Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: 0GaqSkQHe42Fs+/0ppH2EaCFdtLFR5OTzkix0BJz7Rc=
Subject key identifier: 0C:DF:07:6A:2E:00:5F:86:9A:C6:2D:B7:F3:8A:36:2D:09:09:46:F7
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019A526306008E6B0DA9285CAF181C6A76B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1720
Signing time: Wed 05 Nov 2025 05:00:12 +0000
Manifest this update: Wed 05 Nov 2025 05:00:12 +0000
Manifest next update: Thu 06 Nov 2025 05:00:12 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: uzAWGND+POy1Vcg8MfW7r/Y4N3RGWdJWGNUKC4prWTc=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:06:00:8e:6b:0d:a9:28:5c:af:18:1c:6a:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Nov 5 05:00:12 2025 GMT
Not After : Nov 6 05:00:12 2025 GMT
Subject: CN=0cdf076a2e005f869ac62db7f38a362d090946f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:3d:67:13:b3:61:1d:70:95:e5:fa:2c:46:
47:6a:ee:cd:0f:03:12:e6:28:a4:ee:3d:87:68:e0:
db:6d:56:c4:65:d9:eb:ba:e3:b4:a2:26:1a:a6:a5:
e4:ab:94:83:0e:1e:7b:7f:47:b0:1d:ee:38:81:8b:
22:74:5e:78:1f:b9:44:1b:c9:a9:71:94:d0:47:95:
d5:11:bd:78:90:fa:e1:28:b9:49:21:18:d8:88:30:
b1:01:e3:84:1f:5c:33:9a:f4:19:7d:4a:c8:00:fa:
c9:ae:8e:4a:98:1f:e2:f7:3f:1f:6e:72:af:e6:a4:
c3:d0:a0:e0:ff:51:d2:5d:32:5d:0e:d7:0b:22:5d:
d7:bd:8a:a8:ed:95:bf:f8:49:13:c8:74:c5:6f:82:
8a:47:ca:93:7f:e3:4e:d2:cc:98:4a:e2:2a:6d:38:
2b:39:06:fe:f1:24:27:eb:ae:1b:82:1a:dc:94:05:
97:20:c3:c4:3f:b7:0d:74:0c:b1:28:8e:60:c1:7a:
ff:2e:2b:2a:46:9f:b6:50:c9:0c:8f:15:70:86:65:
5a:55:53:7e:ff:9c:62:bc:68:fb:9a:76:bc:5d:36:
42:8e:4b:d5:4a:f4:b3:a7:bf:ed:0e:ff:f3:9f:c6:
a1:7e:34:b8:18:b9:fb:3b:48:3b:0a:25:69:c4:5e:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DF:07:6A:2E:00:5F:86:9A:C6:2D:B7:F3:8A:36:2D:09:09:46:F7
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:80:fc:79:1b:9d:19:9f:86:19:cb:a0:e6:6a:a4:88:d4:26:
5b:1e:7a:3f:9c:9a:a4:ee:77:3a:c6:40:a1:a1:f5:cb:46:2a:
01:f0:ea:2a:7c:bb:5d:cb:72:0d:e2:37:95:ab:7b:e1:ec:04:
83:5f:1a:22:43:87:8d:49:de:4c:ec:37:6e:39:a9:f8:81:6f:
d6:e0:c0:07:ce:60:9a:b5:9b:6c:2d:d4:70:3a:17:52:46:f7:
61:23:e7:36:61:66:f9:9c:ba:89:cf:7f:60:f6:76:d9:ba:d7:
5f:95:6c:5c:92:30:87:bc:d3:29:cd:f7:ed:3c:ef:0f:f7:95:
87:33:99:2b:e4:8c:ce:9a:8f:fa:42:e7:bb:d4:57:fd:c0:05:
1e:e6:ec:0c:d0:81:e5:f3:bc:11:9b:8c:32:ba:25:f0:5d:35:
87:e4:80:4b:63:08:f7:9a:94:b7:c9:8f:61:90:b6:dc:72:a5:
dd:43:81:eb:1b:4b:b1:d4:71:b9:8f:0f:fd:f2:f4:fc:72:88:
97:7e:4b:9f:0e:85:79:3b:63:cf:1f:b5:49:68:7c:0f:49:6a:
50:2c:36:8f:ac:a7:c7:ec:b2:29:7a:e4:86:67:57:c3:82:9d:
2b:ac:e2:92:64:2b:ad:0e:65:4d:42:6b:a2:01:ef:a4:f2:b7:
98:be:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:48 2025 by rpki-client