Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: 4OwQHvG+7GM461yv4n6rgWyCIzWMGo2SK7hU3bArvo0=
Subject key identifier: 31:5F:10:5B:3C:0A:B1:F6:FB:E3:73:5F:55:54:CD:50:B7:93:13:CE
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 019877F6018B28197E97AF62646F8215E201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 09E1
Signing time: Tue 05 Aug 2025 02:01:07 +0000
Manifest this update: Tue 05 Aug 2025 02:01:07 +0000
Manifest next update: Wed 06 Aug 2025 02:01:07 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: Dcw2NEkefhUwVWv25yFAmpIW4BSftW16ikDu+Ef9i3U=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:f6:01:8b:28:19:7e:97:af:62:64:6f:82:15:e2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Aug 5 02:01:07 2025 GMT
Not After : Aug 6 02:01:07 2025 GMT
Subject: CN=315f105b3c0ab1f6fbe3735f5554cd50b79313ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:50:f1:bb:f0:bd:a2:0e:0b:d3:be:f2:5c:
15:de:ff:fe:40:0e:0e:45:92:2d:87:79:4d:e2:8c:
86:40:e4:f8:43:f7:58:70:3f:ab:4d:ea:ce:bd:1d:
a5:dd:3a:20:ad:18:d6:8a:76:d5:19:62:62:f4:df:
14:6e:5d:a3:f1:5e:2a:bb:fe:de:9d:51:2e:47:c9:
de:cd:5c:67:cf:40:15:c3:6b:7b:a7:7d:8f:52:25:
3a:ec:21:ac:b9:73:7e:d2:34:ae:2d:89:ef:bc:d1:
93:f7:f2:ea:10:9d:d3:ad:43:b2:08:b1:d8:53:fa:
76:fd:d6:2d:a7:ef:34:b4:48:16:d0:ba:2c:3d:0c:
e6:f2:2a:a7:77:23:f8:03:64:c5:4c:3b:f7:c2:95:
4f:5f:4a:a7:ad:1b:c2:4e:68:4d:57:87:24:3b:3e:
8d:97:21:86:c0:99:46:5b:89:4c:09:dc:f4:98:e8:
70:7e:a3:36:25:61:23:17:45:2c:59:23:c0:26:09:
55:5f:7d:88:4e:c4:86:dd:2d:db:0d:fe:42:0b:a2:
1b:b1:29:44:9d:51:24:b2:5d:8c:20:bb:1d:08:a3:
f7:c6:e9:31:b6:78:75:b3:38:d9:5e:d6:35:ca:5d:
3c:3c:12:a7:e3:c7:c8:cc:61:3f:c9:94:b9:f8:57:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:10:5B:3C:0A:B1:F6:FB:E3:73:5F:55:54:CD:50:B7:93:13:CE
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:2a:c6:c1:10:3b:e2:59:61:8d:4b:6e:98:cd:e5:12:9a:
ec:3b:9d:10:f5:48:a5:7d:05:df:37:9d:9c:1c:e3:7d:48:1a:
20:c8:c7:a9:45:b5:8e:24:82:81:3b:e3:c6:2b:fa:7f:fd:c0:
4c:4d:fc:95:3c:50:fb:14:e7:97:b4:34:b3:fa:b3:a8:f0:d3:
03:da:dc:cb:55:ec:bc:85:57:8f:25:34:18:8a:ec:1d:da:15:
a1:aa:ae:15:98:94:bb:13:6b:19:7b:11:5a:5f:8b:df:e1:29:
8f:99:cc:70:1b:53:e3:37:bc:5a:d2:03:58:04:d3:4c:1c:1d:
17:a4:f6:45:f5:8c:29:fc:c5:3b:5c:a1:c0:6b:1e:26:13:95:
5d:85:64:ed:a7:33:bb:e0:73:bb:46:50:ac:30:b8:ce:87:03:
0a:da:1c:61:89:0b:e7:13:85:6a:62:a0:22:76:34:b9:ce:70:
ed:e6:72:36:a3:91:5b:ea:ed:e0:d6:76:e7:b3:d0:eb:11:03:
6c:c3:1f:65:63:5b:38:79:69:83:5b:9c:01:75:20:66:e6:33:
b4:dc:5f:fc:4d:a5:09:a5:dc:45:7f:96:65:ad:3b:0c:45:e7:
76:7c:b3:66:69:f7:4d:5e:ec:c7:65:44:93:4c:27:4e:50:56:
bc:94:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:14:50 2025 by rpki-client