Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: RD/QHZaStzGzMWSV5n31FOiLUJJ/KVL4IQFGb/lMTPM=
Subject key identifier: 07:17:F2:F4:C1:7C:65:8C:D5:24:67:8B:CA:63:A1:A2:0F:A7:59:E6
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 0199FDD8ED96AFC22E375E8A722E3D7B49AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 1290
Signing time: Sun 19 Oct 2025 19:01:16 +0000
Manifest this update: Sun 19 Oct 2025 19:01:16 +0000
Manifest next update: Mon 20 Oct 2025 19:01:16 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: gkdIcv6LDonKTFCEwRpT/V55NrNnnFSk15SRqEuhvoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ed:96:af:c2:2e:37:5e:8a:72:2e:3d:7b:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Oct 19 19:01:16 2025 GMT
Not After : Oct 20 19:01:16 2025 GMT
Subject: CN=0717f2f4c17c658cd524678bca63a1a20fa759e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:97:ab:94:53:30:92:5b:cf:84:ff:ae:84:
7e:cc:6d:a0:b7:b3:c1:91:41:49:19:87:ec:56:37:
88:e2:80:e7:e9:fd:f1:d2:8a:68:44:69:bd:d2:6c:
d1:ce:51:1f:13:c4:48:f7:45:b4:4e:9d:9c:88:33:
9b:75:b3:0d:23:aa:d5:56:53:c8:51:4b:40:55:6e:
4e:5c:23:db:17:f0:d3:04:03:87:2a:90:a4:bb:da:
07:bb:c8:0c:53:06:2e:eb:f7:9d:6d:17:9a:0d:2d:
fb:b4:2d:e9:8a:b2:bb:58:3a:df:50:94:d2:ab:8c:
97:7a:6b:85:39:1e:ee:3f:73:99:00:ed:48:27:83:
89:2f:3a:56:ce:2c:f0:cd:d9:f8:cf:e6:43:3a:cd:
20:3c:54:f9:b8:4d:76:3e:51:ab:0b:f2:cf:2d:b3:
35:6f:80:e6:c0:2d:88:2a:9b:48:bd:39:6d:2a:b1:
9b:9d:d7:7b:85:5e:c9:25:58:a0:3a:70:e8:2f:9e:
4f:bc:ea:ca:83:af:62:1b:c6:84:ef:16:61:2f:b7:
18:a5:ae:fb:3a:be:43:09:b9:c8:e2:a5:62:33:30:
bb:c6:89:fb:db:e1:ce:d6:96:2f:cc:64:0e:e5:d3:
af:ec:b5:30:df:47:e4:c0:1a:52:dd:e5:0f:a2:d8:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:F2:F4:C1:7C:65:8C:D5:24:67:8B:CA:63:A1:A2:0F:A7:59:E6
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c7:67:90:15:08:df:06:69:c9:37:7f:0d:0a:5c:20:bd:19:
a0:00:8e:06:a8:3b:51:cc:44:81:be:0c:f7:cf:d7:5f:ee:15:
8f:4b:10:c3:40:b5:3f:a5:49:40:58:4c:b7:e6:9d:fa:c0:f2:
10:66:9a:24:9d:9f:0d:a4:27:35:20:c7:43:96:d7:72:0c:63:
46:73:a1:a7:e9:46:e5:d0:91:3d:91:4d:72:8d:e0:e3:18:d8:
16:7d:56:30:32:81:aa:a1:3c:94:32:46:68:47:c9:61:48:4d:
a4:44:0c:ce:49:24:f3:0e:5a:14:8a:39:1e:ba:a8:30:ce:16:
1d:ea:a0:62:e6:61:0a:a5:4b:cb:30:d5:01:fe:0b:14:4e:52:
5e:66:0f:a6:49:00:f5:45:1a:90:e7:68:ac:d5:6b:f9:20:5a:
c9:f2:7b:91:cd:b3:82:6a:9b:be:fe:f0:14:90:7e:67:12:27:
ff:60:b7:c1:36:e0:4d:5d:f8:de:79:3a:54:a0:14:35:02:ef:
ab:e2:1b:60:98:67:ec:de:d3:62:59:fd:d3:cd:56:62:1a:6c:
55:4c:3c:6e:5f:a6:e6:72:6e:2e:a1:98:bf:ff:4e:15:4c:bd:
80:c0:6b:35:dc:7a:c3:c0:c1:d0:23:d6:0f:ba:71:e8:68:72:
65:94:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:36 2025 by rpki-client