Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: Vuqq4jsUB1illRaNFz2meMVxNT0SEhaeo+XkRrAcAp4=
Subject key identifier: EE:7F:2D:C8:46:7C:CE:B5:80:72:16:03:3A:9D:09:46:83:9A:BD:AB
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 019A4EF52F425B6D3551588D5FA18D54D34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: aO319VeXC+EgGDxLWLKBYkOayvxLNWnaUqUelFvJyjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:42:5b:6d:35:51:58:8d:5f:a1:8d:54:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=ee7f2dc8467cceb5807216033a9d0946839abdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:f3:64:8d:2e:29:b2:9e:27:8d:f2:75:cf:
d2:7e:86:82:3f:44:31:26:38:03:d2:53:22:b9:18:
db:2b:b9:fa:49:e6:de:09:2d:e1:37:86:c1:03:7b:
64:c2:19:9d:56:74:fe:85:7e:d3:b7:2f:18:26:9d:
69:75:24:f7:41:c6:07:22:17:1a:13:ff:7f:18:12:
95:5e:1f:b7:fb:27:d1:a3:ec:e9:c8:2d:da:96:5f:
38:05:22:b2:dc:4b:72:92:a0:67:5b:af:2e:f0:65:
48:a1:d2:fb:0c:19:9b:99:05:36:85:0f:85:bb:05:
ad:4d:0c:62:9b:81:5e:58:ef:dc:3d:d3:53:c6:af:
da:1d:a4:e3:ef:f3:62:28:6e:fe:44:99:0e:dd:e8:
b9:8f:4d:51:55:76:10:e1:b7:e3:e9:02:bb:03:db:
a7:5a:9a:36:fe:b4:26:f4:25:0d:56:20:33:62:d6:
14:1e:a6:56:6c:76:e8:93:5c:dc:b8:d1:7e:a9:10:
76:b0:14:43:94:e2:e1:05:58:cb:2a:43:9a:db:0d:
8e:2a:19:8c:3a:d0:1f:1c:09:bb:7e:a2:bf:58:5d:
6e:86:94:c0:8a:6e:91:6f:0a:97:4c:89:ed:58:d2:
70:21:cc:3f:5e:40:be:20:51:9d:5e:46:8d:4e:25:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:2D:C8:46:7C:CE:B5:80:72:16:03:3A:9D:09:46:83:9A:BD:AB
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:0a:7f:b0:d6:3c:8d:10:e3:f0:c8:3d:9f:2b:47:d2:f7:
10:dc:6d:a9:30:ee:15:30:69:e1:87:81:62:03:05:50:4c:44:
f7:53:f3:4e:e6:d3:47:e2:a2:86:29:6a:93:32:7c:4e:38:08:
5e:8b:e8:75:7d:18:70:c2:21:37:ef:a0:0c:2d:ca:4a:8e:03:
f2:a9:01:7b:d7:70:fc:de:aa:4d:78:10:01:2a:4b:d4:16:28:
cc:d9:f0:e7:0c:5d:58:e8:a8:ff:19:1f:53:44:6a:ef:b1:4b:
72:95:57:df:b3:ab:92:79:94:6a:24:59:40:0e:4a:9e:71:cc:
d3:11:33:40:9a:a8:2f:4b:3d:e7:55:13:70:df:e3:e9:f4:66:
c7:eb:81:f9:87:b6:cc:7d:10:05:d8:e3:1f:19:fd:38:b2:7c:
09:b8:02:13:93:53:72:b3:7b:42:17:79:12:fa:6f:67:dc:cc:
8d:59:c3:d5:ef:81:c3:62:70:d6:d5:97:70:84:e0:59:74:b8:
0b:ce:72:ab:66:4b:fe:e4:69:90:a5:24:70:ab:02:de:bd:85:
ac:aa:b6:e8:b5:bc:cc:c9:38:b9:93:71:39:40:9d:53:35:0e:
eb:9c:7b:9f:7a:51:d1:95:1b:ab:8c:2a:20:fa:b9:fa:fc:a5:
26:89:30:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9S9CW201UViNX6GNVNNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1
ZDVmODEwHhcNMjUxMTA0MTMwMTIyWhcNMjUxMTA1MTMwMTIyWjAzMTEwLwYDVQQD
EyhlZTdmMmRjODQ2N2NjZWI1ODA3MjE2MDMzYTlkMDk0NjgzOWFiZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny7zZI0uKbKeJ43ydc/SfoaCP0Qx
JjgD0lMiuRjbK7n6SebeCS3hN4bBA3tkwhmdVnT+hX7Tty8YJp1pdST3QcYHIhca
E/9/GBKVXh+3+yfRo+zpyC3all84BSKy3EtykqBnW68u8GVIodL7DBmbmQU2hQ+F
uwWtTQxim4FeWO/cPdNTxq/aHaTj7/NiKG7+RJkO3ei5j01RVXYQ4bfj6QK7A9un
Wpo2/rQm9CUNViAzYtYUHqZWbHbok1zcuNF+qRB2sBRDlOLhBVjLKkOa2w2OKhmM
OtAfHAm7fqK/WF1uhpTAim6RbwqXTIntWNJwIcw/XkC+IFGdXkaNTiVkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5/LchGfM61gHIWAzqdCUaDmr2rMB8GA1UdIwQY
MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et
Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4
LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK0Kf7DW
PI0Q4/DIPZ8rR9L3ENxtqTDuFTBp4YeBYgMFUExE91PzTubTR+KihilqkzJ8TjgI
XovodX0YcMIhN++gDC3KSo4D8qkBe9dw/N6qTXgQASpL1BYozNnw5wxdWOio/xkf
U0Rq77FLcpVX37OrknmUaiRZQA5KnnHM0xEzQJqoL0s951UTcN/j6fRmx+uB+Ye2
zH0QBdjjHxn9OLJ8CbgCE5NTcrN7Qhd5EvpvZ9zMjVnD1e+Bw2Jw1tWXcITgWXS4
C85yq2ZL/uRpkKUkcKsC3r2FrKq26LW8zMk4uZNxOUCdUzUO65x7n3pR0ZUbq4wq
IPq5+vylJokwSg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:54 2025 by rpki-client