Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
File: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json)
Hash identifier: So9mZv3aSwLGfgJA7XU2/AxRY/4vDAV/IS40xoDAyuM=
Subject key identifier: A7:53:AF:0E:EC:B4:01:6F:28:A4:AD:8C:86:ED:95:75:23:51:4D:AB
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Certificate issuer: /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial: 019A4FD0342A805EC307465824775525E0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
Manifest number: 0B1C
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: qgrWlkaFLuYTmlursxCMBwLG0RPVmTruDckptq3N2dM=)
2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:34:2a:80:5e:c3:07:46:58:24:77:55:25:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=a753af0eecb4016f28a4ad8c86ed957523514dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:0c:9c:37:ac:4e:38:d9:fe:be:c6:49:f6:
68:57:03:d7:f3:fa:f3:c1:18:2d:d8:93:df:18:f3:
d2:8c:4e:1b:33:de:2e:8a:57:73:3f:5a:42:8d:b7:
35:60:8c:8f:dd:42:7b:46:ed:00:82:2d:2d:b0:fc:
d7:ff:e4:cd:6a:36:21:01:17:8d:da:07:94:bb:2d:
22:da:e4:9b:3d:82:84:a8:00:f3:e6:51:d1:26:d4:
49:78:44:19:07:14:32:f4:79:27:78:41:b4:14:61:
79:9f:25:1c:57:a5:c5:ec:74:75:c7:7d:77:28:65:
f6:77:04:54:b5:b6:dd:23:ad:7d:59:89:f3:fb:8f:
ce:e2:54:bb:ea:9e:bf:0b:2c:76:3a:d5:9b:80:b3:
28:25:03:c6:40:11:08:93:1d:99:20:09:61:37:b9:
44:63:43:5f:b8:92:02:86:80:d0:29:26:b1:ae:97:
53:2e:eb:fd:d5:81:da:95:3e:23:55:9c:a6:db:ea:
16:81:e6:7d:67:b9:64:80:f2:ef:41:bb:a6:bc:34:
20:4d:12:58:06:e6:33:06:84:44:c2:95:f8:08:ac:
09:79:9b:e8:7e:67:cf:b1:cc:02:8f:d4:b1:3e:73:
2c:ba:29:13:1e:c5:ad:39:60:14:b3:5c:28:cf:24:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:53:AF:0E:EC:B4:01:6F:28:A4:AD:8C:86:ED:95:75:23:51:4D:AB
X509v3 Authority Key Identifier:
keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:7f:c4:f1:00:b3:99:ef:86:3a:00:af:7c:41:c5:65:b6:
9e:38:1f:d6:9b:5f:aa:2a:ae:a7:46:49:e5:b0:4d:c7:30:f2:
23:23:60:a6:3b:b2:fa:77:a2:47:38:cd:a4:75:ae:6b:a6:33:
eb:90:0d:6d:cf:a1:f9:d1:4a:61:c1:d5:5e:40:59:c9:bf:d0:
f5:5c:61:ac:12:9c:d6:ad:ed:07:0d:db:7e:5d:d5:92:45:e5:
01:c0:42:2d:cd:80:cd:95:b5:dc:30:3f:90:77:bb:6b:00:90:
d5:4f:0d:6b:19:b4:a0:30:ce:10:00:29:db:05:a8:de:ca:36:
9e:46:d4:67:43:7a:e6:19:34:3f:7d:b8:c3:73:5a:44:53:ab:
b5:90:6d:76:b5:3b:87:73:f0:6d:6f:9a:8d:37:76:9d:6f:38:
fe:b6:e9:98:a5:1b:6c:4e:a6:9c:45:7b:c7:f8:97:0c:c5:33:
ed:a1:a8:54:04:1e:79:a5:9b:70:36:e3:fd:7c:ef:ce:d7:de:
68:b4:0f:b9:da:06:43:98:cd:db:51:95:7a:a0:a1:8c:12:96:
a5:09:a1:d5:1f:6b:21:6f:34:8c:1c:db:4e:a0:46:a0:73:e2:
aa:ab:8a:55:ab:11:0b:eb:95:6d:83:c7:e1:08:b2:b8:2e:42:
e7:7a:a0:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0DQqgF7DB0ZYJHdVJeC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWZlMGFlMjVjNmVhZTI3NzYzZGNkZWM1MWEwZTEwZWJj
NmMzNzQwHhcNMjUxMTA0MTcwMDM2WhcNMjUxMTA1MTcwMDM2WjAzMTEwLwYDVQQD
EyhhNzUzYWYwZWVjYjQwMTZmMjhhNGFkOGM4NmVkOTU3NTIzNTE0ZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKAMnDesTjjZ/r7GSfZoVwPX8/rz
wRgt2JPfGPPSjE4bM94uildzP1pCjbc1YIyP3UJ7Ru0Agi0tsPzX/+TNajYhAReN
2geUuy0i2uSbPYKEqADz5lHRJtRJeEQZBxQy9HkneEG0FGF5nyUcV6XF7HR1x313
KGX2dwRUtbbdI619WYnz+4/O4lS76p6/Cyx2OtWbgLMoJQPGQBEIkx2ZIAlhN7lE
Y0NfuJIChoDQKSaxrpdTLuv91YHalT4jVZym2+oWgeZ9Z7lkgPLvQbumvDQgTRJY
BuYzBoREwpX4CKwJeZvofmfPscwCj9SxPnMsuikTHsWtOWAUs1wozyRihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdTrw7stAFvKKStjIbtlXUjUU2rMB8GA1UdIwQY
MBaAFB5f4K4lxurid2Pc3sUaDhDrxsN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NmZiMjItMTI0Yy00ODY2LThlNGQt
OGI3OTJhNDJkMGVmLzEvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83NmZiMjItMTI0Yy00ODY2LThlNGQtOGI3OTJhNDJkMGVm
LzEvSGxfZ3JpWEc2dUozWTl6ZXhSb09FT3ZHdzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXZ/xPEA
s5nvhjoAr3xBxWW2njgf1ptfqiqup0ZJ5bBNxzDyIyNgpjuy+neiRzjNpHWua6Yz
65ANbc+h+dFKYcHVXkBZyb/Q9VxhrBKc1q3tBw3bfl3VkkXlAcBCLc2AzZW13DA/
kHe7awCQ1U8Naxm0oDDOEAAp2wWo3so2nkbUZ0N65hk0P324w3NaRFOrtZBtdrU7
h3PwbW+ajTd2nW84/rbpmKUbbE6mnEV7x/iXDMUz7aGoVAQeeaWbcDbj/Xzvztfe
aLQPudoGQ5jN21GVeqChjBKWpQmh1R9rIW80jBzbTqBGoHPiqquKVasRC+uVbYPH
4QiyuC5C53qgkQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:03 2025 by rpki-client