Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: kRi1T7mPpqRXCXk0c4M+CHrllNdbNPGxsWWMimgOYxA=
Subject key identifier: 35:8A:37:03:22:9F:59:8F:96:52:D3:59:B8:6D:CB:A9:2E:97:A9:93
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019A0E27007B67618FE7D65151AB402CD344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1306
Signing time: Wed 22 Oct 2025 23:00:28 +0000
Manifest this update: Wed 22 Oct 2025 23:00:28 +0000
Manifest next update: Thu 23 Oct 2025 23:00:28 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: 5vXac9WFolb6NAlxiy+CbO54L2rsQpIQeB+6NwBxQyg=)
2: m1rDa4mFSS7DgxLKEUuhg1KKIME.roa (hash: P+gAWygPgYFKaEAocSrD9brqA8mxvT8s5Q0PR3R+oc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:27:00:7b:67:61:8f:e7:d6:51:51:ab:40:2c:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Oct 22 23:00:28 2025 GMT
Not After : Oct 23 23:00:28 2025 GMT
Subject: CN=358a3703229f598f9652d359b86dcba92e97a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:e5:fb:8b:b8:a3:82:02:22:a4:66:db:e8:
04:a1:3a:2d:02:2f:2d:27:aa:16:0b:5c:cb:25:7f:
12:2c:18:54:9f:7f:ba:6f:3c:4e:00:b3:74:17:ab:
b7:a6:90:14:4a:bb:38:0f:8f:0c:ae:8d:85:df:fb:
25:b1:1e:0a:d4:04:70:0c:74:44:4a:5c:f3:43:23:
d3:c4:f4:ea:0c:f4:ea:91:63:11:09:37:fa:b1:fa:
9b:f2:fa:4d:4b:31:02:54:80:95:4b:3c:d6:88:62:
8a:5f:50:39:0c:35:32:29:97:dc:ba:7c:30:66:de:
d0:a9:9f:53:47:8f:22:5a:d9:0d:9c:9a:4c:59:fb:
ec:a1:af:a1:ff:dd:8d:2d:c4:72:ab:c4:f3:48:50:
b8:aa:a6:5e:ea:3d:a1:0e:ed:4d:24:25:fa:21:3e:
30:4b:69:3a:37:2a:65:26:7b:be:07:0d:17:ed:f9:
0f:98:ec:07:02:52:46:ff:04:62:8f:6d:67:58:f4:
c3:ce:37:e5:87:70:40:e2:66:5f:6c:ef:f8:81:d3:
84:28:dd:ad:c2:5f:db:69:06:69:06:9c:1f:c2:27:
d2:26:87:68:0f:c8:e8:5e:11:1a:c2:dc:a3:0b:21:
12:52:d7:c4:49:d4:97:24:e3:dd:56:53:bf:59:a9:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:37:03:22:9F:59:8F:96:52:D3:59:B8:6D:CB:A9:2E:97:A9:93
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:54:95:44:ec:5c:31:3e:f7:26:b7:60:3f:65:7c:7c:b7:
e7:ca:19:21:b8:05:e4:56:47:53:f9:49:f3:58:63:dc:ce:43:
98:d7:17:e0:a9:5b:3b:0f:d9:26:f3:2d:34:81:c3:de:64:c9:
59:b5:95:54:26:5d:ec:a9:85:b1:e2:d1:44:a6:8d:41:0c:41:
33:bd:ed:05:0c:9e:bc:e1:ab:07:24:13:0d:0f:19:1d:02:3f:
4b:4f:74:6e:c2:9f:a9:5f:d7:54:48:e2:aa:6d:c5:74:56:1c:
62:bd:1e:e5:8b:43:34:68:76:32:0c:65:8b:b2:9a:26:25:92:
90:ee:0a:2e:fc:09:d1:ca:49:a1:6e:9e:93:35:24:2f:67:3c:
1c:a2:e3:9b:30:cd:19:a5:0c:4b:34:63:23:8e:8c:6b:75:39:
8c:f9:6d:ac:90:7b:70:cd:54:4f:e8:6b:f6:20:8a:6d:ba:54:
bd:bc:aa:ed:f5:e6:55:77:e1:33:ea:45:a0:d8:f7:84:87:37:
ce:65:70:0f:10:ac:6a:2a:c2:22:a9:df:d8:c9:c0:c7:08:9b:
b5:05:15:00:0c:51:6d:0e:ea:b9:a2:f8:2a:34:25:b7:9d:0d:
88:24:9e:8b:d8:f3:7e:0f:96:9c:75:cc:6b:ad:b8:f2:b6:29:
a6:98:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:43:26 2025 by rpki-client