Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: gdAui+tu+68tLQzTtic53LqXsf/xVGlC51mHy1WPNFo=
Subject key identifier: E7:7A:FA:A8:32:D4:C5:8B:51:9F:C9:42:03:AF:FF:C5:F9:97:8B:A2
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0198D583C905CAC0DF775F57E3469308587B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 15DE
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: HBT+yqf5ElYWWhHJ4XlTm0ei+Kj66Hu8wtXua+z6beI=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c9:05:ca:c0:df:77:5f:57:e3:46:93:08:58:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=e77afaa832d4c58b519fc94203afffc5f9978ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:2c:a1:36:18:59:02:44:10:50:2a:49:a6:
54:da:1a:fb:ec:60:77:35:9c:1f:f6:64:a5:48:33:
e7:cb:46:bb:c5:4a:40:eb:7b:96:69:76:02:74:5f:
60:30:88:ea:2b:85:ca:54:9b:ca:e4:f7:1b:38:91:
85:8b:93:41:57:ee:64:d4:83:33:6b:e7:af:bf:2a:
d8:9d:59:76:ec:89:09:ae:84:32:6b:7e:c5:5e:b5:
9e:8b:e4:e6:91:ff:1e:10:1a:19:7d:40:14:00:6a:
0e:21:e6:68:1d:19:69:57:56:a9:9a:c6:40:14:7d:
d0:db:34:53:bc:9a:97:11:bf:dd:19:09:ff:da:85:
0e:af:f2:cc:87:4d:ac:df:23:06:db:30:9f:66:7f:
83:af:2c:b1:35:3c:f3:ec:90:fa:c6:d6:4b:64:8b:
ee:b9:23:d2:f7:0c:6a:c5:0c:7f:32:b4:8a:15:de:
ef:bf:4e:0a:f9:7f:1f:33:37:53:9a:f7:77:42:06:
00:7b:46:bf:b9:0d:6e:09:2d:e8:01:de:d6:b8:8f:
79:ce:2a:e6:25:91:cb:ca:9b:a3:39:0f:34:2a:c1:
bf:59:20:d7:16:ce:5d:ec:28:27:7c:1d:1f:08:04:
ee:91:02:9e:e3:5e:74:8b:62:56:5c:71:8e:68:22:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:FA:A8:32:D4:C5:8B:51:9F:C9:42:03:AF:FF:C5:F9:97:8B:A2
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6a:34:0b:4f:13:20:10:a6:94:98:36:34:ce:4a:c5:ea:81:
b4:17:c5:cd:53:d9:cd:42:fe:5f:10:a9:5f:07:08:5a:c1:f9:
95:57:ca:db:9b:2c:3b:7d:0a:57:eb:11:fa:84:bb:6d:c0:c6:
c0:f9:d6:c9:2f:e3:6f:37:3c:6c:54:b9:8a:22:41:0e:91:35:
a8:26:28:d9:13:78:0b:dc:51:73:15:f8:95:ac:e6:34:35:6c:
39:a8:fe:87:a9:b6:cb:85:27:e6:f4:cb:af:6d:ee:1e:a2:60:
e8:9f:ad:fe:59:18:57:2d:e1:ed:97:a1:21:0e:f4:5f:b2:bc:
64:47:da:a2:45:c2:c0:f9:38:0d:c3:45:2d:22:7e:9f:48:b6:
44:14:e9:3c:c0:e5:fd:85:fd:8e:d6:a3:44:71:ce:01:8d:0f:
05:a7:b3:dc:c9:79:a4:7b:8d:b5:b3:7d:ea:83:4e:7b:63:0e:
89:46:bd:e9:48:a0:65:3c:05:1d:b8:9e:92:3c:6b:bc:02:fe:
31:7f:23:9c:d5:a2:20:4c:0c:c7:0d:19:f6:de:52:27:02:14:
2f:83:54:ee:8d:d1:2f:82:bc:cb:9d:0d:5a:e6:b5:0c:66:4a:
7c:fe:bd:9e:aa:25:75:73:4c:b8:64:0c:e8:29:bf:3c:69:c4:
32:b9:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:12 2025 by rpki-client