Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: rh2RMwZblYX0lxtIqSt7JU3G9zCZuyVG5GJIhTUws1k=
Subject key identifier: 49:CD:FE:81:9D:58:BC:F0:CD:F1:12:22:01:59:B6:34:1E:A2:35:20
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 0198D6CCEFC370761B3457D4EED7511E7E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 040F
Signing time: Sat 23 Aug 2025 12:00:11 +0000
Manifest this update: Sat 23 Aug 2025 12:00:11 +0000
Manifest next update: Sun 24 Aug 2025 12:00:11 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: 2Xn5jIgbJPetcjiGymZXOHr4WzVwwiG4h6ESBZhyQ7g=)
2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ef:c3:70:76:1b:34:57:d4:ee:d7:51:1e:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Aug 23 12:00:11 2025 GMT
Not After : Aug 24 12:00:11 2025 GMT
Subject: CN=49cdfe819d58bcf0cdf112220159b6341ea23520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:12:c4:38:59:1c:a5:07:0a:e1:ce:a1:be:
59:08:f8:2e:1b:f7:68:af:9c:e9:00:64:71:10:19:
ec:c4:55:27:ba:3e:62:46:fe:e9:97:d4:a4:a9:5c:
e8:0d:0d:ee:d7:1b:e8:b6:c2:67:88:23:0d:3a:09:
77:18:e3:ab:64:a3:65:a7:76:98:dc:58:83:97:65:
89:c3:8c:f3:4b:1e:34:b9:52:a7:76:2c:7b:8b:4f:
d6:55:86:f4:81:e0:6f:65:54:57:20:b8:37:e6:29:
aa:bf:26:7c:b7:fd:a3:66:53:d8:b9:63:fc:43:ee:
a9:7e:9c:a9:1e:96:58:b7:dc:e0:14:c0:dc:7f:e1:
13:d9:58:47:5d:1a:a0:9c:3a:89:6c:f7:3c:07:7c:
33:e7:34:a8:bd:9c:bf:fe:51:93:db:7b:35:b3:ae:
d9:19:b0:0e:99:05:83:45:70:90:52:15:7a:dd:9c:
1f:bf:03:31:4c:06:4d:38:b6:5a:3a:28:69:3f:42:
c1:ac:36:ef:82:db:e0:10:ef:d2:98:10:c0:bb:e4:
ac:8c:5d:aa:63:20:f1:82:3a:bd:5d:8f:91:43:f8:
57:0b:e3:0f:76:d1:23:4f:6a:21:44:41:e8:48:27:
4d:3a:32:45:03:38:32:e9:b1:eb:b1:55:df:1a:2a:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:FE:81:9D:58:BC:F0:CD:F1:12:22:01:59:B6:34:1E:A2:35:20
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b9:cf:3c:11:ec:af:8d:3a:60:f8:5c:7a:52:bb:11:5f:9f:
37:92:39:97:1b:ad:b6:65:da:2a:d8:ce:9d:0b:9c:cb:de:4a:
ca:b0:f2:f0:70:68:b4:a2:71:e6:b0:12:0b:da:d5:d1:cb:61:
25:89:cc:ce:ee:b3:c8:c3:9d:73:b9:73:e7:ee:c7:8e:69:78:
2c:c6:b6:d1:1a:0c:6b:e5:e6:c3:8a:44:83:ba:cd:fb:d4:61:
85:9c:6d:08:7c:9c:9f:ee:ec:9c:ef:a4:f8:d7:76:bb:35:99:
c0:7d:9b:81:6d:a0:cf:ff:a8:12:79:7a:34:6b:64:93:06:eb:
ad:00:04:fb:14:ec:f7:c3:06:02:6a:60:80:b8:eb:19:7a:d4:
3f:3e:55:44:e2:e6:e9:52:b9:02:d8:7f:b6:38:0d:2d:c6:49:
e6:99:0b:8a:25:5f:ec:c6:26:4d:77:6e:0d:6c:4c:0d:4b:77:
c1:96:3c:93:cf:e0:ec:ed:58:d9:4e:35:6f:c6:29:50:e9:e2:
6f:cc:99:61:36:b1:6d:68:2f:9d:8d:8f:57:63:5b:c1:18:61:
0a:68:cb:76:9f:6a:a6:a1:5e:e5:f7:60:34:a4:ae:d9:ef:bd:
e0:33:8f:32:7d:7f:43:53:e0:f4:6a:99:60:71:40:de:87:3d:
82:ec:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:58 2025 by rpki-client