Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: ocYEDqkEf0eyLihF86n6wM6maYxYZevohfl3M6Vtdes=
Subject key identifier: 85:34:A0:95:B6:DD:BD:50:BF:B6:9F:E6:C3:91:54:DE:8C:58:D6:42
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 0199FB7CE9C2D6651C2698496D444C2D5143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: tP4ZrwsVavjM7k7eRye+BCA0heWR2GnZC27oalGSSeM=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e9:c2:d6:65:1c:26:98:49:6d:44:4c:2d:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=8534a095b6ddbd50bfb69fe6c39154de8c58d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:f5:7d:cb:51:8f:46:91:d8:c0:e7:3a:6c:
9c:c0:b9:27:2f:bf:3a:c4:a2:38:16:74:41:58:49:
44:b6:a2:39:85:17:a6:75:87:ef:1e:36:8b:5d:31:
81:54:28:98:e6:01:83:cf:9d:a4:db:7b:b7:8d:30:
1b:05:66:32:5f:0c:ec:c2:ab:37:b2:f4:c9:a2:de:
77:9b:d5:8a:1e:e7:29:c7:76:fe:1d:ce:1b:58:5a:
6b:61:f4:50:90:61:cf:0d:bb:c2:32:f1:21:d7:fa:
d9:64:33:4a:ef:16:06:1a:e2:c1:41:7a:dc:ed:0e:
8b:e1:d1:a2:89:9c:e1:f7:bb:9f:d3:8c:13:4b:cb:
41:e5:51:d2:d2:70:44:c1:07:a7:b0:3a:99:51:be:
98:14:f3:eb:f7:7c:2e:5b:4c:f5:c0:87:57:f0:9e:
69:ec:e8:c4:b3:fa:86:0c:65:d3:29:a8:9e:f7:2c:
31:9a:49:28:6c:30:b6:fb:36:ca:01:c3:53:83:25:
4d:ee:0e:48:12:8d:c3:ca:23:35:17:23:66:54:e7:
ea:1e:b6:37:29:b3:15:d6:d8:89:82:0a:5c:e7:9f:
30:61:c5:d8:a0:a0:d1:e6:aa:76:a2:f9:42:18:1d:
a3:13:b7:14:ef:de:45:0f:af:50:24:84:47:bb:71:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:A0:95:B6:DD:BD:50:BF:B6:9F:E6:C3:91:54:DE:8C:58:D6:42
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:5f:1f:c4:d0:51:7d:ed:f7:11:a3:a5:81:a1:87:38:dd:
2a:79:27:96:4f:a2:ae:9d:d4:92:10:b7:a6:47:97:28:68:6d:
7b:d6:c0:42:25:75:65:83:78:e6:2c:a0:51:c9:33:93:ff:9f:
9e:49:42:b1:44:99:92:d2:dd:87:06:a9:0d:11:93:b3:4e:7d:
2e:a7:9a:57:1b:d8:13:9e:f0:22:df:70:f1:ff:0e:a6:94:94:
6e:b5:94:ed:c9:0a:b3:72:a0:4a:91:51:32:51:b9:61:4d:97:
37:65:50:95:62:14:15:40:8c:d5:04:b6:7b:48:a9:3e:42:6f:
88:2e:4a:60:ba:b6:34:26:e4:eb:1d:a1:2b:0b:28:97:43:10:
7a:fa:af:8b:9c:fa:33:2a:ce:b1:dd:72:b6:29:09:71:88:43:
fe:35:30:04:05:99:d8:b3:47:7a:78:c5:9c:e1:65:48:8b:b8:
6c:ed:3f:99:16:d9:b4:78:9d:9d:44:00:c2:de:7b:dd:95:9c:
50:28:b3:57:71:f1:27:a1:ff:52:10:06:49:3e:c0:16:7e:3e:
56:a6:9f:34:b3:f1:93:c1:b1:06:4d:c7:72:6e:e0:98:71:a9:
f1:7d:f9:f6:59:f5:a4:69:54:4b:99:e9:f8:be:81:e9:b5:d7:
eb:3e:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:18 2025 by rpki-client