Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File: HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier: bjuqEzcnCTWex4N0gklm3tV9ExOy4VM7Ip4cdrpSmyk=
Subject key identifier: DA:F3:FB:48:93:FE:05:B8:73:82:A5:6B:EE:E7:40:6C:E5:7C:3F:21
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial: 019A4F6276B54EE9647DF1952C7035A19ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:44 +0000
Manifest this update: Tue 04 Nov 2025 15:00:44 +0000
Manifest next update: Wed 05 Nov 2025 15:00:44 +0000
Files and hashes: 1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: v7QD5ojDPz4r56qYiwpIf1kct3NsQccp7LbH5o8Rr+E=)
2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:76:b5:4e:e9:64:7d:f1:95:2c:70:35:a1:9a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Validity
Not Before: Nov 4 15:00:44 2025 GMT
Not After : Nov 5 15:00:44 2025 GMT
Subject: CN=daf3fb4893fe05b87382a56beee7406ce57c3f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:c1:a6:60:57:5f:f1:0c:b6:fd:4e:c7:d9:
ee:a5:04:18:1d:7a:c1:2a:81:66:84:b7:69:7c:45:
39:c5:85:a0:1f:23:68:b8:e6:bd:3c:6b:2b:71:00:
c0:09:ed:57:b5:ff:ef:ed:fc:95:9e:7b:e0:8e:a4:
9b:9f:82:fe:f7:89:2b:b4:85:15:6c:61:38:cd:56:
21:1f:31:63:0b:e9:87:33:bf:44:f5:03:e6:66:ee:
b9:06:78:bf:50:4f:d9:49:ae:e8:50:7b:fb:86:86:
e6:61:3a:87:e2:89:22:79:c3:6e:c3:18:f9:1f:18:
74:6c:82:a2:c5:91:b1:53:e3:13:c5:ac:4a:ed:d1:
3a:25:e4:72:34:28:3a:78:f0:19:e3:c9:2b:a9:72:
9a:04:61:a3:1a:d4:e4:7f:4e:49:f1:78:f1:70:ea:
59:b1:5b:f2:5e:25:10:d3:63:67:b4:53:92:a0:02:
77:ae:fb:1e:70:ba:0e:ee:78:43:dd:5d:48:15:97:
b4:55:f7:5e:c3:3a:e9:ed:34:06:e1:32:4e:31:ee:
50:75:8a:1f:28:e2:61:97:29:a1:a0:51:4e:30:2a:
84:31:ea:a4:88:4d:f3:9c:e9:74:73:57:06:aa:7c:
52:78:b7:48:d0:94:14:6e:a0:48:ae:ac:cd:1b:7f:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:FB:48:93:FE:05:B8:73:82:A5:6B:EE:E7:40:6C:E5:7C:3F:21
X509v3 Authority Key Identifier:
keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:be:e2:af:af:fe:e1:f1:0d:0a:9b:49:a5:77:8a:c9:8e:23:
8a:83:d4:59:02:cd:e2:49:83:f9:dc:65:d4:47:7a:a2:64:6d:
3c:9f:31:9a:62:af:9c:fb:79:ec:e0:3f:db:95:b1:27:9f:32:
07:55:46:1e:0f:fc:c3:63:4a:a3:a9:f0:cf:77:8d:0c:30:98:
67:d2:65:62:5d:d4:96:e9:e2:09:32:4d:ec:29:3e:d4:8b:6c:
9d:fb:3e:15:05:d2:3c:64:9d:88:3b:14:c7:2d:58:4b:11:34:
5f:47:b3:66:80:27:06:6a:1e:7c:5e:ed:03:c3:5d:ac:46:b7:
34:f2:ac:e2:c7:f5:90:be:2d:1a:18:dd:44:c6:25:df:2b:ab:
0c:db:d8:49:ec:d0:52:5f:58:2b:13:6f:09:02:e7:a7:30:c9:
46:33:7c:97:f6:33:af:ba:fb:18:be:ae:1e:4a:91:ca:c3:6e:
8e:c2:3f:cb:ca:31:e9:3c:9c:16:e1:4b:c5:b4:0c:55:21:0a:
e5:0a:d3:7a:65:63:6f:67:c7:2c:76:47:ba:c7:eb:83:07:cc:
ef:ca:76:67:33:9b:cd:ec:e5:19:de:c9:0d:3c:59:2f:25:6a:
b4:05:5c:d4:51:92:b8:95:49:da:ef:75:2b:c1:b2:d1:d2:c9:
bc:a4:ce:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:42 2025 by rpki-client