Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: hDPOQNLLOGP5urN77KRN6knHvOobWFVsaTwhCgStsys=
Subject key identifier: C6:5F:DA:31:59:00:22:DB:AB:BC:A9:A5:15:66:E6:71:A9:9D:80:B3
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019A50750A855D695962FCF25B93F3E91BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 20:00:38 +0000
Manifest this update: Tue 04 Nov 2025 20:00:38 +0000
Manifest next update: Wed 05 Nov 2025 20:00:38 +0000
Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: kQn4gTFz9QXlg/xlceZgboCtrbkMyhhLrh84I/Tpu9g=)
2: hknoh0docunxqu7Kug4gGNXBb14.roa (hash: AvuF9rMQZFa9ncFfq1mEcbKCX39jWM/10n7pjunfFSM=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0a:85:5d:69:59:62:fc:f2:5b:93:f3:e9:1b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Nov 4 20:00:38 2025 GMT
Not After : Nov 5 20:00:38 2025 GMT
Subject: CN=c65fda31590022dbabbca9a51566e671a99d80b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:88:04:15:16:3f:10:47:31:a2:45:4b:ba:
7b:7d:2f:be:62:cb:3f:a0:02:17:12:6e:ca:65:2c:
3d:3e:96:43:eb:0e:ce:00:df:5d:d8:41:82:79:f0:
30:2a:cf:5b:1c:63:b2:4c:67:60:1b:92:5c:59:fd:
cf:8e:11:02:60:13:1e:60:cb:13:af:74:ee:36:93:
d2:67:f0:dd:92:72:b2:6a:87:bd:f1:df:0e:2e:c5:
f5:7c:2d:9b:72:fb:9e:7e:24:fb:bd:53:74:82:f0:
ec:d9:f3:69:75:18:11:4d:3e:bb:f6:ae:87:02:cb:
21:d2:12:1b:da:57:72:d6:c0:ed:da:09:c9:21:05:
9a:d7:4a:e3:1d:a7:41:28:67:83:7f:87:d9:89:92:
f2:de:7b:1d:ae:23:68:05:a5:a5:cb:ce:ac:17:60:
94:e4:21:a9:7d:a2:44:fb:ae:57:af:97:87:c5:5c:
e5:eb:2e:8a:fe:41:13:27:85:e1:5c:43:1d:c8:cf:
10:a6:60:15:d9:67:47:fc:3f:c8:7e:9d:7a:d7:f0:
67:21:53:0a:a8:e1:87:a4:a8:30:63:69:7f:03:94:
22:aa:fa:42:ca:40:3b:db:06:c6:b0:14:f6:03:3f:
c7:61:6e:b6:6e:81:aa:cb:1e:21:1d:09:6b:ec:0c:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:DA:31:59:00:22:DB:AB:BC:A9:A5:15:66:E6:71:A9:9D:80:B3
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:14:07:cf:ac:62:a3:7f:a4:9b:34:06:0e:fa:8c:02:ec:17:
b7:62:4b:dd:c8:b9:d8:32:a4:5d:4a:ad:37:34:66:4d:43:f8:
89:bd:15:71:bc:67:ce:12:d6:17:cd:c3:2b:a8:dd:12:53:e2:
3c:2a:49:97:9a:6b:a0:7a:87:3e:6c:67:2b:4b:51:19:e4:43:
96:82:64:01:d1:7f:b7:b2:bc:c4:3c:cb:2f:90:92:b0:64:50:
76:dd:e9:c9:62:94:5c:cf:ea:97:7e:d6:9d:6b:a7:4e:88:4b:
b5:ef:c0:2d:00:9d:35:1c:50:6f:22:a2:88:bf:e3:3c:2a:ba:
85:34:23:ef:e8:fa:8a:a6:31:41:61:b7:f1:61:74:06:f8:d5:
50:56:46:2b:1b:15:8c:97:53:4f:0f:ed:73:13:43:a2:f5:fb:
e5:ec:fe:26:b5:d2:32:eb:d4:52:b2:25:cc:49:81:61:e6:6b:
f5:e2:47:70:8e:27:ad:85:7c:77:5d:34:90:d8:cc:8f:fc:15:
87:aa:0a:44:7a:a9:ef:eb:d3:e5:4c:02:99:48:cf:b8:35:38:
3b:92:93:54:c8:5f:2c:03:6b:88:e6:23:54:9a:f7:e8:25:36:
f4:9b:3e:09:1b:73:ff:a8:27:01:ff:0c:5d:7c:7e:76:9c:10:
20:18:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:07 2025 by rpki-client