Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: nh+Lsu54FVvO9mPB/iVdHnK2OLnJoQuu8sItBzKGdMQ=
Subject key identifier: 55:8D:5B:6A:A4:68:6B:38:7A:63:71:AA:54:22:87:92:69:B0:FB:8C
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 019A4D741CE0549AD337AE8A6343DC3332B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: SG077kWsuAUml7Y2fclcC86UpeIEyILuUtk0pCuGnp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1c:e0:54:9a:d3:37:ae:8a:63:43:dc:33:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=558d5b6aa4686b387a6371aa5422879269b0fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:d4:0e:3e:88:b7:ff:29:7e:a9:d8:76:c5:
9e:5e:4b:60:3c:c7:47:95:de:50:fb:25:cb:33:b1:
6d:1f:6f:93:c3:39:f3:7f:0e:50:f6:dc:51:53:4c:
92:b1:ff:02:0a:96:4f:d4:13:63:98:fc:1f:b8:3d:
15:64:c3:0b:bd:38:85:5e:eb:c1:85:9c:ac:c0:bd:
48:6c:ef:02:89:b3:31:15:57:79:73:25:df:02:b0:
c1:3d:db:65:ab:ea:f2:93:0c:7c:12:98:ed:07:61:
95:31:10:3f:d5:a5:50:95:58:e0:2a:25:85:55:6f:
4f:73:75:90:f5:bb:42:fb:3a:ea:d9:c1:1a:10:fc:
9b:da:3d:cf:1a:e8:a3:f1:02:99:c3:06:f2:1f:b6:
a2:05:8c:f6:d6:49:05:1b:06:6a:07:ac:a5:ff:47:
3d:ce:11:a8:9b:89:83:d4:aa:5d:57:16:95:00:29:
85:e0:ac:8a:19:07:65:cf:7d:a9:c9:fd:ca:4e:9f:
78:a0:ea:c7:17:73:ac:c7:6a:76:40:06:e7:87:cd:
e9:fa:fb:3f:2c:c3:9d:63:27:9c:e2:c5:f3:ac:b6:
3d:46:01:fd:d5:86:72:83:bf:25:b4:1c:48:75:55:
f9:f3:18:1b:b8:de:8f:19:33:89:ee:db:fb:0a:76:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:5B:6A:A4:68:6B:38:7A:63:71:AA:54:22:87:92:69:B0:FB:8C
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:34:b6:88:a9:92:78:a5:40:f8:0a:e3:9c:ba:e5:16:de:
82:f9:9d:71:2d:b5:26:e3:70:ff:c5:ca:eb:60:7c:f6:71:87:
e2:16:68:17:56:b5:bd:47:ea:76:0a:fe:fd:e4:ad:cc:c0:8d:
b0:ff:13:f7:cf:83:d6:d5:ad:75:65:80:1e:b3:1f:8d:39:a9:
3e:e1:74:da:7e:eb:95:70:8e:0b:59:75:f8:bf:7a:de:75:98:
a5:1a:53:99:75:b6:4f:3d:ef:dc:7a:d1:76:af:6d:1c:23:d7:
bd:0a:41:2f:6c:f7:5a:eb:c0:07:83:d5:ba:40:e1:27:9a:a8:
5a:05:de:09:03:75:d1:c6:be:86:54:71:60:45:fc:8b:bd:cc:
43:19:15:af:b5:59:39:bb:43:a0:ea:80:cd:b1:ea:25:6a:da:
89:63:d3:9d:75:6a:3d:4c:4d:48:bd:9e:d2:68:49:a0:a4:90:
eb:d7:08:aa:6e:ab:2b:c4:b1:2e:ae:f9:b9:19:a5:8a:7a:0a:
d4:9b:88:9a:45:37:95:a2:9d:9b:90:b0:4e:7a:fd:a5:c4:6c:
e1:a6:91:48:54:3f:a1:bf:8b:77:de:26:b8:80:4e:02:39:6c:
25:05:2c:76:f1:bd:5a:1a:66:e9:46:da:27:fb:ae:6d:28:20:
da:2b:11:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBzgVJrTN66KY0PcMzKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTU1OWQ4YmY2YWMyZDg2OGQwNjY1YWQ1N2QyYzZhYzE0
NzIxOTMwHhcNMjUxMTA0MDYwMDQ2WhcNMjUxMTA1MDYwMDQ2WjAzMTEwLwYDVQQD
Eyg1NThkNWI2YWE0Njg2YjM4N2E2MzcxYWE1NDIyODc5MjY5YjBmYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+XUDj6It/8pfqnYdsWeXktgPMdH
ld5Q+yXLM7FtH2+Twznzfw5Q9txRU0ySsf8CCpZP1BNjmPwfuD0VZMMLvTiFXuvB
hZyswL1IbO8CibMxFVd5cyXfArDBPdtlq+rykwx8EpjtB2GVMRA/1aVQlVjgKiWF
VW9Pc3WQ9btC+zrq2cEaEPyb2j3PGuij8QKZwwbyH7aiBYz21kkFGwZqB6yl/0c9
zhGom4mD1KpdVxaVACmF4KyKGQdlz32pyf3KTp94oOrHF3Osx2p2QAbnh83p+vs/
LMOdYyec4sXzrLY9RgH91YZyg78ltBxIdVX58xgbuN6PGTOJ7tv7CnZF+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWNW2qkaGs4emNxqlQih5JpsPuMMB8GA1UdIwQY
MBaAFB6lWdi/asLYaNBmWtV9LGrBRyGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEt
NWZmY2M0NmFlN2I1LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80ZmI3ODUtZmZmMS00M2EzLWFmZDEtNWZmY2M0NmFlN2I1
LzEvSHFWWjJMOXF3dGhvMEdaYTFYMHNhc0ZISVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfo0toip
knilQPgK45y65RbegvmdcS21JuNw/8XK62B89nGH4hZoF1a1vUfqdgr+/eStzMCN
sP8T98+D1tWtdWWAHrMfjTmpPuF02n7rlXCOC1l1+L963nWYpRpTmXW2Tz3v3HrR
dq9tHCPXvQpBL2z3WuvAB4PVukDhJ5qoWgXeCQN10ca+hlRxYEX8i73MQxkVr7VZ
ObtDoOqAzbHqJWraiWPTnXVqPUxNSL2e0mhJoKSQ69cIqm6rK8SxLq75uRmlinoK
1JuImkU3laKdm5CwTnr9pcRs4aaRSFQ/ob+Ld94muIBOAjlsJQUsdvG9Whpm6Uba
J/uubSgg2isRXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:01 2025 by rpki-client