Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
File: HlqvPQaD3IoNWMZDgm4WbTwozKk.mft (raw, json)
Hash identifier: yCcjBbUWu470uud7cJHOllxHMzFWUc+l+ZAaVBNeMQ4=
Subject key identifier: 85:9C:5F:88:A4:EF:9A:DA:CE:99:1C:67:DB:9D:FD:78:94:FD:2B:81
Authority key identifier: 1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
Certificate issuer: /CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Certificate serial: 019A4D3CB65083F33AD76F61318FDBC65144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: HlqvPQaD3IoNWMZDgm4WbTwozKk.crl (hash: mX7j6+E7Xxt+nJH6SGPu/vZS1ujlnYvwylCE5BDejeE=)
2: RKyzB9bUwZYi5TsxSj7CGxt394k.roa (hash: Hh9WM4Bb/ik/WwsavUvg8LAp8Fn8QkXbUV4e4PeWt3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b6:50:83:f3:3a:d7:6f:61:31:8f:db:c6:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5aaf3d0683dc8a0d58c643826e166d3c28cca9
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=859c5f88a4ef9adace991c67db9dfd7894fd2b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:71:74:9a:29:6d:32:eb:40:88:60:90:cf:
ec:ad:b6:4c:72:27:4c:1c:31:26:d0:24:f7:19:42:
57:20:f1:94:45:32:5f:4e:4c:ef:4c:93:36:44:31:
48:66:67:b7:eb:31:40:af:d2:e0:e6:f7:ea:5b:ee:
e5:80:a3:70:62:0f:50:ef:ba:dd:6a:5d:30:b4:73:
f5:d5:89:1a:f7:d7:8e:7c:8a:78:9b:12:0b:e6:3c:
81:ff:74:33:f5:de:a7:bd:c4:4b:bd:f4:a5:09:02:
c1:9a:47:62:01:47:ac:d9:18:5b:a7:59:88:bc:55:
39:71:03:24:69:f7:f2:d0:d3:7b:ef:49:64:f5:92:
cf:13:fe:c4:90:78:49:44:1b:82:75:e3:16:22:0a:
c3:c6:42:c2:9d:41:61:f9:a0:fe:84:64:ee:d5:27:
10:92:12:5d:18:e7:58:66:cd:3e:30:b3:62:9a:16:
35:4b:76:17:55:6f:14:44:db:b5:12:37:64:91:f0:
f3:68:6c:b9:57:2d:e5:bc:5a:81:77:ad:0a:24:14:
86:7d:38:d0:2d:da:e3:e7:ea:76:0d:bf:19:c5:fa:
bd:ee:51:c7:7a:49:e5:c1:99:cf:c1:79:bc:3a:7f:
ce:0e:66:54:9a:bd:18:98:79:31:1c:92:3b:8d:e1:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:5F:88:A4:EF:9A:DA:CE:99:1C:67:DB:9D:FD:78:94:FD:2B:81
X509v3 Authority Key Identifier:
keyid:1E:5A:AF:3D:06:83:DC:8A:0D:58:C6:43:82:6E:16:6D:3C:28:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlqvPQaD3IoNWMZDgm4WbTwozKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/83df5b-d153-4cb6-baf3-4cd38b758d5c/1/HlqvPQaD3IoNWMZDgm4WbTwozKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8c:07:b5:25:96:e1:c2:53:fd:a0:58:7e:1c:ab:32:2b:12:
3c:84:88:33:15:cf:f9:a2:e8:1b:82:06:20:36:17:f3:5c:9c:
dc:9c:dc:43:12:7b:dc:4a:23:92:44:bf:8a:6b:e0:f7:e6:db:
94:62:12:85:a1:17:1b:d7:c2:3e:21:d5:7b:55:0e:4f:cb:95:
38:3e:d0:7c:ad:cd:c5:ce:60:12:c0:06:d4:d6:d7:06:fc:47:
1a:b3:97:5f:50:0f:be:25:c9:c4:4a:3d:03:62:9f:13:3a:0a:
94:ff:8f:0e:e0:49:6d:c0:5c:fe:bf:e2:a4:62:2f:6a:36:d3:
18:33:2f:6d:26:3f:81:0d:b7:2b:c3:f6:f2:4c:63:37:ec:06:
94:0a:b6:29:51:dc:f4:30:5a:4c:be:27:db:8a:0e:eb:c6:b9:
ca:d3:48:cf:95:67:61:30:c4:cc:d2:47:9d:85:c4:c4:cc:69:
bb:a6:8b:14:6f:3b:bc:03:98:b3:ee:fb:6a:32:74:18:f2:51:
22:0f:79:c2:1f:d6:c3:4b:4f:50:3c:30:bd:4c:ef:e4:fa:d0:
2b:de:eb:04:74:4c:72:db:78:9f:46:47:4e:11:fb:a9:e5:72:
50:60:ec:6f:de:8e:bc:c9:50:e3:dd:3e:5d:39:ea:fd:4f:89:
e0:e7:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:35 2025 by rpki-client