Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: HniCdeiACQYMl66vBSusyc2A5qwCILFZTAHvN02af50=
Subject key identifier: 59:D3:A1:06:BC:EB:56:82:FC:82:6F:23:AA:46:B5:FF:21:2D:4C:DE
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019A3A921BB438941D576FECA9736F757D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1694
Signing time: Fri 31 Oct 2025 14:00:45 +0000
Manifest this update: Fri 31 Oct 2025 14:00:45 +0000
Manifest next update: Sat 01 Nov 2025 14:00:45 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: FURRhnEdSN35gutsqnxToYud/Qe5vq+l3363P4BL/T0=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:92:1b:b4:38:94:1d:57:6f:ec:a9:73:6f:75:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Oct 31 14:00:45 2025 GMT
Not After : Nov 1 14:00:45 2025 GMT
Subject: CN=59d3a106bceb5682fc826f23aa46b5ff212d4cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:19:0f:f0:e5:92:82:9b:8a:d4:6b:ce:58:
f1:4e:9c:52:5a:59:cd:9d:8d:94:03:70:0f:85:a3:
40:7f:07:a5:b1:22:ff:d4:6f:23:26:29:92:73:d1:
a1:2d:28:1f:c2:e0:bb:75:cb:eb:ae:59:2e:2f:ba:
ad:d1:f7:b0:42:66:89:d7:8e:1f:30:35:3d:af:a2:
45:15:65:69:f6:75:d0:db:38:65:42:2e:20:61:6b:
8c:69:2f:01:e0:57:12:b3:b1:c0:36:a0:0f:e6:c3:
cd:33:85:1c:83:1d:0b:1d:0d:c2:61:48:e1:47:37:
62:49:6c:5a:db:4b:30:2c:6d:14:2e:f6:3e:48:a8:
9d:2e:72:97:02:9c:ac:5e:0b:45:51:7c:64:21:43:
a7:4b:7b:68:a2:d0:02:65:c7:d6:70:67:65:6f:80:
9f:b6:44:ef:c9:1f:c0:16:43:8e:98:cf:ee:d0:d0:
e7:65:de:5b:17:3b:5f:b6:50:d3:39:49:fd:a2:62:
3a:4f:d1:b8:ae:49:ff:91:d1:5d:98:73:35:c7:e5:
02:84:85:5e:ca:80:4a:de:d2:ef:72:be:8a:90:ba:
54:5a:e9:aa:19:b1:f6:60:78:96:0a:aa:e4:59:a0:
9b:0b:1d:e9:f2:cc:f7:71:c5:30:34:0d:38:2f:10:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:A1:06:BC:EB:56:82:FC:82:6F:23:AA:46:B5:FF:21:2D:4C:DE
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:24:1b:99:61:bd:9a:7f:0e:bc:4a:41:b4:50:82:6b:e1:
c9:3c:fa:ac:d7:24:aa:2f:a0:b6:d4:51:92:72:34:0f:97:85:
be:43:76:da:e2:4a:aa:aa:2b:45:90:c2:32:1d:76:c2:67:3b:
c9:16:9d:70:d0:2d:a5:e1:60:a8:4f:ff:b8:fa:ac:fa:53:f1:
23:2f:f6:ea:70:0f:96:18:a2:d6:8b:fc:8d:3b:ed:9e:4e:e0:
a4:6f:a5:9a:0e:94:be:10:68:75:36:e3:8d:28:ac:08:e2:fd:
19:41:9f:e5:c5:24:73:72:e9:11:61:f1:46:39:2d:37:db:8f:
78:28:75:07:39:41:de:11:07:f4:45:9b:75:eb:7f:16:5e:d9:
0e:09:f8:99:42:27:54:62:70:fa:b4:57:1c:39:25:84:6d:73:
a1:75:4a:f2:55:8d:0f:e3:4d:a2:83:25:fa:d7:a0:64:78:79:
86:dd:2f:e2:5f:ab:ff:52:0f:64:64:08:a7:24:3b:26:41:d7:
4a:c1:8b:a0:36:44:aa:06:13:40:05:af:dd:61:d8:26:1e:40:
66:70:85:e0:4c:aa:f3:24:b0:f8:34:ed:79:bf:89:c0:b6:40:
ce:3d:46:ff:8c:76:12:4c:c5:ba:df:db:c3:2b:ed:54:55:c3:
d6:8a:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:51:20 2025 by rpki-client