Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: sH6z1OKvHzFV8WKCrVWx0jtS+ryS5R/A9roSg6Lh//8=
Subject key identifier: DE:E6:32:F7:61:A0:AE:8D:A5:9C:10:62:15:BB:83:10:93:E7:C1:5E
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 0198D54E3DC91E5ECB9C3F712195EEB938EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 4YYDwO0CWYxleZ90IAgMWdsNUFp7eqiD5lgtoF8/0w4=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3d:c9:1e:5e:cb:9c:3f:71:21:95:ee:b9:38:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=dee632f761a0ae8da59c106215bb831093e7c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:11:a0:1f:ed:fe:9f:16:8f:bc:c8:14:bb:
bb:d3:b8:ac:fe:02:c9:c8:18:be:a3:fc:b6:9b:77:
cc:43:f7:40:20:11:05:be:f9:0e:a9:76:a8:d2:fc:
52:0e:5a:7c:2b:ba:ff:43:04:0e:ed:dc:29:45:ff:
e2:e2:c9:d2:9c:3a:2d:d2:c2:05:eb:40:01:12:18:
f2:7f:47:a4:5e:c1:4c:5e:f5:17:9b:da:ee:e4:54:
f5:bf:2b:e5:9a:97:c1:41:a9:83:30:f9:88:cc:01:
f4:09:d6:0a:5a:09:d4:f5:99:b4:0b:de:9f:de:51:
95:d6:c9:58:43:66:28:48:32:19:00:b2:b6:ca:82:
4e:cd:68:31:85:fe:c9:20:b8:39:fe:42:37:86:58:
65:cd:69:5a:ab:8f:2f:45:99:bc:dd:ff:6b:84:5f:
c9:9f:43:84:0e:68:8f:d3:bf:e2:8d:17:19:d8:cc:
d2:21:f7:44:02:72:cd:34:2f:bf:17:b8:44:8f:17:
5a:e5:f7:6f:b4:3e:14:bb:64:6d:06:dc:ef:81:e7:
90:e0:ab:42:49:59:74:9a:71:da:53:53:13:97:93:
0f:93:8d:73:9b:cc:01:11:18:0c:7e:ca:11:c0:94:
1d:82:d0:01:bb:79:ef:2b:5d:22:ae:a2:f9:de:e1:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:32:F7:61:A0:AE:8D:A5:9C:10:62:15:BB:83:10:93:E7:C1:5E
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b3:ba:b0:9c:e6:ab:95:d6:45:ad:75:5b:64:98:cd:e2:a7:
1f:5f:14:cc:58:23:58:6e:01:d5:d2:2e:3f:e3:1e:11:3e:4c:
2b:88:58:68:7e:ef:84:14:43:14:cf:6d:a5:18:ef:fa:da:5f:
94:12:83:dc:d1:41:59:67:2d:4f:b2:2a:d0:02:57:23:e2:69:
1b:37:23:66:3f:d9:db:bf:4c:02:e8:7a:e4:75:0b:5d:b0:f6:
66:c3:4d:5f:d7:3a:6d:4e:90:27:49:47:44:3b:55:ab:8a:ad:
a3:e0:cc:2c:ff:94:c0:40:63:3f:f2:25:af:57:ae:4e:8c:28:
aa:b8:5b:fd:a0:64:41:b3:a3:8e:e0:9d:7b:de:d4:e0:dc:fc:
ef:16:7f:7d:22:b6:1a:0f:fb:8d:2e:ae:6a:d8:de:69:b8:3e:
40:19:cf:61:95:09:2d:18:0d:ec:0b:e1:d2:06:37:76:7b:f0:
2f:ea:83:97:c5:81:60:9e:15:29:00:d3:ce:c7:8f:54:f3:e8:
fa:25:93:c1:98:a6:04:49:e1:38:2b:c1:a5:88:ba:88:a7:2b:
c8:4d:60:da:63:38:8c:ac:50:d6:ef:be:e1:4a:8b:26:fc:e5:
e3:dd:59:f4:d5:91:80:c4:e6:72:72:08:e0:74:5d:e6:28:29:
ea:d8:0c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:59 2025 by rpki-client