Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: aoefsOcOwGbXVPt0J0yV4E20JIslBaQCNeAQFj1gtTw=
Subject key identifier: CC:DC:B4:F6:A3:A6:1E:1E:B1:CC:32:4F:0C:CD:FF:BC:3F:48:E2:01
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0199FB0F562B900DD949AFDCAA0A94E94992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 06:01:50 +0000
Manifest this update: Sun 19 Oct 2025 06:01:50 +0000
Manifest next update: Mon 20 Oct 2025 06:01:50 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: Yx8PWo6EA9mH9Iu16KbGmgwR/JGvA/sv4/IVqmtEEFM=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:56:2b:90:0d:d9:49:af:dc:aa:0a:94:e9:49:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Oct 19 06:01:50 2025 GMT
Not After : Oct 20 06:01:50 2025 GMT
Subject: CN=ccdcb4f6a3a61e1eb1cc324f0ccdffbc3f48e201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:b1:55:3a:ba:76:e4:51:36:4d:e5:68:d6:
79:d0:d9:f8:d5:96:cc:44:91:06:b4:4d:5b:b1:86:
6d:b3:fd:b8:17:6b:a5:ae:86:18:47:00:93:a1:41:
c8:e7:3e:7a:56:14:76:c9:e7:37:26:01:e6:2b:34:
62:9d:d8:e6:5a:72:45:26:7a:b7:fa:ad:29:91:cd:
87:ac:2e:ff:48:dd:cf:28:e0:1d:b3:ce:71:b8:c1:
5a:60:14:02:76:bf:83:6a:bf:80:78:06:a5:a1:aa:
21:00:a6:03:22:f7:53:c4:e9:e9:82:4a:cb:b4:f2:
8d:63:56:b7:85:2f:45:83:cc:40:18:04:cb:5b:ee:
71:bf:cd:53:20:ae:9b:c7:67:f7:f2:9f:c3:5b:83:
85:da:00:4c:d9:5c:5c:9c:dc:51:1f:bd:33:be:9b:
5a:ee:68:56:86:e1:c6:c8:46:c2:be:5a:76:c9:3b:
8e:1c:c2:84:7f:14:b7:2d:5d:cb:43:43:7e:03:a7:
c1:59:be:9f:dd:dc:a3:a5:ef:41:ff:76:97:b1:2f:
1b:e1:df:de:26:97:d4:b2:6c:4d:e2:09:c4:a9:f6:
08:30:c9:e6:7e:74:50:42:ce:ae:6b:7b:6e:6b:72:
27:67:3b:4d:f5:e0:cf:77:70:91:4c:65:20:a3:ee:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DC:B4:F6:A3:A6:1E:1E:B1:CC:32:4F:0C:CD:FF:BC:3F:48:E2:01
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:ac:12:13:36:32:8f:ac:ce:b8:04:9c:2b:eb:be:07:31:
cb:6d:8a:7b:e5:b5:2f:f7:52:26:d9:36:79:28:eb:af:62:5b:
9f:e6:c1:5a:4d:c9:1f:6f:46:fa:27:4c:7d:f9:8f:c7:85:d1:
e0:a7:98:72:43:7c:28:bf:f4:b1:3e:fa:b3:2a:df:7a:eb:86:
11:77:f8:81:44:83:e8:51:d4:79:98:fd:e3:24:e3:cf:9a:f7:
02:6f:43:f4:af:86:46:1b:f5:8e:43:49:b4:d0:22:a8:71:cd:
76:f5:d4:f9:24:e7:16:cc:a1:51:47:09:32:33:19:ad:fe:f4:
0f:15:a1:84:83:28:bc:52:7f:d1:65:21:d6:4f:36:b2:32:62:
3d:7a:1e:be:e3:b3:4e:8e:18:9a:4d:d2:fe:68:5d:cf:bb:3f:
7c:5f:4e:f5:c3:e7:0a:7c:48:d8:c2:b9:cf:d3:cd:9d:79:04:
51:69:c4:88:57:3b:b2:03:99:50:47:4c:3e:d1:9e:26:f0:33:
cf:22:fa:21:07:eb:8b:8c:8b:ab:d0:0e:03:98:e5:41:79:26:
bb:3f:ea:6d:0c:08:74:08:12:49:74:bb:72:0e:94:17:7e:2f:
24:ff:f0:c3:b7:8d:78:a4:e2:ef:5e:7a:cf:0b:f7:33:eb:11:
e7:ad:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:19 2025 by rpki-client