Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: SJO/qPyZ/PfWJwbZrNXAkltdEO1oKEsoPafNHxx4HiE=
Subject key identifier: 7F:33:55:9D:20:85:12:90:D6:1C:7E:37:F9:55:E3:DB:30:C3:0A:6A
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019A4D064B7AAF407A9D337792C66FAD2A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 12B9
Signing time: Tue 04 Nov 2025 04:00:49 +0000
Manifest this update: Tue 04 Nov 2025 04:00:49 +0000
Manifest next update: Wed 05 Nov 2025 04:00:49 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: tb0j0eHhHDhsl6geUSI5pWHQU4zoYoSzM7RB0hn/2VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:4b:7a:af:40:7a:9d:33:77:92:c6:6f:ad:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Nov 4 04:00:49 2025 GMT
Not After : Nov 5 04:00:49 2025 GMT
Subject: CN=7f33559d20851290d61c7e37f955e3db30c30a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:c0:29:a5:b8:96:56:11:20:8d:13:18:01:
49:4f:e9:11:f6:16:81:8c:6a:29:01:86:58:aa:ad:
9c:a6:06:01:28:0c:c1:e9:01:21:de:f2:05:60:bb:
b0:48:3b:d2:ae:5c:80:87:07:4b:9d:89:89:72:4d:
48:f9:92:2f:26:9e:6b:c6:80:25:87:ce:79:1a:f5:
48:e2:36:a0:26:7b:12:fa:14:1d:66:a0:e3:d5:fd:
75:5a:bd:99:c9:4e:e8:51:e6:bf:ee:f9:2a:38:6e:
1a:29:bb:18:c5:9b:3b:ee:68:b3:1a:37:37:d5:9a:
65:87:1c:fb:de:36:35:4e:3e:28:7c:3a:40:90:3f:
7e:fd:a7:d7:9e:76:9b:19:03:4e:d2:b2:f9:41:6b:
5a:37:0a:71:4d:c2:92:04:9b:02:96:db:b1:a7:dd:
b5:30:a9:d5:db:c6:a2:58:e1:3b:6d:f6:2e:b8:92:
7e:85:ee:c7:b8:96:2b:98:7b:69:e2:cf:fa:f1:75:
34:38:db:46:06:70:2b:05:60:25:fc:77:01:c4:89:
5b:8d:f5:bb:f7:49:3e:85:41:b4:0d:5b:ea:f8:6f:
a4:8f:ae:c6:56:ef:ed:4f:cf:cc:d6:c1:00:cc:1e:
00:ae:35:cd:4b:43:96:df:61:4f:70:bc:9c:82:6b:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:55:9D:20:85:12:90:D6:1C:7E:37:F9:55:E3:DB:30:C3:0A:6A
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:a6:53:1f:2b:d6:67:52:44:46:8c:aa:e3:b0:c3:e1:76:
9b:4c:35:2f:4c:10:12:71:fd:cb:d0:2e:c0:e9:26:e8:98:79:
af:72:8c:11:24:ea:2a:99:3b:c1:29:00:ee:a8:5f:90:40:98:
a8:a9:0c:ce:8a:4c:d4:f4:4f:22:ee:3d:ea:d6:be:c8:ff:f9:
b1:7f:aa:6e:0f:20:70:79:c7:81:48:fd:2e:7b:67:94:31:d2:
bb:69:3f:5f:ec:61:3c:c8:21:c4:4f:14:4f:1c:fa:69:23:3c:
9e:67:36:e0:8e:0b:db:c6:e5:b6:6b:59:3a:96:5e:f0:d8:4e:
f4:4c:51:15:cf:29:74:c8:32:6e:c2:0d:cf:9e:76:50:81:12:
d9:d2:3c:65:80:f9:49:60:6d:46:a0:53:f7:46:5a:43:00:7a:
f3:d9:63:ff:67:91:f2:60:98:ce:3b:a2:1d:e5:18:28:15:d3:
a1:c8:a0:94:02:c6:a6:8e:fe:12:95:99:c2:dd:c8:85:f6:1f:
d9:3e:d1:27:30:d0:5b:b1:92:4c:67:39:0e:94:e8:85:f8:24:
2f:8c:ac:8d:c8:af:38:10:79:c1:cc:e3:94:d8:19:60:df:cc:
b0:9a:e8:59:da:40:d9:0e:39:70:6b:b9:10:2c:5e:2f:ab:e6:
be:ed:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:56 2025 by rpki-client