Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: YqI9d9WSMntz2yNe4Di0F967u3jiMnyYvWehVMBFRko=
Subject key identifier: 57:17:61:E6:2D:3B:83:60:1C:38:E3:0F:0D:B5:0D:C4:52:94:01:31
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 0199FEB4F1EB5651D18A15048B9EB1FCF0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 23:01:35 +0000
Manifest this update: Sun 19 Oct 2025 23:01:35 +0000
Manifest next update: Mon 20 Oct 2025 23:01:35 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: FMCTCbIWeNu0bSiSVULgTO9Gds0vk0eRxPYvs+Za31U=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f1:eb:56:51:d1:8a:15:04:8b:9e:b1:fc:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Oct 19 23:01:35 2025 GMT
Not After : Oct 20 23:01:35 2025 GMT
Subject: CN=571761e62d3b83601c38e30f0db50dc452940131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:b3:e6:a9:65:69:d0:a0:f4:bf:d3:09:73:
9e:4b:8d:3f:27:eb:30:bb:7a:29:43:4b:91:f4:d1:
eb:52:9e:7b:51:67:73:91:59:38:e1:9a:91:2d:0f:
dc:6c:2a:3f:f5:db:85:ab:9f:2b:db:eb:94:a7:dd:
58:b5:43:90:0e:41:2e:a6:a1:f2:11:9d:27:6f:75:
bb:14:80:04:91:3b:e1:e7:3e:09:c4:03:7d:c3:19:
8f:f1:33:0a:c6:73:85:64:25:ab:b7:af:3d:3e:36:
bc:eb:3d:0d:f8:44:82:6a:f5:9f:a7:bf:91:95:a9:
f5:fc:0c:ec:aa:a4:d5:fb:b1:35:79:d2:37:c2:aa:
d0:6b:48:99:01:1f:f0:11:88:49:07:f9:1a:56:17:
34:a7:98:5e:95:71:61:0f:af:7a:5a:fd:fb:2f:78:
8e:77:94:85:ac:da:18:71:d9:f5:9e:13:e9:5b:12:
ca:79:fa:aa:ae:20:1d:9c:d9:fa:4b:f3:5b:92:80:
29:06:8a:82:73:49:6d:b3:4e:e1:86:53:41:f6:8a:
5a:e8:93:2d:bd:3b:6c:17:e5:e1:63:02:36:ca:e6:
a5:de:b6:b1:9e:78:87:e9:88:e4:a7:16:a0:ed:bf:
ce:38:26:4e:05:22:7e:50:8e:37:4f:c7:83:25:a8:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:61:E6:2D:3B:83:60:1C:38:E3:0F:0D:B5:0D:C4:52:94:01:31
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:e5:d0:fd:d7:a2:c3:8c:b4:a6:8a:7d:24:65:5a:85:07:
bf:80:88:61:41:dd:c3:2f:35:d4:6c:d3:cf:ab:e2:6f:33:33:
b9:5a:45:fe:37:c9:82:cf:da:7f:8e:0e:8a:be:a0:c5:aa:ac:
6a:de:8d:1d:78:9f:30:76:0d:7b:0a:fd:2c:ce:47:e8:16:da:
5c:93:17:aa:8c:6a:60:12:7d:77:f4:64:d1:29:1d:9a:55:60:
60:d1:25:7b:e6:bb:ce:d5:93:30:8b:3c:4d:12:ca:fa:db:57:
26:e2:eb:74:59:20:9e:d5:4b:78:a7:6d:ec:74:90:2c:d8:a6:
02:d6:fd:ea:5f:e4:ac:c7:b1:d0:14:f1:f3:4b:ca:77:b7:64:
84:2c:aa:1e:64:5a:0f:bf:91:89:5e:78:26:0d:f2:8f:a2:d2:
ba:01:0a:4c:52:c0:60:35:3c:63:ed:41:92:36:c2:88:b6:ff:
90:f7:b1:92:8c:1a:bd:9b:ca:48:fb:83:cd:6f:7d:84:0b:b9:
06:78:69:3b:64:ed:1e:9e:f0:03:3e:8d:fa:a0:a4:00:3b:b4:
5d:71:b5:5a:ba:07:9b:71:d3:62:8e:6b:17:11:a0:75:01:e9:
ab:53:85:81:ed:a7:4b:b4:56:58:24:0d:64:6d:b6:43:c1:83:
95:b3:bb:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tPHrVlHRihUEi56x/PDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky
OWY0OWEwHhcNMjUxMDE5MjMwMTM1WhcNMjUxMDIwMjMwMTM1WjAzMTEwLwYDVQQD
Eyg1NzE3NjFlNjJkM2I4MzYwMWMzOGUzMGYwZGI1MGRjNDUyOTQwMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPGz5qlladCg9L/TCXOeS40/J+sw
u3opQ0uR9NHrUp57UWdzkVk44ZqRLQ/cbCo/9duFq58r2+uUp91YtUOQDkEupqHy
EZ0nb3W7FIAEkTvh5z4JxAN9wxmP8TMKxnOFZCWrt689Pja86z0N+ESCavWfp7+R
lan1/AzsqqTV+7E1edI3wqrQa0iZAR/wEYhJB/kaVhc0p5helXFhD696Wv37L3iO
d5SFrNoYcdn1nhPpWxLKefqqriAdnNn6S/NbkoApBoqCc0lts07hhlNB9opa6JMt
vTtsF+XhYwI2yual3raxnniH6Yjkpxag7b/OOCZOBSJ+UI43T8eDJajNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcXYeYtO4NgHDjjDw21DcRSlAExMB8GA1UdIwQY
MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt
NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3
LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZPl0P3X
osOMtKaKfSRlWoUHv4CIYUHdwy811GzTz6vibzMzuVpF/jfJgs/af44Oir6gxaqs
at6NHXifMHYNewr9LM5H6BbaXJMXqoxqYBJ9d/Rk0SkdmlVgYNEle+a7ztWTMIs8
TRLK+ttXJuLrdFkgntVLeKdt7HSQLNimAtb96l/krMex0BTx80vKd7dkhCyqHmRa
D7+RiV54Jg3yj6LSugEKTFLAYDU8Y+1BkjbCiLb/kPexkowavZvKSPuDzW99hAu5
BnhpO2TtHp7wAz6N+qCkADu0XXG1WroHm3HTYo5rFxGgdQHpq1OFge2nS7RWWCQN
ZG22Q8GDlbO7vw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:18 2025 by rpki-client