Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
File: HLRkugOLwLu-5ADz6QjfUUgsUbs.mft (raw, json)
Hash identifier: xWyinDQb2sB1zuclaC4iHRnDpPkCReRD+6vcmJUOvZ0=
Subject key identifier: 39:B8:4E:68:CC:7B:FD:30:C7:5E:C7:A4:48:37:94:47:94:7F:68:47
Authority key identifier: 1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
Certificate issuer: /CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Certificate serial: 0199CBA3679C2E877D9FBFC1D4F7C7FF9225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
Manifest number: 15B9
Signing time: Fri 10 Oct 2025 01:01:47 +0000
Manifest this update: Fri 10 Oct 2025 01:01:47 +0000
Manifest next update: Sat 11 Oct 2025 01:01:47 +0000
Files and hashes: 1: HLRkugOLwLu-5ADz6QjfUUgsUbs.crl (hash: OZhwa6bRXmzY97tPC9u7XrGjBZONp5jwwJxhxegdqjs=)
2: W-OtDTrcD4enIHqlL53Q8gJVqVg.roa (hash: MIoWyZfzBnM9tbFHcQ1uCgLljDFhySK8a9b/Bqx5jVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:a3:67:9c:2e:87:7d:9f:bf:c1:d4:f7:c7:ff:92:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb464ba038bc0bbbee400f3e908df51482c51bb
Validity
Not Before: Oct 10 01:01:47 2025 GMT
Not After : Oct 11 01:01:47 2025 GMT
Subject: CN=39b84e68cc7bfd30c75ec7a448379447947f6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:ab:c0:75:f2:03:e3:48:30:d2:06:27:e7:
25:52:a2:9a:6d:06:67:1a:c7:9b:e9:c5:b3:40:02:
e0:bc:5d:12:ea:08:6a:62:0d:a3:8b:2a:78:c4:b6:
7b:ac:88:b5:ba:47:39:56:11:d4:a3:59:e1:f0:e5:
38:4c:d9:ee:1c:15:8f:27:ce:ff:aa:6d:64:8b:af:
55:45:5e:2d:2e:09:9d:38:01:ad:1d:07:1e:e5:6a:
ec:94:c0:22:00:9d:dc:4a:cf:56:59:00:56:d6:21:
d2:53:aa:3c:5f:3c:54:4c:f1:93:a8:77:1b:8c:2a:
d9:63:93:47:87:1b:b7:53:0c:67:89:66:c6:78:b6:
ab:4a:7c:a1:97:4e:84:80:02:4a:4e:a3:05:35:32:
fc:bc:b7:77:78:09:08:12:e8:95:67:97:5f:e4:2d:
fe:c8:58:0b:2d:fa:7b:5c:4e:3f:36:e1:e4:58:9d:
eb:56:8d:da:64:51:82:e1:19:bd:89:9a:0b:cd:31:
e0:65:2c:0d:49:3f:8c:5d:b2:74:23:76:c9:cb:0b:
79:6d:4d:52:9b:1b:82:8d:ad:46:db:95:13:58:8d:
9e:a5:cc:53:29:07:ab:b3:b4:d7:88:76:e1:8e:8d:
0d:00:43:94:56:4f:b6:f3:45:06:80:fc:b4:10:97:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:4E:68:CC:7B:FD:30:C7:5E:C7:A4:48:37:94:47:94:7F:68:47
X509v3 Authority Key Identifier:
keyid:1C:B4:64:BA:03:8B:C0:BB:BE:E4:00:F3:E9:08:DF:51:48:2C:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLRkugOLwLu-5ADz6QjfUUgsUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/08729f-79a6-48d0-b2e1-bb26143c5edc/1/HLRkugOLwLu-5ADz6QjfUUgsUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:b1:a2:31:d4:ea:2b:93:a1:1f:f3:3e:6e:51:de:9e:bc:
ab:bd:31:7b:3b:d9:74:df:de:18:de:1c:a3:a4:ee:ea:59:a8:
93:ee:b5:54:b2:35:9e:e0:ce:d5:b2:3d:ad:5a:11:99:62:ac:
fc:2d:dd:1e:9d:68:d8:db:3c:ef:99:5a:09:57:12:f9:d4:0c:
35:e0:21:e5:21:aa:b4:64:30:3a:d4:de:4d:95:55:9b:7c:f0:
af:f0:dc:8f:4f:34:6c:e5:ae:c8:39:5e:7c:4d:f4:69:b1:8d:
c7:72:73:40:4c:05:49:de:4f:ed:be:63:b3:c9:bd:6c:e4:32:
0d:38:00:ae:ed:d1:74:dc:d3:65:a6:11:2b:03:52:4f:b4:87:
a7:ed:3f:91:45:a0:31:7d:39:f8:ee:ad:4f:e3:3d:64:f4:00:
c9:87:dc:45:68:be:6a:76:73:fc:da:9e:47:f3:9d:2a:d1:de:
83:71:c7:69:3b:ea:6c:8a:c7:5f:63:1b:76:7b:4e:18:ad:fa:
c6:db:a6:02:3d:2b:01:53:ec:d9:1f:0f:5d:66:e3:e0:aa:33:
59:20:15:b3:0e:0e:24:a1:4d:03:ab:ef:ac:07:2a:a5:60:d5:
f1:8a:79:05:c7:7f:e3:4f:71:05:a9:18:44:c1:75:74:e1:3a:
e7:5d:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 04:08:42 2025 by rpki-client