Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
File: HQhx_C6ZiS6hEVowITjh0ypiGCw.mft (raw, json)
Hash identifier: IFKZ6cSYMejSAixSBZ7c4WaZh6I3JyU/2m9cJ1oVyyM=
Subject key identifier: 9B:81:BC:B6:AB:80:37:CC:C8:30:D6:0F:7D:D1:5F:4A:AB:BA:31:46
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Certificate issuer: /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial: 019A4F62A173815A7370604EEC845B1C785E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: HQhx_C6ZiS6hEVowITjh0ypiGCw.crl (hash: Ci5mN05q+46WNecwzuYXlYLBFDIBn9C9zuKVktT4psk=)
2: LO1uxLKiirgi4DTjiceFUqHnZ_Q.roa (hash: Jtc+IuVms0/thPHj5bGPRIMsxU7hFLPzHKxvZdogizk=)
3: aWalfbOeEBKlHFJV-ENu8MAsZo4.roa (hash: EdxjZs6zvCXnFCAeiNpfiVYwCGvEbmMbWMZx7J9tRCc=)
4: ucuU-Uq0Xb62o4XqDQOup7WMShY.roa (hash: bTCTTFwhaYZdJywJ5h4MOhDury0ZGVdUw5QGOuUV0Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a1:73:81:5a:73:70:60:4e:ec:84:5b:1c:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=9b81bcb6ab8037ccc830d60f7dd15f4aabba3146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:5b:fe:ab:41:3c:7c:cd:88:99:7b:c6:65:
0a:60:fa:1b:06:2b:1e:64:f3:cc:9c:53:d9:0a:92:
e8:43:42:d0:99:f8:ef:f4:76:e3:28:a1:6e:32:56:
e9:ef:80:d9:f6:14:58:e1:56:cd:ab:b3:2c:80:f6:
a2:96:60:70:41:a5:eb:0f:a8:50:86:4a:53:3f:b7:
ec:8b:e0:25:fc:d0:8c:d8:25:2f:ca:09:93:26:07:
77:b7:64:47:39:58:d5:7a:5b:42:17:2e:1e:ba:b0:
05:4a:89:38:72:70:99:cc:0d:f7:2c:a6:4b:d9:21:
48:75:5b:d1:90:95:94:63:f7:e0:91:83:f2:cb:cb:
1a:89:0a:94:fa:2e:7f:35:05:96:54:3c:13:c6:1d:
7a:c0:fb:c8:83:20:4c:dd:81:60:22:70:1e:f1:d5:
05:6f:0e:47:8d:7d:ac:aa:0b:30:1c:84:28:1d:d5:
4d:87:34:ff:d7:58:61:35:63:c7:ca:e4:78:2a:df:
74:4d:36:96:74:e2:d1:fa:b1:91:4f:cd:28:ae:79:
e1:a6:1b:24:fc:f2:7e:d0:6a:ce:ba:dd:3e:2f:36:
54:40:8b:a9:72:55:f5:6b:ef:be:14:e0:07:16:56:
4b:50:13:87:17:50:fc:df:3b:4e:fc:78:71:d9:24:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:81:BC:B6:AB:80:37:CC:C8:30:D6:0F:7D:D1:5F:4A:AB:BA:31:46
X509v3 Authority Key Identifier:
keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:17:ae:2e:fb:a7:7a:e6:14:ef:63:78:92:3c:81:b4:fd:
72:a9:e6:e9:be:07:cc:49:45:cb:f5:d0:6c:f8:c0:36:f3:62:
53:ad:5d:79:d8:ab:11:d3:c9:61:9f:c0:02:c0:de:c1:75:5c:
37:3e:c3:8a:a9:0b:f8:23:a6:f0:37:70:8d:f3:b6:15:78:1b:
47:47:5c:44:b8:5f:43:03:53:f9:2b:f0:29:f8:da:8c:76:23:
22:03:a8:85:48:eb:cd:55:2d:9f:50:b5:b6:86:d4:26:e3:cb:
fd:c9:45:72:1b:78:2a:c5:d5:41:d4:c3:9a:a8:f4:f7:53:97:
cb:19:ad:73:fa:db:4f:9a:a3:f9:46:77:dc:4d:3b:0b:55:99:
1c:61:80:cc:0a:5d:e6:92:1a:7c:26:d0:7c:6a:31:65:51:ce:
9e:62:32:5d:e0:06:70:49:9d:8f:85:ef:99:61:f1:63:3f:95:
c3:37:61:8e:0a:67:d4:66:8a:cc:15:6e:7b:b6:8f:80:88:81:
18:5d:56:ff:dc:4e:5f:ec:37:73:5b:7b:a0:06:7a:81:4b:ed:
52:4f:ec:d7:c5:c7:2e:19:42:19:13:1b:3f:19:ce:19:96:f6:
23:16:d8:39:57:55:d9:74:72:b3:57:99:b8:b7:b1:99:85:91:
6d:d1:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:25 2025 by rpki-client