Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: iHExakhkRCEb0zO7TBnhuCkqLqDQYzMXHeAVve8VKSM=
Subject key identifier: 4D:22:F8:DE:C6:15:93:9A:20:9F:AD:A5:1F:F4:88:54:BF:DB:61:FF
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019846647FB65BEC53133650BA32DF73A4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 11:00:48 +0000
Manifest this update: Sat 26 Jul 2025 11:00:48 +0000
Manifest next update: Sun 27 Jul 2025 11:00:48 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 97K6tRaLRVISllsD0C+skLaHWJtvtbeo1nT5i6r2aRU=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:7f:b6:5b:ec:53:13:36:50:ba:32:df:73:a4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jul 26 11:00:48 2025 GMT
Not After : Jul 27 11:00:48 2025 GMT
Subject: CN=4d22f8dec615939a209fada51ff48854bfdb61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:96:52:25:bf:0c:95:1f:f5:cf:12:92:0e:
81:6d:c5:c2:29:90:00:24:cc:1f:a3:10:4d:26:32:
63:84:57:3c:5e:65:9c:75:01:eb:65:76:19:67:13:
a3:c9:48:93:3d:37:bb:7b:ab:15:48:6d:cc:1f:17:
5d:e0:94:88:7b:d0:57:f9:8c:e1:8a:eb:1d:ab:62:
55:8d:02:c3:60:d2:24:5f:94:1b:cd:ce:02:09:c6:
d7:eb:a4:d9:1c:1a:39:12:c2:60:88:61:6c:53:6c:
e3:34:cd:d1:d0:60:64:ad:ab:91:72:7c:a2:40:c4:
ce:c3:44:a2:04:99:c0:0d:35:a6:73:2c:7e:fe:92:
74:4d:51:70:cc:e3:56:de:7e:20:55:f5:0c:d5:e9:
a5:77:57:f1:12:b6:bf:54:10:78:11:90:d0:71:da:
ee:e9:7e:2c:01:30:8a:9e:bc:10:76:7e:3e:86:c7:
78:02:52:97:66:ca:be:54:33:97:37:19:b4:d8:cf:
ec:e6:11:4e:c4:f2:e3:02:63:00:c1:97:ae:27:b9:
db:5e:00:44:b1:11:f5:f7:5a:7e:8d:b5:eb:8f:4c:
c9:26:59:0d:2f:50:73:41:2b:8f:d0:0b:19:6b:1e:
bb:cd:76:fc:da:a9:e6:b7:ce:28:bb:87:89:a3:d0:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:F8:DE:C6:15:93:9A:20:9F:AD:A5:1F:F4:88:54:BF:DB:61:FF
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a6:b9:f0:2e:a2:2f:f8:6d:de:c0:8d:67:e0:9a:52:a0:1c:
fa:9a:17:fa:2f:65:ff:de:34:2f:b7:cb:71:a7:c9:a6:db:b1:
de:80:6e:3a:85:8a:1e:57:4c:d7:50:18:e7:65:34:be:5d:b2:
db:a2:3b:31:7d:61:c4:d7:73:84:66:43:b2:0b:0d:63:46:82:
67:5b:b4:8f:d9:32:32:a3:70:e4:92:51:b9:fb:db:64:8c:3f:
3b:47:bc:4c:bf:ef:e9:7b:a2:62:87:08:be:19:f6:82:98:3c:
bc:9f:20:2f:7e:19:26:aa:7c:e1:96:7d:6a:38:d1:58:b0:3d:
19:05:c7:3e:c5:14:01:ce:c0:bb:b1:e2:03:69:b6:9e:82:ed:
08:96:94:72:60:de:61:07:31:28:49:20:6f:f5:d3:df:91:4e:
40:d9:19:42:2e:7d:0e:6c:c5:93:bd:6b:d3:39:1b:81:72:95:
57:df:4e:a3:a0:27:fe:9a:c2:5c:b3:13:1b:4b:01:aa:67:b2:
e8:06:38:9b:91:62:de:72:9d:c3:2e:35:ae:89:83:79:7d:c2:
44:5d:60:d2:16:5a:63:5d:4e:eb:94:ba:61:ac:ee:04:8f:5b:
33:c7:5a:79:10:ca:75:09:81:48:11:1c:a7:9a:e9:ef:73:7e:
33:bc:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:50 2025 by rpki-client