Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: 9kr2ybR3s2qvBAAaWZI0XWLjwsDNwRDZ/GUF+veRPow=
Subject key identifier: F8:CD:EB:9B:9A:11:9D:84:2B:6C:7D:70:86:AF:A9:61:7F:50:27:8A
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 019A59AF1D106C6AD6AA59E9908A1DDE1425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 16A7
Signing time: Thu 06 Nov 2025 15:00:39 +0000
Manifest this update: Thu 06 Nov 2025 15:00:39 +0000
Manifest next update: Fri 07 Nov 2025 15:00:39 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: wFnEvSoebChjQClJK4ejkq9IxzpLMC9uQbS/jpQYkOw=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:af:1d:10:6c:6a:d6:aa:59:e9:90:8a:1d:de:14:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Nov 6 15:00:39 2025 GMT
Not After : Nov 7 15:00:39 2025 GMT
Subject: CN=f8cdeb9b9a119d842b6c7d7086afa9617f50278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:d5:b2:6f:94:86:ad:b6:17:e0:c0:7a:bf:
52:1e:55:b8:9b:fb:11:a9:85:ca:ea:89:fe:3c:3d:
2d:5c:6c:57:be:7f:6e:9b:ec:c2:c2:85:1b:6f:cb:
5e:ec:cc:0e:53:3a:81:bf:45:33:fd:a1:db:c3:77:
f2:1c:77:ff:95:72:ab:be:06:87:d4:80:6f:4a:48:
34:06:7e:07:70:bd:e4:2d:9d:c4:c0:2b:8d:c8:eb:
97:7d:0d:ee:ec:7f:ad:58:27:10:bc:f6:a3:42:33:
ff:07:6c:1a:f5:73:af:d3:93:b3:b4:ba:fb:33:d6:
e3:bb:df:6c:d0:99:8b:f9:bb:26:73:be:5d:88:7d:
12:52:b4:5a:e5:c9:c5:19:88:c8:95:72:e8:2c:a0:
6e:17:54:61:e5:1d:67:45:32:08:c3:01:ad:96:f4:
d4:44:6c:bd:32:9e:89:ed:df:c9:bf:ef:6b:9c:cd:
12:ab:39:43:14:3c:38:be:02:ab:78:e1:ed:cf:d8:
1b:eb:68:92:a8:f0:83:c8:9f:d1:13:c5:a1:80:48:
fa:69:9d:f4:6b:d0:8b:28:98:9c:aa:a5:3a:06:4b:
d5:76:b2:d5:80:e4:76:96:dc:2f:58:4d:b1:69:b9:
98:2a:a2:78:47:4e:e2:d6:02:55:c2:e3:07:3c:04:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:EB:9B:9A:11:9D:84:2B:6C:7D:70:86:AF:A9:61:7F:50:27:8A
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:f8:ab:63:05:84:8a:81:0c:df:4b:7e:92:a0:a0:a5:8c:
46:d3:d1:9a:d8:9e:2f:04:33:00:23:46:b9:fe:9b:39:d7:68:
ad:8c:b1:3d:9c:82:b6:b5:53:7e:9f:b3:9c:9e:07:e5:c2:2b:
5f:5d:35:6d:67:25:2d:0d:dc:82:69:01:50:7f:2a:8e:75:3d:
de:45:90:49:fe:8e:84:fd:16:2f:3c:1c:06:a8:b1:35:1a:5f:
ca:3f:03:fc:20:81:c1:d7:4b:1a:67:91:8d:41:3d:ab:76:71:
d7:26:9f:40:8d:36:29:54:00:74:97:0c:f5:2a:2e:c1:66:9a:
7a:42:1f:3b:0b:70:9f:03:bc:9d:36:60:9d:fa:20:b8:7c:89:
f4:42:6b:0c:4b:3b:68:f0:2c:f6:79:5f:d8:ee:4c:b2:80:0e:
0e:a2:b4:cb:13:ae:f3:bb:35:6f:56:70:25:4f:33:d7:90:75:
93:31:17:5c:40:43:ba:5a:e4:28:2b:d5:8c:d4:d6:2e:05:ce:
8e:a1:d7:b7:c7:5b:74:ae:11:46:e7:33:12:80:e5:7b:10:2d:
25:a0:97:1d:f5:90:8f:5b:09:9a:67:04:ae:49:7e:f9:61:93:
1d:db:97:dc:37:cd:54:fa:43:ca:90:db:e7:5a:6e:fb:7c:ab:
16:8f:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 23:49:26 2025 by rpki-client