Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: bkNzinF52KnanSwrL5svyWw+e+Q9QHl0D3NdH6ADGbA=
Subject key identifier: 56:9B:8E:94:51:BF:9F:5A:ED:8B:87:14:8C:3B:40:0F:8B:5C:01:C2
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019A4F62A8478D4C30F8FBC5F7BD7F33536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:56 +0000
Manifest this update: Tue 04 Nov 2025 15:00:56 +0000
Manifest next update: Wed 05 Nov 2025 15:00:56 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: 8O9tllMoZcJkHNDdKNBXO4kn6c0cJyhZkYyflbEMA68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a8:47:8d:4c:30:f8:fb:c5:f7:bd:7f:33:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Nov 4 15:00:56 2025 GMT
Not After : Nov 5 15:00:56 2025 GMT
Subject: CN=569b8e9451bf9f5aed8b87148c3b400f8b5c01c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:38:0d:c8:3a:a0:82:b7:ac:08:61:aa:d7:
9a:1a:e8:91:2f:2c:7f:1a:bf:34:27:e3:dc:13:19:
32:b7:a9:cd:e1:16:2e:34:b6:f3:3b:34:42:ef:39:
33:91:6e:c0:4b:67:7c:a4:44:00:48:68:46:a4:72:
62:bc:f9:1c:49:4d:5c:06:52:aa:cf:b8:ee:1f:c6:
ce:2d:af:bb:e6:63:ae:8d:31:12:47:1e:d4:ec:ec:
65:9a:e5:8e:ab:19:67:6e:d7:d4:b5:28:74:62:3f:
f9:4e:36:f8:54:db:d4:00:5d:3c:95:99:02:56:e4:
af:88:a9:85:c1:7e:5d:27:cc:12:73:03:b2:62:85:
54:65:65:9e:aa:c8:9f:c7:fc:c1:fc:7b:ed:84:36:
c9:d3:eb:b0:c5:a2:2c:07:14:04:d0:4a:17:98:c8:
cf:71:e6:3c:c1:53:39:da:42:bb:17:f0:5f:77:63:
c4:fe:af:8e:70:cd:9a:e7:ca:43:ab:87:31:ac:de:
38:e4:b9:eb:f4:ae:ca:25:93:6c:fc:98:ae:7a:11:
12:5f:e4:da:8d:c5:23:15:dd:ba:c2:20:1f:01:89:
85:d8:bd:49:23:3f:1b:0c:85:fb:18:94:4d:cf:25:
19:52:1a:a4:05:99:8d:dc:28:24:90:e4:84:35:59:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:8E:94:51:BF:9F:5A:ED:8B:87:14:8C:3B:40:0F:8B:5C:01:C2
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c1:b3:77:dd:25:a5:02:3b:e8:bf:08:fa:84:23:49:ff:7c:
7c:bf:0c:cc:df:d2:fa:b5:76:0c:1e:d5:75:01:a4:f0:8c:81:
34:9e:cc:da:76:2f:6c:6e:82:e0:89:a9:bc:81:a5:3e:b2:d8:
4f:9c:ab:87:c9:83:ea:83:07:49:83:62:81:97:86:ef:3d:b6:
bd:29:39:1f:f1:9a:fb:cf:bd:0f:fe:72:ad:11:21:d5:1d:a5:
5a:1a:fc:da:da:58:81:b5:88:d1:ea:68:8d:1c:14:8a:0b:49:
04:38:08:8f:93:5d:59:c5:24:d0:f9:4c:ec:e5:d0:0f:aa:0e:
92:9b:ef:e6:36:2f:ff:44:e1:c9:81:66:43:c9:11:16:90:a5:
85:aa:2b:42:9c:dc:d6:ed:cf:a4:ae:c6:d5:a0:b1:36:e4:60:
c7:6d:1e:5c:4e:cb:63:8a:b7:d5:e9:db:56:ff:dc:64:ed:74:
84:94:9f:fe:07:1d:ae:63:ae:b0:d3:07:6b:d2:1c:4f:5f:4f:
02:26:e7:00:36:bd:74:6b:c8:7d:a8:05:d8:17:1a:6f:eb:58:
41:e1:30:ca:1a:e2:2c:1d:c2:bf:a7:69:48:70:55:a7:fc:4a:
49:79:be:dd:ca:38:32:d6:29:69:2c:8c:3d:e1:c8:60:e1:fc:
92:8b:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:48 2025 by rpki-client