e:97:ab:6b:eb:f3:e9:f7:1b:ba:27:c0:36:fe:ba:60:d7:
a1:ac:52:87:98:a1:67:45:80:bf:7a:7c:81:f3:be:2b:67:6c:
17:9f:e5:40:4d:7c:dc:4e:f8:58:7d:2a:19:c7:f8:46:87:e4:
31:24:21:ad:2f:5e:fa:b8:47:c9:aa:c4:dd:be:de:2c:e5:2e:
06:d7:9a:43:19:a4:87:8c:34:07:5d:84:17:20:d0:34:1c:ac:
ac:a1:82:41:fe:1c:85:78:90:7c:4a:83:34:3a:f4:dd:01:ed:
f3:fa:5b:0f:91:ac:9f:fe:3b:ea:cb:02:f1:7d:8f:e4:fa:08:
e7:b6:99:5a:7e:8e:da:db:6c:69:62:c2:29:d8:ba:eb:00:b8:
35:51:ec:6c:e5:0c:bd:d8:af:5b:56:aa:87:d0:41:6a:49:1e:
c6:7d:dd:8b:f9:9c:9d:0e:f5:68:2d:65:71:9d:bc:85:b6:f2:
c9:ff:e8:8a:e8:9e:e6:1e:0f:74:a6:96:18:d9:f7:7d:12:b0:
60:71:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:43 2025 by rpki-client