Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: ntU3UWaufZ1LyewMjTgL6wCMt6nNXKqQ/krjcw0dpO8=
Subject key identifier: D4:A5:2D:AC:06:56:95:21:CD:9E:02:2D:A8:22:71:4C:C3:A3:A9:E2
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019A20D1F0487E58E9453C48D7E9309D1888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 0ABD
Signing time: Sun 26 Oct 2025 14:00:20 +0000
Manifest this update: Sun 26 Oct 2025 14:00:20 +0000
Manifest next update: Mon 27 Oct 2025 14:00:20 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: 8qE1CMP7lh/T4g28MDjP/BfqHQYLKD94pIV51oxa6YE=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d1:f0:48:7e:58:e9:45:3c:48:d7:e9:30:9d:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Oct 26 14:00:20 2025 GMT
Not After : Oct 27 14:00:20 2025 GMT
Subject: CN=d4a52dac06569521cd9e022da822714cc3a3a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:a3:f9:c2:92:be:f4:39:15:0f:d7:e1:0c:
27:c4:53:bc:45:dd:9f:45:27:92:36:94:9f:58:c3:
8d:54:15:2d:91:d7:c1:67:77:91:11:51:8b:2e:aa:
72:e0:76:ce:0f:46:49:bc:62:bc:40:bf:91:df:96:
f7:4a:b0:35:b1:1d:08:49:fc:56:9c:9a:6e:e1:92:
7b:08:3a:93:2a:96:76:86:68:fa:b8:97:91:cc:f4:
b4:4f:2b:5f:71:1e:4d:ce:81:6c:5c:35:97:1d:7a:
28:c0:55:1b:f7:7b:6d:53:d4:23:eb:13:62:ad:40:
45:a6:9b:24:4e:cd:9c:f9:bc:c8:46:79:59:80:e3:
9e:28:eb:5a:24:ac:e0:10:20:1c:ea:17:c9:ca:c1:
7c:2a:48:ff:97:8f:60:93:a2:ef:60:df:75:7c:a8:
67:e0:c0:c4:cc:19:55:0e:5d:6b:9c:59:de:5d:95:
9a:4a:b3:03:8b:39:23:45:56:2c:d2:ad:98:b9:ee:
d3:03:74:8c:09:0c:e6:4f:c2:69:f4:3e:5e:20:ee:
16:f3:7e:76:13:8f:65:d5:e5:7a:b7:05:9e:be:8a:
87:14:a8:13:7c:17:f5:94:7f:f6:ca:d7:b2:9a:c3:
96:51:b6:40:59:0b:fb:78:ba:12:5f:8c:ad:7d:e9:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:2D:AC:06:56:95:21:CD:9E:02:2D:A8:22:71:4C:C3:A3:A9:E2
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:58:28:db:00:e2:a0:76:07:6f:63:9d:8a:80:9d:22:e7:
d4:c6:44:41:b1:f8:e2:79:7d:6f:95:68:e4:96:fe:70:b9:5f:
43:c4:a9:9e:3a:6a:1c:ac:88:59:1f:4d:00:5b:c6:91:83:dd:
7c:64:c3:e3:15:5c:93:18:09:85:fa:34:55:48:8b:45:a8:06:
86:e5:d8:4c:57:ce:57:71:ad:26:a7:0a:a1:2d:fe:a7:3c:34:
51:95:4c:15:26:ad:2c:5a:dc:7e:ac:2b:84:7c:9e:0f:e0:bd:
ef:40:52:04:71:79:34:7b:af:e9:4c:b3:96:71:43:2f:ae:3a:
04:d4:6b:eb:1b:66:63:6d:7a:28:58:0e:45:49:c7:3f:ef:f9:
a5:ae:03:17:da:6e:45:f7:90:e0:eb:a6:f8:8e:ca:bd:46:9e:
37:c1:ea:75:be:2b:4f:55:f7:6f:6e:a7:7f:3c:da:f1:08:6f:
7a:fd:59:d0:7a:b7:66:17:c9:54:7b:3c:b2:c0:2a:fd:82:87:
5d:e2:b5:f5:77:f4:2b:a0:e7:96:bb:c7:16:24:30:54:f6:c3:
e4:0f:1d:31:e9:20:29:db:84:19:8d:94:38:f1:d2:1a:c2:2e:
80:2b:af:fc:90:0e:08:b8:2a:24:93:52:47:f2:28:e6:cf:17:
2a:e4:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:22:36 2025 by rpki-client