Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: cfhgOoyV2Zj/YULLmP3K2+/r9aAKYsXSdPNxMU97bLg=
Subject key identifier: 44:83:CF:B1:14:59:5E:3D:8A:5B:0A:57:B8:6B:F5:D3:60:BE:6D:FB
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019A53AD4D876087A37000D1BAB22891768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 11:00:57 +0000
Manifest this update: Wed 05 Nov 2025 11:00:57 +0000
Manifest next update: Thu 06 Nov 2025 11:00:57 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: vuAUz1BPH4nHDO1cu6BR/FuAX7Xwrs2Qrljc+YnAqfM=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4d:87:60:87:a3:70:00:d1:ba:b2:28:91:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Nov 5 11:00:57 2025 GMT
Not After : Nov 6 11:00:57 2025 GMT
Subject: CN=4483cfb114595e3d8a5b0a57b86bf5d360be6dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:09:ff:03:92:c2:c8:24:84:2a:a7:a6:2a:
8e:f3:ee:64:35:12:73:46:df:36:07:2a:6d:b0:df:
1b:a9:8b:c0:cf:b1:e7:56:76:80:75:13:a6:f0:ae:
43:79:93:d7:fa:2e:79:67:d5:2b:e7:67:5a:28:57:
46:c2:65:0b:b7:12:21:4b:a6:e3:e1:d6:fe:91:41:
91:85:09:bd:02:a6:4a:22:b3:f3:f8:ba:88:da:4e:
d0:c8:eb:fa:f1:4d:5d:89:4f:b4:50:95:9b:80:8d:
82:7e:16:ad:35:7d:99:27:2f:e0:37:a7:a0:96:d8:
6b:69:46:e3:b8:6f:6c:9b:b5:aa:e5:27:43:d4:f2:
5b:ba:cd:c3:9c:5e:90:0d:68:75:bb:cc:b7:a4:bd:
64:12:06:e7:ba:b4:08:86:4e:9e:fd:24:b5:d7:40:
b2:8c:2c:9e:03:fb:be:c3:65:29:a0:c6:58:0d:66:
5f:70:f6:d9:f5:0b:10:fc:48:da:d3:50:48:8a:17:
8a:23:72:01:1b:85:18:25:ca:ff:cb:f6:aa:60:23:
af:56:8c:8f:f6:b4:da:df:b7:36:76:c7:3b:e1:55:
c1:6e:68:cb:7d:85:3f:be:15:c2:39:47:69:8b:da:
ff:bf:e8:e3:ef:d5:a4:64:5b:dd:25:48:36:88:ca:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:CF:B1:14:59:5E:3D:8A:5B:0A:57:B8:6B:F5:D3:60:BE:6D:FB
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:1a:fd:da:eb:1f:d6:b9:db:eb:ec:03:19:d2:f7:e6:69:
ef:a9:02:52:28:83:9b:97:66:b1:04:a8:f7:15:41:a1:1a:6f:
da:3e:d6:d5:71:99:80:6f:82:9c:57:cd:f5:b7:4e:2c:55:f9:
99:37:54:f7:6a:e9:ae:b0:18:72:43:60:47:9f:48:a0:ff:11:
64:dd:d9:cb:4c:27:c4:2f:ff:a4:c7:71:c9:88:42:39:7f:1b:
57:68:c3:c6:c1:c4:99:68:6e:3c:36:6c:50:11:58:72:7c:89:
39:f6:90:e1:0b:63:d5:ea:1f:2b:ca:55:5c:8b:f5:2b:d3:95:
a6:ce:c0:0b:b0:f1:0a:3c:08:2f:62:41:ab:5f:d4:b6:a1:04:
b6:20:70:8f:64:4a:bf:a3:b9:d0:87:a4:f8:be:1a:01:17:64:
16:01:60:71:cb:a3:5c:74:70:15:67:e7:98:b4:1e:7b:cd:5b:
a5:67:17:44:d6:e4:e5:12:81:20:8c:e9:c2:2f:b3:9f:62:79:
45:69:08:86:9e:81:08:51:a5:5d:43:e4:1e:e5:73:61:b9:ef:
66:e6:67:18:06:0d:35:51:51:f4:78:07:e2:42:12:da:91:c2:
4d:07:52:59:44:c7:a6:38:4d:14:17:7d:61:40:45:08:ef:eb:
9d:63:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:51:53 2025 by rpki-client