Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: t8k7/PIzAj9Txq24zqwdzZOkv/ewF/uipeLycVBm6lo=
Subject key identifier: 7C:D7:30:4A:6E:78:FE:23:0D:AC:27:17:9C:3C:2A:52:67:C9:24:BD
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019872CFCCC1AAE9C2FD4770B13E285647D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 02:01:17 +0000
Manifest this update: Mon 04 Aug 2025 02:01:17 +0000
Manifest next update: Tue 05 Aug 2025 02:01:17 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 5UPx29q5267598ptxx4wd+px3z2MQAZ+P4ChNojMRjk=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:cc:c1:aa:e9:c2:fd:47:70:b1:3e:28:56:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Aug 4 02:01:17 2025 GMT
Not After : Aug 5 02:01:17 2025 GMT
Subject: CN=7cd7304a6e78fe230dac27179c3c2a5267c924bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:1b:5e:f4:0e:46:7d:b3:d1:fc:aa:2a:92:
8e:e0:04:b3:1c:e8:01:41:f1:80:f7:0d:21:1d:5e:
e8:b8:67:10:a3:6e:11:bc:17:f1:6c:2c:89:03:05:
cb:50:70:77:58:10:55:50:64:fa:66:2e:12:29:c8:
ef:62:6f:c0:53:a6:8d:a6:2b:31:77:06:4f:a3:2f:
3f:10:b6:9a:12:77:dc:e5:5b:71:bf:76:1f:4c:dc:
39:47:8e:1c:f5:e3:63:67:83:ba:6f:2c:b7:83:28:
a0:9b:ad:b2:0e:69:c3:46:80:97:af:e1:c4:9a:2f:
f9:b7:e7:16:b0:fe:99:1e:b6:e8:51:8f:4a:16:6b:
5e:35:93:d9:01:1f:b4:03:c3:99:9a:96:63:a8:3b:
be:38:88:2c:f6:ad:02:ee:ed:16:06:5e:88:82:ce:
e7:c9:2a:31:ed:09:ea:10:b4:d6:f7:e3:f2:e5:ea:
69:06:b1:22:78:cf:61:0e:cc:1b:5a:3c:2c:a8:e6:
fb:15:10:72:10:b8:c0:a1:74:b8:27:0d:2c:41:ce:
16:f4:98:ba:bf:cd:b9:28:60:e5:22:89:c8:73:0e:
57:eb:ce:1c:00:26:57:43:14:b9:a8:a6:fc:b4:a1:
71:86:f2:56:aa:6d:23:0c:5b:27:ca:75:bb:71:0c:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:30:4A:6E:78:FE:23:0D:AC:27:17:9C:3C:2A:52:67:C9:24:BD
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cb:aa:02:02:ae:7e:0d:2c:5b:17:19:71:25:79:40:3e:5c:
77:19:32:08:0c:e4:01:3c:f9:2f:e1:5e:6c:82:b0:d4:be:c5:
2a:06:c6:f2:29:79:e2:7a:32:e0:9b:90:7a:92:68:16:2a:58:
93:9d:69:d6:7d:b4:95:b1:ce:f8:65:90:4a:fa:6e:0f:80:68:
29:69:b1:1d:15:9a:b3:c6:b8:01:09:c0:f5:4a:22:30:06:0c:
b8:45:a6:14:96:ae:cb:53:4a:e6:0d:cb:83:22:55:d0:8f:65:
92:b0:08:82:98:20:50:7b:ce:0f:f7:33:d6:62:6e:4f:eb:2e:
fc:68:44:61:c5:a9:5b:cc:0d:22:ac:df:b7:62:00:51:9d:96:
cc:be:b6:b7:0d:62:cc:f5:0c:15:19:f3:6b:84:a7:58:59:bd:
80:6a:f2:0d:9a:7c:77:07:85:ab:99:a2:4d:18:df:12:89:3b:
40:76:08:0d:2c:fb:89:bf:c9:f5:61:86:c8:bf:0a:b4:27:c9:
1e:86:fa:8c:f4:ee:53:8e:04:8d:5e:a7:ac:d5:1a:af:00:c3:
45:73:90:d7:a5:37:84:37:4e:dc:b1:ed:a6:1e:90:a8:54:0c:
32:40:2c:f5:f3:f8:8b:b8:84:0d:b2:38:a7:95:85:96:85:18:
f6:0d:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:47 2025 by rpki-client