Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: yumlTv8+T3CbgCw9N15+lfAM/FSHvcQMsq8fIP9tpN4=
Subject key identifier: 20:8D:84:13:77:50:8D:4A:EA:47:C6:BC:B4:9C:22:CB:39:42:45:1F
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0198737466498BA74DD897125357D562C4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 1628
Signing time: Mon 04 Aug 2025 05:01:04 +0000
Manifest this update: Mon 04 Aug 2025 05:01:04 +0000
Manifest next update: Tue 05 Aug 2025 05:01:04 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: gPvNp61InzwKJi64BRDDYhKKG5vKdoCFGckpYV8/9OI=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:66:49:8b:a7:4d:d8:97:12:53:57:d5:62:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Aug 4 05:01:04 2025 GMT
Not After : Aug 5 05:01:04 2025 GMT
Subject: CN=208d841377508d4aea47c6bcb49c22cb3942451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:ed:b9:60:bd:d0:a9:7a:4b:4a:59:5d:f7:
29:f7:c8:0f:a3:87:5f:28:e7:d8:6a:f2:c6:4d:18:
d1:7f:a4:5b:0e:56:44:9f:2c:38:ba:9e:5b:45:63:
3a:55:a2:c1:d0:6b:f4:f0:ec:77:63:f4:50:f4:a0:
a3:07:b7:45:0b:a0:d4:93:55:fb:6d:c6:fd:e6:3f:
d0:5d:c9:94:4b:a5:96:17:f9:c3:86:fa:21:86:54:
8e:49:14:e5:6a:84:69:b3:c3:3a:f5:f2:5a:12:e5:
65:ea:7f:4b:0d:6c:76:2c:c9:65:1e:d9:a6:e3:5e:
b0:a7:10:61:2d:d6:5c:59:cb:02:35:3f:6f:30:1e:
3d:4d:1e:27:4e:c4:d2:64:58:07:18:d5:59:61:6b:
c7:40:0d:58:78:28:1b:ad:9b:82:0a:c5:de:f8:07:
ce:47:3a:3d:d5:e0:59:f1:9f:da:d5:5e:69:62:50:
3b:10:65:2c:4c:a1:d1:8f:59:12:d7:92:64:1f:50:
20:4f:6a:f6:36:cd:2f:8c:8f:35:4c:7e:03:89:ef:
f0:19:95:2b:7b:aa:24:75:f9:38:a4:1c:4c:51:b7:
28:e5:6a:e7:dc:38:2d:aa:67:cd:b8:3a:67:fd:f5:
fa:c6:7d:f1:f3:a9:2d:00:cf:33:dc:e7:65:aa:40:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:84:13:77:50:8D:4A:EA:47:C6:BC:B4:9C:22:CB:39:42:45:1F
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:5a:b3:a7:c2:f7:25:93:41:58:50:66:a7:e8:97:72:7a:
16:28:02:df:83:92:8f:c0:05:6e:e9:4e:e5:32:79:d6:99:98:
d8:a8:2d:3b:d8:4a:dd:89:fe:5c:41:17:57:3b:cf:51:e6:50:
09:4d:15:df:1e:56:58:e4:ee:15:7a:e6:df:08:10:ee:fd:87:
ca:74:a0:38:0a:df:7d:39:02:b8:7b:3e:2a:91:cc:b1:02:10:
aa:93:f6:9f:28:c6:9d:28:51:f7:65:a1:fa:00:74:c2:e7:00:
9e:37:86:3b:11:ec:84:fc:01:01:0c:e9:55:95:8a:8b:93:94:
07:c3:ad:04:0f:91:ee:bc:cb:ab:a9:7f:fb:5e:c6:67:23:b9:
50:3f:cb:ca:d8:0a:2f:ec:03:3b:06:2b:65:a4:6c:a0:1c:53:
a9:6a:fd:e7:f6:16:cf:35:84:6a:85:53:89:f8:0d:21:97:7f:
f6:1b:86:c0:bd:60:07:ad:5e:80:b0:5b:e9:b3:0d:8e:8d:e9:
10:e8:be:66:8f:dc:de:9f:1a:0a:eb:5d:2a:96:a5:d3:ec:5a:
56:24:b6:cd:94:20:1d:cf:b5:91:46:4f:6f:d4:a2:d3:e1:50:
7d:1c:fa:21:fb:13:ef:38:02:2c:2b:03:f8:94:26:87:21:5b:
33:ea:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:50 2025 by rpki-client