Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
File: HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft (raw, json)
Hash identifier: QyrQw5RUINBl9rOFzRSZz8IJBesV21UREHOJEk9zrbs=
Subject key identifier: 14:43:9E:A7:3A:54:86:2B:E5:C9:8A:6A:EE:17:70:66:57:5F:D4:07
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0198808B42201A31509C2FF39172F24804C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
Manifest number: 1590
Signing time: Wed 06 Aug 2025 18:01:06 +0000
Manifest this update: Wed 06 Aug 2025 18:01:06 +0000
Manifest next update: Thu 07 Aug 2025 18:01:06 +0000
Files and hashes: 1: 81MEacBenBgmbO5jhDxF0nT9AY8.roa (hash: vqTM9hVXCE9d+gr3kAinLULx9Hs2eNhvPcIV7jj+wQo=)
2: HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl (hash: FQGobfNOStvic/P80qa9gIR6rGawtN0wcCX/oDp7cQQ=)
3: sdKlP2Aw2qctGsD4JmkFw0F6ogE.roa (hash: QHNv9dzaWkHzsPtxPcBQqXpHwKOh3KwCvpG8ivysLbs=)
4: uxkgUTNHz5hEl5ZXCX6UmUPRqGc.roa (hash: L+VrhfELaxB0CKXlAjrRZtLxN2tzA9plKPHYSxcGzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:42:20:1a:31:50:9c:2f:f3:91:72:f2:48:04:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Aug 6 18:01:06 2025 GMT
Not After : Aug 7 18:01:06 2025 GMT
Subject: CN=14439ea73a54862be5c98a6aee177066575fd407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:8a:62:b6:16:02:6a:99:f9:7e:59:b6:b7:
16:9d:05:80:c5:7a:db:ce:61:f1:36:dc:2f:9e:37:
56:c3:fe:44:73:e1:e3:aa:8d:a5:83:50:ff:a5:b7:
ce:a8:e1:f0:11:7f:9f:06:8d:5a:f7:db:b0:24:22:
80:b3:0a:5d:15:96:9e:22:9f:57:ab:54:b2:55:7c:
e3:ed:52:5d:f4:ff:ee:1d:ea:e9:d3:38:c0:86:66:
90:4b:7e:7a:c0:86:29:40:da:ed:48:15:25:4c:e9:
59:9c:bf:cb:69:62:46:ab:2e:95:a3:ec:79:1b:4d:
e6:df:2d:10:0f:f5:80:34:c9:bc:42:25:4c:cd:b7:
7f:77:f5:de:98:97:23:87:23:3e:10:b6:22:15:3a:
f9:27:18:e1:96:ea:c4:7f:3e:71:08:4e:f1:4c:b6:
a5:6e:17:68:18:de:ff:e3:d7:b9:cd:b1:1c:7f:3e:
69:cc:8c:18:5c:bd:35:77:98:d1:3d:87:61:8c:1c:
a5:4c:f0:a5:7d:58:ed:5e:3a:0f:2f:37:5c:4c:16:
d1:88:d1:7d:1b:1b:a3:95:1b:46:97:b5:b6:5a:91:
90:a1:a3:0a:dc:50:cc:fb:df:ba:84:08:2f:c4:f9:
85:9a:a2:0a:67:54:1b:cf:ed:93:f1:d5:15:9d:ef:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:9E:A7:3A:54:86:2B:E5:C9:8A:6A:EE:17:70:66:57:5F:D4:07
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:d9:48:4e:b6:b5:33:c6:9c:f0:9f:fa:42:a8:ca:27:59:
f4:2e:11:fd:08:fc:3f:82:cd:b1:0d:ab:1e:02:7f:57:74:36:
f3:9d:5b:6c:ad:7d:4c:3e:a7:70:09:d1:3d:a1:cf:b8:74:03:
2a:39:ec:bc:38:2b:85:2b:e4:b3:93:a6:ed:50:50:2c:21:c9:
bc:58:f8:26:e2:49:31:fa:82:0c:ee:95:6d:f2:31:b3:b1:f3:
26:47:a4:99:f2:a9:e6:90:07:68:d1:36:e5:64:8e:fa:45:e8:
73:cc:72:1a:88:e4:0d:dd:a2:3e:26:9a:56:5c:ec:f6:3c:de:
85:48:c6:d8:30:b8:ab:8e:d3:5c:0d:bd:45:3a:bc:17:62:81:
5a:50:18:6e:81:09:85:c9:60:f3:c3:44:88:51:b3:60:c5:03:
a1:03:f0:ac:5d:98:93:c9:8f:e2:34:c8:e9:dd:f2:2a:48:1b:
5c:48:dc:bc:0a:16:23:11:56:14:bf:dc:e9:14:4e:e9:cf:3d:
99:b4:53:ac:6d:4b:41:b5:db:bc:15:18:49:d6:52:c7:49:5c:
ab:ec:65:b2:89:1d:1f:f7:d7:bb:de:11:0f:52:fd:cb:fc:c5:
a2:11:4c:70:b4:70:4b:2a:f4:67:ae:34:eb:b3:d3:68:ba:93:
5f:4d:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:53:07 2025 by rpki-client