Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: m5zp53APkF2Ub/sVtkNJxpQa8PvrEDZcIMiQav/6WVs=
Subject key identifier: E7:49:70:B5:9B:32:82:60:24:09:95:8A:E7:13:1B:8D:41:AD:F6:84
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 0199FC590C34309DF7768A6312DC5D533420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 04A7
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: lJ/NAINDItIRJkPB+NBGM/UtbvJMENkJupHF4zSd6WA=)
2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0c:34:30:9d:f7:76:8a:63:12:dc:5d:53:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=e74970b59b3282602409958ae7131b8d41adf684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:d3:a4:d6:dd:42:a2:6f:5e:73:64:9f:9e:
ef:8c:f4:61:43:74:9a:73:bf:4d:fb:a7:0b:48:34:
e3:97:7f:76:ec:7e:52:77:d9:6b:92:86:15:74:5b:
59:f3:15:45:03:8a:2d:37:bd:fe:15:59:8e:20:d1:
4b:9c:0a:1f:f2:a5:f0:de:e2:19:5c:86:e0:b5:cb:
d7:08:ee:83:57:ef:52:8a:9d:ca:49:80:6b:a5:29:
05:e0:87:9b:13:3f:8e:6d:6a:1f:0d:d3:2c:ac:8a:
64:5c:b7:cb:70:db:56:f3:ed:ee:c4:e5:6d:be:69:
dd:cf:e5:c5:41:e0:46:04:62:10:8b:48:47:a0:04:
cc:6e:a5:75:b9:00:4a:e6:e0:b8:81:7e:2d:dc:c3:
a7:36:bd:9a:a3:6b:91:cd:af:53:9a:f2:17:9b:b8:
c2:2c:85:18:eb:ea:a9:15:c7:40:75:6c:e6:90:99:
d6:88:f9:0e:c5:6d:9a:3e:76:a1:be:ec:ce:0a:a0:
e1:be:07:10:c0:29:86:42:c8:3d:9a:15:1e:98:69:
30:81:36:1f:7c:b5:35:47:95:26:f0:2d:65:00:0d:
82:b3:cc:1a:40:ed:2a:d0:18:43:6b:ac:8c:32:1d:
b6:a7:db:fb:a4:0f:a6:c6:3a:6f:ec:f1:fd:b4:6f:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:70:B5:9B:32:82:60:24:09:95:8A:E7:13:1B:8D:41:AD:F6:84
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b6:f3:f4:4d:0f:de:79:9d:ed:41:ea:41:b4:bb:9c:f2:38:
62:23:68:1c:01:25:e7:49:7f:26:a1:5d:ec:69:c0:b0:b8:6c:
9d:4f:29:45:f9:58:b3:2d:88:42:bb:32:b8:cc:51:94:58:09:
5f:49:9d:35:54:7e:97:2f:02:a3:2b:fd:4e:8f:fd:2b:9e:93:
00:67:ea:e6:cf:fc:bd:27:0b:7a:20:02:09:c4:2a:05:63:b2:
b3:33:a4:94:07:9c:6e:e3:5d:2f:45:1b:b4:1c:78:c3:4f:88:
ad:83:40:78:16:1c:4a:de:6d:4e:f7:f7:96:06:81:80:dd:1d:
ac:4e:2f:6d:36:2d:39:5a:3c:fc:1e:00:86:d2:eb:c0:56:09:
24:90:24:ab:ec:68:d2:40:40:5f:16:49:16:7b:8d:90:26:ec:
56:67:d1:67:c6:25:c0:2c:7b:8a:1f:fe:09:a0:32:52:e3:c8:
f1:1d:01:69:ac:13:fd:5b:cb:69:14:9a:cb:9b:57:3b:38:ce:
9c:5f:ee:f9:d1:f3:4e:73:83:41:bd:fa:a6:38:39:72:96:a6:
6d:f1:aa:8d:23:be:ac:cd:15:af:25:27:10:81:89:86:50:27:
b5:1d:1b:a0:10:7c:f3:54:93:1e:d3:ea:25:a3:06:a3:1b:dd:
9e:0b:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:47 2025 by rpki-client