Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: qu+atKG6OHrjHDMh0v4iGf9JYkJfubOZCxt1YsQclfg=
Subject key identifier: D9:0C:76:15:7E:80:AA:50:C9:A7:D4:1E:79:CD:71:67:C2:E5:23:C6
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 0199FF597C1E40A6D1A086E177987ADD3F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 0F6F
Signing time: Mon 20 Oct 2025 02:01:18 +0000
Manifest this update: Mon 20 Oct 2025 02:01:18 +0000
Manifest next update: Tue 21 Oct 2025 02:01:18 +0000
Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: WbbJ9koMJcSgBJcO8rEhVbhWHeuohpGFhOGFBpe6MKU=)
2: ninSWYVRxBIemI94j-PYMUSu2YA.roa (hash: QrrWAcI9XBwetBsmpQPw5YCVH1U9RR0mswsdxCxACug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7c:1e:40:a6:d1:a0:86:e1:77:98:7a:dd:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Oct 20 02:01:18 2025 GMT
Not After : Oct 21 02:01:18 2025 GMT
Subject: CN=d90c76157e80aa50c9a7d41e79cd7167c2e523c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:67:f9:89:e5:17:a7:1e:c5:0e:74:fa:a0:
62:65:71:6f:7a:8a:2c:39:c0:ed:c1:ef:bb:13:4c:
73:f4:d6:21:9c:d6:ac:01:f3:8c:dc:70:e2:a4:da:
f5:5a:0d:6e:04:df:38:fd:14:1c:af:f7:b9:d8:95:
51:83:bc:0a:7c:0a:28:50:05:d3:90:1b:ed:a9:62:
c2:91:c9:f5:d1:c3:c1:30:71:30:a6:d5:f3:aa:7b:
25:87:97:01:9f:fa:bb:f1:e9:f7:1f:7f:47:5a:2b:
b2:1d:92:1e:1a:f8:fa:e1:d4:f2:75:26:e7:59:11:
3f:05:5f:ad:03:fb:26:6d:56:79:0f:e9:46:4e:1a:
ae:e7:1d:9e:0f:89:e1:0b:18:40:63:3d:02:51:15:
a0:f9:41:20:8e:71:40:13:31:5e:00:cc:41:91:b8:
e4:e9:8f:57:0e:11:3b:f7:fd:ce:1d:8c:2c:93:6f:
98:59:0f:a4:8c:d5:e3:eb:20:62:c7:6e:f6:cb:d4:
ed:25:84:d3:e5:83:58:97:83:2f:3a:ed:6c:31:3c:
d2:c3:27:8a:82:08:83:99:2a:44:9d:5a:96:02:6b:
79:9c:6f:5d:8e:36:c6:3f:34:5d:f3:1f:82:27:a4:
7e:d1:cf:fa:2e:16:94:3b:0f:ee:44:7d:03:93:9c:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:76:15:7E:80:AA:50:C9:A7:D4:1E:79:CD:71:67:C2:E5:23:C6
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:ba:e0:6a:9f:f1:00:c2:68:d6:9c:51:af:32:05:65:e6:
44:8e:cb:5f:1a:21:16:9b:af:00:df:4a:ab:be:2d:b6:90:ac:
7c:4f:78:fd:78:2b:bf:f7:4c:ea:af:26:51:e0:a4:28:f3:aa:
0b:38:54:18:ef:cc:e0:92:47:5c:67:a5:6e:36:4c:ae:03:f1:
1c:8d:ab:64:46:71:e6:b2:45:5b:28:ab:2b:34:c4:98:89:40:
53:fd:51:b6:13:c7:8b:12:89:92:99:5c:19:7e:68:26:9e:c3:
c7:c0:45:15:52:de:60:d8:e6:cc:54:ab:92:cb:e9:f9:be:76:
3a:a5:a2:ee:f3:07:ae:2f:24:9c:fb:64:12:28:57:d6:95:8d:
40:1b:9d:f7:ea:e0:b6:5b:e0:ea:66:10:45:0f:f7:63:99:e3:
ce:5e:cc:63:0b:0e:9f:f4:96:ed:f9:91:a1:f3:ab:95:4a:ca:
03:c1:d4:05:95:49:f5:bb:7e:2e:40:38:b4:0e:df:78:6a:ce:
8d:83:9b:99:48:3f:e6:0b:93:c8:71:f8:a3:7d:48:9b:76:be:
d2:63:14:70:b3:73:98:4a:81:7f:1b:4e:97:97:6c:9b:39:8a:
40:f7:3e:d0:11:22:ba:49:cf:55:26:81:98:3f:7a:3c:93:03:
03:8b:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:40 2025 by rpki-client