Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: VI1xtd1gm968JEpMPGwzsAlI2h59HRCIuPR+5s34q5c=
Subject key identifier: D4:5D:C5:9F:3F:89:9A:7B:A6:E9:1D:04:7F:86:C1:9A:B6:12:23:3D
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019A736EF9EA42C5EE786FD8595ECFFECFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 04E5
Signing time: Tue 11 Nov 2025 15:00:43 +0000
Manifest this update: Tue 11 Nov 2025 15:00:43 +0000
Manifest next update: Wed 12 Nov 2025 15:00:43 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: KZ4Gyyjzbt2d4aeQjCz5MOuuZnw6XHWKKYMWo7Re0Qc=)
2: RWAHAsrZXR_NxxGtwN6OEC5tDIs.roa (hash: 7bMqR/rBw6NH0+LMHOCGAZUS1O/iVmW2Ug7Mi0qVjCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f9:ea:42:c5:ee:78:6f:d8:59:5e:cf:fe:cf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Nov 11 15:00:43 2025 GMT
Not After : Nov 12 15:00:43 2025 GMT
Subject: CN=d45dc59f3f899a7ba6e91d047f86c19ab612233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:33:51:e5:03:59:6d:25:83:b7:f0:61:8a:72:
ea:c8:66:be:7c:aa:55:c9:51:53:a8:a0:b3:81:b1:
f4:bc:fc:aa:b8:23:16:d2:8a:4a:5b:a8:32:53:e0:
cb:ee:b5:cf:ba:3a:55:73:58:0c:28:54:ce:f8:4c:
71:75:38:e8:88:16:95:56:a5:07:08:15:23:d2:5c:
72:08:7c:d6:73:bc:4c:31:7a:4f:54:cd:d1:86:7a:
b4:78:13:1a:c2:05:83:c3:f3:ae:df:1e:ee:51:ae:
40:03:54:b3:be:82:38:c9:be:17:fd:ae:56:f4:36:
32:03:d8:31:d9:98:53:ae:33:0a:81:e6:79:e9:22:
d9:87:23:a6:ec:b6:0f:a0:e5:a0:85:3c:8f:8b:e0:
7d:74:c8:eb:24:66:31:6a:24:d9:bf:23:cb:d3:0c:
e1:35:f7:7e:87:ea:b2:02:a5:ae:3f:12:2a:b6:10:
6b:1e:b6:e1:e9:a9:46:19:33:89:25:ae:e9:8e:46:
5e:48:8c:e3:26:13:56:f1:cf:f9:cc:aa:b1:d5:09:
10:53:c9:18:b5:b7:2c:03:22:8f:bd:9e:be:66:2b:
d7:d7:f9:c2:8c:6f:9e:be:a5:57:a1:b4:28:97:8d:
d2:be:75:37:fd:32:74:a9:d2:f3:58:3f:7e:ed:23:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:C5:9F:3F:89:9A:7B:A6:E9:1D:04:7F:86:C1:9A:B6:12:23:3D
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cf:6c:06:53:6b:ea:3a:c3:ac:07:34:38:93:1c:24:9b:92:
3e:ce:0d:e4:3d:ef:8c:d6:d4:2d:3d:80:2c:57:0a:e6:82:bd:
7d:87:ed:22:13:25:19:4a:00:f6:d1:a7:dd:93:aa:ee:31:da:
01:56:50:fd:a7:0d:c9:1c:1c:bc:89:d2:74:f9:fd:e0:71:47:
e9:fc:ca:f0:a9:86:77:a3:1a:34:68:bb:5e:59:91:59:50:75:
b2:aa:8d:8c:38:6c:f2:ab:d9:d4:ae:e2:4d:59:26:b7:82:86:
2d:7c:21:a3:5f:89:97:0d:55:1a:7e:cc:8b:a8:a3:9e:dc:f1:
75:e8:6c:1f:98:29:04:ac:71:0b:43:e9:cb:e0:d2:b2:a6:45:
2e:e5:13:d4:91:94:2d:61:ed:5b:74:e6:f4:e6:e2:f4:29:2c:
7f:19:e4:26:b3:06:08:d8:e3:f2:a7:b8:bc:5f:24:dc:38:03:
0b:9d:0d:9b:a5:a9:89:09:7f:c2:41:2e:43:90:ab:68:b3:60:
54:f0:22:c9:65:0d:8c:ab:69:3f:1e:a0:a8:2c:4a:ac:82:74:
e2:a4:03:3f:da:f5:46:17:b5:a8:3c:7c:28:62:20:8c:c0:11:
2d:f1:f6:e1:16:39:05:35:36:9d:63:27:b6:6f:de:02:71:c7:
56:b1:a6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:54 2025 by rpki-client