Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: Ur8qgWtNMMNXRvpPDXF6856i6gawq5pMF4aiEdu//yY=
Subject key identifier: 99:AF:B3:A9:A3:75:7A:A4:1F:C4:98:56:9A:7C:C6:4A:08:99:12:48
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 019873E3D9118797D38C6F7FED135E0DB0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1231
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: urkvBi6cb1eyxToReWjAQ4L0AHxueGiwu8pkoxk2fdU=)
2: Jz9OReni23tlAFlv2GW25Ecf7IU.roa (hash: GvIndfLunXr32q+mQyRE3wlkyEX+dK/mibzNsCJj8Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d9:11:87:97:d3:8c:6f:7f:ed:13:5e:0d:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=99afb3a9a3757aa41fc498569a7cc64a08991248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:70:7a:e1:7c:c3:e0:59:4a:8b:e0:28:ea:
68:f9:e4:41:d2:b4:8e:9c:66:4a:dc:0b:a5:2f:2e:
df:a7:ce:19:b5:e4:7c:38:6f:f9:42:2c:9b:d5:59:
d9:df:79:ea:9e:21:dc:4e:ef:13:eb:e1:b3:41:1b:
3d:ff:c9:0d:02:f0:99:f2:28:58:bc:91:20:5c:e9:
e0:0b:ce:9b:43:37:f1:c0:e6:7f:9d:ee:98:7a:1e:
45:70:7a:fd:20:50:2f:d4:d9:fb:76:31:aa:88:87:
f6:36:e3:2e:d8:71:19:10:e6:5f:92:94:42:1c:ca:
59:b4:34:82:65:7f:5c:c3:99:92:52:80:a6:7d:e4:
c7:8f:5f:be:e1:54:5f:e4:17:d6:7a:6f:cf:b1:e3:
df:6b:51:3f:27:85:7b:3b:79:13:6c:2f:79:5b:35:
65:38:a3:70:05:b7:6f:94:33:ac:1a:16:32:0c:f3:
5d:40:fc:81:e6:70:a5:df:b4:8e:ae:07:ec:36:43:
01:a4:75:ea:fd:c0:29:7b:8f:ea:05:db:0f:4c:2c:
7c:7f:25:94:8e:c1:b7:cd:a0:18:da:73:43:68:56:
7e:78:1a:36:6c:df:38:79:9c:cd:c8:1f:e7:93:c9:
1a:96:dd:48:08:86:04:ac:07:1a:83:a2:ce:a1:50:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:B3:A9:A3:75:7A:A4:1F:C4:98:56:9A:7C:C6:4A:08:99:12:48
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d5:6f:1a:74:5e:73:c9:ee:e8:02:b0:00:09:8c:36:93:3d:
05:32:f1:45:99:ad:97:1a:24:b7:39:f8:de:69:04:54:90:08:
ac:7b:07:e6:26:f7:29:80:fc:58:23:5a:a5:5e:e0:0f:af:fd:
21:10:b7:7f:15:e8:68:51:24:6d:8e:97:21:92:5b:3a:f2:01:
99:c4:3f:6a:03:4f:82:e2:95:11:33:d2:6b:56:bc:bb:1a:91:
9c:e5:3b:24:64:44:64:b9:0d:ab:bb:4a:ca:ad:cb:c2:c5:16:
4d:86:64:f9:e3:e4:ae:fb:d9:aa:bb:dc:07:e2:86:3e:0d:24:
2f:c7:4a:83:98:bd:3f:b6:75:92:11:37:d6:37:6f:15:06:b5:
a7:be:33:61:21:9a:97:64:b8:69:88:94:74:2d:a9:8e:b9:76:
2c:10:f2:c0:0b:13:85:f5:63:c4:b6:44:d1:e4:e4:42:69:84:
db:d8:81:d9:d3:f6:d3:a9:1f:e5:a5:2d:ec:51:bf:0d:29:38:
0d:06:d7:b1:3a:eb:8d:43:d9:65:41:96:af:fa:14:43:e6:14:
ea:98:3a:c3:e4:40:60:0b:0e:95:df:07:92:2d:b9:9e:cb:cf:
b1:d2:33:a4:39:ca:0e:55:4f:6e:ea:69:f6:85:89:c6:5f:bc:
9a:02:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:42 2025 by rpki-client