Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: GhIFDYaT5FXeuxWJpCTYaEmZMHczi7C2CgrPjzw7LnQ=
Subject key identifier: 6F:81:99:76:8F:93:C8:59:95:F1:5D:CA:4C:12:88:D2:7E:88:49:38
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019A4FD000956D65136EB3C8F57D17D2C9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1328
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: 9o02hB3f1fgNaTXsKz2Cs5g1GznF14YtO0SHfZVghEo=)
2: m1rDa4mFSS7DgxLKEUuhg1KKIME.roa (hash: P+gAWygPgYFKaEAocSrD9brqA8mxvT8s5Q0PR3R+oc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:00:95:6d:65:13:6e:b3:c8:f5:7d:17:d2:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=6f8199768f93c85995f15dca4c1288d27e884938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:89:15:ca:6e:bc:9f:e6:fb:11:a2:f2:3b:
49:a0:2c:26:2f:dd:25:4f:40:7f:70:83:a6:cc:37:
e6:0c:bc:c7:04:0d:46:68:a5:e3:fa:b6:c0:cf:96:
46:39:53:d9:d0:ba:0c:d0:26:a6:45:fb:e8:54:49:
fa:da:db:bc:b2:9c:af:ba:83:14:db:83:86:2b:f0:
1d:39:d4:4a:ad:be:57:b1:27:20:d7:c4:d1:48:3d:
55:99:ae:c8:d5:16:65:3d:7b:f7:79:7e:74:48:2c:
b1:1b:9a:fe:64:10:c7:c0:0c:bc:8a:75:8f:4e:a7:
76:bf:60:9e:6c:48:2b:33:a9:97:53:fe:f9:c1:79:
8b:2a:8e:7b:b3:11:39:51:1e:ba:cd:3d:90:3a:a8:
7b:5f:43:f6:cc:5d:01:e4:c3:63:06:95:41:4f:58:
95:00:70:4a:74:6b:66:6e:06:df:35:de:f6:5a:78:
c0:22:03:14:8f:35:0c:cb:5b:d6:90:b9:de:23:d8:
bd:e1:37:e6:3c:93:99:e0:6b:97:ae:8c:43:1e:4c:
13:53:2d:f2:9c:83:e4:ed:9d:15:74:32:e1:31:03:
74:ce:79:96:5f:ab:a9:ba:8d:5f:c6:da:34:b2:d1:
d7:2f:2c:4f:10:9d:a8:34:8e:d8:0e:db:a0:47:a0:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:99:76:8F:93:C8:59:95:F1:5D:CA:4C:12:88:D2:7E:88:49:38
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2f:4b:13:2a:cf:b5:62:eb:bd:50:1a:68:7b:63:df:41:64:
94:04:4d:8f:e4:eb:20:4e:cd:cf:4f:1f:17:6b:c6:95:63:15:
06:29:aa:36:d7:d5:66:1a:d4:37:c9:1f:34:a5:24:00:60:1d:
54:a8:42:af:5d:d8:6b:56:98:1a:dd:60:f1:4c:de:92:31:c4:
14:03:98:f8:5b:93:8f:8b:64:a5:2b:30:cd:06:61:5a:f1:aa:
50:7c:d4:26:8f:6c:9f:89:ff:67:a9:d4:b7:a5:a3:26:a2:e8:
10:ca:3f:a7:51:f2:e4:e9:6c:5b:19:31:76:1a:d8:2e:a8:b4:
e4:04:29:a5:b3:68:41:b5:97:7f:84:32:64:ee:fa:95:15:36:
2b:4c:0e:f6:7b:05:4b:ca:9e:51:2d:dd:f5:4a:1c:31:7a:4a:
d8:fd:22:9b:08:ff:32:76:3c:8c:97:94:ef:59:15:a9:c4:1e:
d3:da:26:fa:a1:00:a6:e1:2e:37:9e:81:06:15:0c:61:86:8c:
32:09:19:8f:4d:2f:34:f1:4f:24:5c:39:04:be:74:cb:d5:95:
00:d6:29:5c:e0:51:1c:af:38:68:62:7e:b1:e2:4a:07:a1:86:
06:c5:83:fb:58:74:66:12:38:0d:01:4c:3d:cd:72:fd:a8:9f:
0c:59:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:47:20 2025 by rpki-client