Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File: HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier: lvV4wHZaeL+zwkhVETaBJNGxYwz3l8186GkLKahHtxI=
Subject key identifier: F5:B3:B4:6D:50:1B:BB:7E:E6:70:59:B4:68:BA:9E:82:5B:F5:0B:87
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial: 019A00351A3D51E14A8F77BB5EA78E0ECADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:11 +0000
Manifest this update: Mon 20 Oct 2025 06:01:11 +0000
Manifest next update: Tue 21 Oct 2025 06:01:11 +0000
Files and hashes: 1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: GKJPX0NWFEVkj72EGjuvmGHolnkpNA5R46fn1FEfevs=)
2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:1a:3d:51:e1:4a:8f:77:bb:5e:a7:8e:0e:ca:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Validity
Not Before: Oct 20 06:01:11 2025 GMT
Not After : Oct 21 06:01:11 2025 GMT
Subject: CN=f5b3b46d501bbb7ee67059b468ba9e825bf50b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:c1:08:d6:90:bc:35:46:7b:11:ed:5e:f4:
40:89:17:c7:3b:3d:71:ef:f9:f1:e6:4c:12:05:22:
93:47:a5:61:ab:56:2a:e4:f0:69:08:b1:72:a3:ef:
dd:98:54:91:31:98:dd:2d:eb:c1:bf:80:70:03:b3:
a9:78:44:35:bf:8a:b2:8f:7a:54:d2:6d:45:60:d2:
07:1e:2d:c5:58:69:87:bb:9a:cc:f5:ca:40:51:b4:
7f:7b:37:0f:9c:bf:9c:58:db:83:b4:da:08:fd:73:
92:49:3c:a0:e6:82:f6:d1:fa:02:af:e6:8b:9d:35:
07:68:1b:b9:61:1e:61:d4:16:2b:10:62:b0:d5:71:
e6:f7:fd:95:fb:83:a1:cf:84:2e:f8:cf:0a:be:3c:
77:02:fd:53:cb:96:dc:db:b2:5c:3f:81:38:7b:53:
8d:78:a1:ee:0a:e3:ea:74:50:32:ec:23:c7:ba:3b:
52:8d:90:d4:79:fe:ed:85:6b:69:7d:6e:a2:b1:33:
d3:82:d2:96:c1:f4:82:7d:9e:94:5a:da:ed:b2:e4:
f1:88:94:59:93:ba:54:7f:74:5a:70:f8:94:16:1f:
34:8d:cc:ec:5a:98:8a:4f:23:a0:f3:64:b6:26:66:
8c:d6:41:d6:6a:67:c5:04:fc:fd:d9:69:62:30:62:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:B4:6D:50:1B:BB:7E:E6:70:59:B4:68:BA:9E:82:5B:F5:0B:87
X509v3 Authority Key Identifier:
keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3d:d6:fe:77:e9:d9:e9:68:9f:d3:20:88:ae:96:a3:da:85:
fc:97:32:32:ee:48:f9:70:17:c6:50:98:68:fe:f2:d4:95:a1:
19:dc:82:37:87:24:f1:14:95:93:10:ae:b4:8d:e1:92:06:0f:
b8:c7:f3:76:c1:53:4b:49:4c:cc:7f:06:f9:29:62:c6:e8:b2:
7c:42:75:ec:b2:83:0a:57:09:91:dc:61:55:88:21:b9:37:33:
fc:8c:e8:8e:98:b2:7f:05:11:2c:c7:60:9a:a0:ba:c9:e6:d7:
5d:ed:8c:24:3e:76:30:ab:a4:5f:5e:b1:c1:cf:5b:bd:e2:cb:
21:31:e9:c6:cc:48:9c:ca:b3:91:d3:2a:a1:76:ea:8b:4d:47:
32:ad:f1:f0:e5:5c:76:c1:7d:d2:55:ba:75:d3:19:1a:55:df:
37:7f:7f:88:06:1c:85:bd:97:0f:e6:11:d1:65:dd:11:72:10:
48:2b:c9:98:72:aa:8d:1b:41:cd:c0:bf:f4:39:64:66:28:fc:
bc:65:aa:2a:f8:8f:19:a3:d2:f6:a5:d2:d3:33:d8:27:29:68:
c6:8b:b5:84:24:1a:e6:23:2c:88:36:c8:6b:1e:63:f4:26:aa:
48:cc:57:3a:cb:8a:17:33:06:02:03:65:2e:dc:af:5b:12:6b:
87:d6:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:40 2025 by rpki-client