Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: Oy6Q25TKa5NjeIz6YoPcWPnxu3odblI9GKUyTGJpPn0=
Subject key identifier: 66:CE:0E:34:CA:2F:0A:94:EA:81:1D:2E:83:F7:D4:0C:90:22:FA:43
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019872CFEB3F9392A789CA80C58412837988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:01:25 +0000
Manifest this update: Mon 04 Aug 2025 02:01:25 +0000
Manifest next update: Tue 05 Aug 2025 02:01:25 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: oeyfPA8S27u1tNqlLr4vSRHWHIBnR8xbNQXzEqqB/FQ=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:eb:3f:93:92:a7:89:ca:80:c5:84:12:83:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Aug 4 02:01:25 2025 GMT
Not After : Aug 5 02:01:25 2025 GMT
Subject: CN=66ce0e34ca2f0a94ea811d2e83f7d40c9022fa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:58:f0:f5:ad:59:48:ac:98:63:04:93:f3:
60:bd:3a:a2:06:cb:3f:8c:33:fa:4e:ae:7a:22:11:
20:5e:c2:29:ea:96:26:44:4f:96:e9:22:c0:ab:0e:
09:ab:8d:04:b4:17:83:9b:46:b3:a7:05:a8:b0:bc:
15:52:35:43:49:38:f5:8d:c7:5e:9b:52:5f:7c:5d:
c6:10:b9:18:d9:2c:14:a4:79:7b:b8:e6:07:5d:25:
73:6f:f9:0b:b0:a1:7c:41:fb:cb:db:2b:d0:5d:a1:
0d:d6:4f:ed:95:9f:ad:77:55:4a:b2:03:3a:fb:20:
ff:3b:ce:82:1a:2b:ab:82:cb:14:5d:4d:6b:e0:30:
bc:34:e2:1d:c2:e1:3a:a1:e2:7b:49:d2:30:e6:ae:
60:54:c6:e8:79:36:24:d4:95:06:39:16:d7:fd:ea:
99:03:50:21:c3:7e:d0:8c:a7:4d:1f:53:98:35:01:
58:82:bd:64:45:f0:0a:e6:6e:ae:19:43:30:0b:39:
a0:db:e8:25:99:a6:23:11:8f:90:61:8b:d6:b3:bc:
70:f8:06:5c:f7:12:25:85:00:a3:99:3f:d6:5b:23:
3a:71:ce:07:7d:ea:83:8b:e8:53:2d:cf:5a:72:f1:
a5:f5:65:03:9b:4a:c7:fd:c9:8a:18:b5:b7:5a:d0:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:0E:34:CA:2F:0A:94:EA:81:1D:2E:83:F7:D4:0C:90:22:FA:43
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6d:28:ff:02:fb:55:f2:10:7d:4f:03:b3:5e:81:cf:02:52:
97:ce:20:65:41:0c:f2:fd:b8:a8:94:6f:28:c2:27:fe:4c:9b:
3b:7e:6c:59:3a:75:39:05:84:0b:c9:24:b9:06:d2:0c:43:93:
cc:85:ff:28:39:a2:d2:e7:bf:3f:b8:78:16:48:03:aa:0b:99:
86:d7:17:1c:c8:91:52:09:3d:18:69:e3:ea:26:e5:bd:d6:42:
6e:dd:bb:01:a6:d2:0c:73:a7:2c:10:38:be:04:64:1d:79:bc:
16:59:82:38:f2:5c:d0:c4:13:dd:ff:bb:4d:30:7c:69:68:34:
8c:d2:6f:e7:a4:eb:fb:2e:ec:a4:91:d7:05:44:3a:4f:f4:92:
7c:1c:1a:9e:e7:94:6d:16:e8:ad:c7:94:76:40:ec:13:d4:3e:
0b:87:aa:4a:b4:55:75:99:bb:75:13:f6:b6:18:47:1e:53:81:
ae:a8:78:e0:73:da:0c:1a:82:ca:d1:54:15:ba:ea:d2:08:d2:
84:04:c4:1d:15:e0:66:80:cc:1c:b6:8b:b9:14:50:ae:00:3d:
44:17:4f:ea:90:d1:5e:9e:4c:07:96:4b:35:c5:6c:ad:fd:f2:
e8:78:85:27:1b:41:7b:f4:9b:de:30:72:3e:19:4d:e9:0d:0c:
b6:13:14:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz+s/k5KnicqAxYQSg3mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZjJlYzgyNWZhNjM4MWU4ZTk0ZmQzOWIwNmVhMzhiNjNl
NDFhMTAwHhcNMjUwODA0MDIwMTI1WhcNMjUwODA1MDIwMTI1WjAzMTEwLwYDVQQD
Eyg2NmNlMGUzNGNhMmYwYTk0ZWE4MTFkMmU4M2Y3ZDQwYzkwMjJmYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWhY8PWtWUismGMEk/NgvTqiBss/
jDP6Tq56IhEgXsIp6pYmRE+W6SLAqw4Jq40EtBeDm0azpwWosLwVUjVDSTj1jcde
m1JffF3GELkY2SwUpHl7uOYHXSVzb/kLsKF8QfvL2yvQXaEN1k/tlZ+td1VKsgM6
+yD/O86CGiurgssUXU1r4DC8NOIdwuE6oeJ7SdIw5q5gVMboeTYk1JUGORbX/eqZ
A1Ahw37QjKdNH1OYNQFYgr1kRfAK5m6uGUMwCzmg2+glmaYjEY+QYYvWs7xw+AZc
9xIlhQCjmT/WWyM6cc4HfeqDi+hTLc9acvGl9WUDm0rH/cmKGLW3WtAu6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbODjTKLwqU6oEdLoP31AyQIvpDMB8GA1UdIwQY
MBaAFBzy7IJfpjgejpT9ObBuo4tj5BoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2Ut
YzRjNjM5ODNiNTBjLzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2UtYzRjNjM5ODNiNTBj
LzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW0o/wL7
VfIQfU8Ds16BzwJSl84gZUEM8v24qJRvKMIn/kybO35sWTp1OQWEC8kkuQbSDEOT
zIX/KDmi0ue/P7h4FkgDqguZhtcXHMiRUgk9GGnj6iblvdZCbt27AabSDHOnLBA4
vgRkHXm8FlmCOPJc0MQT3f+7TTB8aWg0jNJv56Tr+y7spJHXBUQ6T/SSfBwanueU
bRborceUdkDsE9Q+C4eqSrRVdZm7dRP2thhHHlOBrqh44HPaDBqCytFUFbrq0gjS
hATEHRXgZoDMHLaLuRRQrgA9RBdP6pDRXp5MB5ZLNcVsrf3y6HiFJxtBe/Sb3jBy
PhlN6Q0MthMURQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:28 2025 by rpki-client