Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: p1AcEK6XDhpt1M0By/oxpp/e7VJXpDgssIJOnIiGFtc=
Subject key identifier: 61:B5:03:7A:F4:9F:3B:0C:33:30:CF:72:D7:81:11:35:2C:AE:B2:3B
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0199FE0FE355A31032F014EB44F3D618D391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 0AAB
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: +Q/ZPvLMaasI0t4rqJaLRMKpbYOoN6oJnzCQol3wGT4=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e3:55:a3:10:32:f0:14:eb:44:f3:d6:18:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=61b5037af49f3b0c3330cf72d78111352caeb23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:cd:50:50:b6:89:b4:22:b2:c7:25:5b:26:
e3:3b:53:f3:f3:97:8d:78:7c:23:c9:71:04:43:7e:
e2:29:07:ea:77:de:26:fc:59:da:44:1d:25:83:d3:
0e:0f:bc:f4:aa:80:eb:49:8d:67:0a:4e:59:b1:89:
14:f6:69:50:d3:8b:70:2d:74:47:b8:a8:97:2f:18:
cd:a4:21:fe:39:e5:45:b0:ad:c1:a1:16:e3:3f:98:
26:a2:68:6f:b8:58:b9:1c:49:01:bf:89:39:80:08:
dc:13:88:80:b9:07:73:ae:39:0e:b0:56:ec:24:36:
57:94:32:2a:a6:5d:7b:5c:06:30:e1:de:94:f4:16:
a4:95:e8:5a:19:91:a7:d3:23:cb:e4:9e:04:2e:67:
ef:a8:d2:b7:10:6d:65:e1:af:fa:63:ce:0b:0c:a9:
6d:5b:c5:31:53:23:40:41:1f:21:c4:32:90:7d:60:
d0:33:4d:49:b7:5d:b9:56:95:56:de:c4:10:52:8f:
8c:22:bf:77:eb:91:0c:7f:af:88:13:4e:a8:d2:03:
9b:27:f2:c8:12:af:d7:ca:21:6b:d7:36:3d:40:a6:
3b:7f:8e:23:25:d1:ad:09:79:cf:33:ec:25:7e:ff:
92:86:e7:3f:dc:73:d9:a1:8c:82:ce:a3:fd:4f:dc:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:03:7A:F4:9F:3B:0C:33:30:CF:72:D7:81:11:35:2C:AE:B2:3B
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:31:8e:c1:4a:0b:bb:27:f3:f1:35:01:78:07:d5:74:12:50:
6a:f9:61:36:69:7c:a3:79:3f:b8:1d:19:10:d6:ef:4e:e4:15:
3b:26:0b:ff:52:16:31:9e:fd:53:54:34:b7:01:be:5f:bb:2d:
18:58:8c:7e:fa:65:56:4c:7a:f8:f0:0a:75:20:94:2e:28:72:
b0:5b:46:64:e3:be:9f:a0:e9:8e:a0:25:33:ed:50:c8:45:00:
81:ce:a4:a7:89:b3:3a:55:6d:07:19:e0:f4:03:75:4a:63:2b:
29:9a:11:3d:8a:fa:4d:ef:ec:91:c4:08:71:1e:69:5f:b8:58:
4c:4c:ba:95:5a:e9:03:fa:39:34:1d:e7:cb:9c:e2:a9:e6:03:
0b:73:6f:a3:14:eb:d0:d2:82:71:c2:1c:8b:29:fd:8a:44:39:
01:71:58:e0:26:3a:bf:29:fb:36:d0:73:87:64:4a:4a:a5:85:
d4:a3:2f:02:ce:8d:d2:4b:0c:bc:ed:b8:e8:26:d3:53:59:3c:
90:7f:08:00:e5:94:45:6c:c6:f9:f1:2e:54:2d:b2:9d:12:ca:
11:01:5d:a0:45:a2:3a:ca:96:73:c2:5a:f1:36:41:63:89:2d:
7e:7b:88:5f:10:37:6d:16:85:3b:11:b9:02:d2:b8:68:82:8b:
25:19:51:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+NVoxAy8BTrRPPWGNORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYjQwOTJlYTJkMTI5NmRmZTYxZDc4YTdkZmIzYzFlMDM5
MTY0MDgwHhcNMjUxMDE5MjAwMTE4WhcNMjUxMDIwMjAwMTE4WjAzMTEwLwYDVQQD
Eyg2MWI1MDM3YWY0OWYzYjBjMzMzMGNmNzJkNzgxMTEzNTJjYWViMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezNUFC2ibQissclWybjO1Pz85eN
eHwjyXEEQ37iKQfqd94m/FnaRB0lg9MOD7z0qoDrSY1nCk5ZsYkU9mlQ04twLXRH
uKiXLxjNpCH+OeVFsK3BoRbjP5gmomhvuFi5HEkBv4k5gAjcE4iAuQdzrjkOsFbs
JDZXlDIqpl17XAYw4d6U9BaklehaGZGn0yPL5J4ELmfvqNK3EG1l4a/6Y84LDKlt
W8UxUyNAQR8hxDKQfWDQM01Jt125VpVW3sQQUo+MIr9365EMf6+IE06o0gObJ/LI
Eq/XyiFr1zY9QKY7f44jJdGtCXnPM+wlfv+Shuc/3HPZoYyCzqP9T9xaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG1A3r0nzsMMzDPcteBETUsrrI7MB8GA1UdIwQY
MBaAFBy0CS6i0Slt/mHXin37PB4DkWQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYt
YzU0NjlmYzdkMmQwLzEvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80Y2EwMDUtMTc3ZC00NGI1LTlkOTYtYzU0NjlmYzdkMmQw
LzEvSExRSkxxTFJLVzMtWWRlS2ZmczhIZ09SWkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTGOwUoL
uyfz8TUBeAfVdBJQavlhNml8o3k/uB0ZENbvTuQVOyYL/1IWMZ79U1Q0twG+X7st
GFiMfvplVkx6+PAKdSCULihysFtGZOO+n6DpjqAlM+1QyEUAgc6kp4mzOlVtBxng
9AN1SmMrKZoRPYr6Te/skcQIcR5pX7hYTEy6lVrpA/o5NB3ny5ziqeYDC3NvoxTr
0NKCccIciyn9ikQ5AXFY4CY6vyn7NtBzh2RKSqWF1KMvAs6N0ksMvO246CbTU1k8
kH8IAOWURWzG+fEuVC2ynRLKEQFdoEWiOsqWc8Ja8TZBY4ktfnuIXxA3bRaFOxG5
AtK4aIKLJRlRNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:51 2025 by rpki-client