Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: pE1oHYq4SGe/56f43IGyBSh/GEtrpmP//UW2pz/69Gc=
Subject key identifier: BF:9D:F3:D1:FD:6E:93:86:C5:38:74:98:D4:90:3A:08:EF:1C:01:AF
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 01984A40EEDA701D87483F41EF814F1DE07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:00:26 +0000
Manifest this update: Sun 27 Jul 2025 05:00:26 +0000
Manifest next update: Mon 28 Jul 2025 05:00:26 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: qqFJoPVD1cGX+dL+zCjNlUnMyQpC62wDU7+XzV5qlZI=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ee:da:70:1d:87:48:3f:41:ef:81:4f:1d:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Jul 27 05:00:26 2025 GMT
Not After : Jul 28 05:00:26 2025 GMT
Subject: CN=bf9df3d1fd6e9386c5387498d4903a08ef1c01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:60:a6:86:f7:48:19:89:44:32:9b:eb:b4:
00:af:64:7c:b8:a2:d7:37:ea:19:4c:78:0f:18:ec:
d6:ce:e6:e1:21:7c:2a:f2:60:00:95:6a:2e:20:bb:
2e:a4:33:81:0f:21:b6:1b:06:13:2f:9d:00:64:12:
d6:0b:9c:63:aa:11:57:40:06:fe:12:98:a4:ba:04:
a5:31:e2:0e:b2:c4:7e:55:05:0a:4a:4d:4c:31:b8:
51:28:63:e9:a4:4c:d0:be:b9:e7:b0:36:0f:b0:a1:
4f:70:61:a7:4c:59:94:5e:fc:40:56:da:2e:de:96:
e6:a9:53:56:b7:4c:16:3b:35:ef:30:50:da:cf:0b:
e1:3d:d3:2a:b9:97:7c:10:3c:4b:24:36:07:a0:68:
8a:40:d2:94:4d:42:52:63:8b:87:eb:ad:62:57:b1:
74:9a:50:d5:7b:06:58:cf:f5:34:fd:f0:c1:10:b8:
f6:60:98:47:a0:64:48:b7:76:c5:b8:37:75:17:f5:
1a:a7:4d:ae:da:de:b7:18:6e:98:c7:da:a3:e6:a8:
76:72:af:ec:ac:ed:eb:ee:26:87:9f:93:00:5c:6b:
a1:63:f6:a2:84:85:dd:24:74:6e:a1:d6:82:89:9f:
7f:7d:ad:44:24:a7:b5:94:9a:d2:da:90:dd:68:16:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9D:F3:D1:FD:6E:93:86:C5:38:74:98:D4:90:3A:08:EF:1C:01:AF
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:10:51:c4:97:84:5c:ae:5e:91:b2:ee:7b:dc:af:2f:20:84:
4a:aa:ad:46:24:cb:d8:c1:9a:63:9c:eb:f0:14:9a:5d:45:dd:
00:10:92:34:19:09:b7:39:05:b0:8b:78:d5:f0:fe:3c:d1:0b:
68:d5:e2:7c:c8:ac:c6:f5:bc:65:06:5e:6d:05:b3:05:3e:53:
2c:29:de:bf:07:bc:0d:de:a9:88:40:96:6f:36:84:d0:bc:ce:
4c:aa:ac:af:7d:d7:f5:22:26:c7:8d:71:32:b8:19:4b:6c:a3:
e2:af:9e:04:bf:c5:5d:e4:47:2d:01:e8:2a:06:7f:8f:fe:a0:
e3:83:a2:89:5f:34:d3:08:d3:ee:c4:b3:ff:43:f9:b3:80:8c:
6d:8a:81:65:71:80:6e:f0:fe:18:57:f8:49:4d:55:86:58:d6:
70:6a:89:69:0c:6e:44:cf:8a:ec:7d:7d:11:59:8b:16:6b:94:
95:3a:3e:03:c4:22:2a:5a:00:b6:06:97:32:1d:c4:8e:cf:1e:
de:e1:2c:93:c1:28:7f:ab:ba:85:1a:41:35:dc:0d:46:24:39:
31:1c:87:51:38:5b:47:1e:65:54:51:7f:c4:f8:11:7b:49:bb:
22:d8:c7:f1:b4:74:09:93:39:48:ce:44:2a:7c:66:5b:3a:79:
3d:f7:f2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQO7acB2HSD9B74FPHeB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZjJlYzgyNWZhNjM4MWU4ZTk0ZmQzOWIwNmVhMzhiNjNl
NDFhMTAwHhcNMjUwNzI3MDUwMDI2WhcNMjUwNzI4MDUwMDI2WjAzMTEwLwYDVQQD
EyhiZjlkZjNkMWZkNmU5Mzg2YzUzODc0OThkNDkwM2EwOGVmMWMwMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Zgpob3SBmJRDKb67QAr2R8uKLX
N+oZTHgPGOzWzubhIXwq8mAAlWouILsupDOBDyG2GwYTL50AZBLWC5xjqhFXQAb+
EpikugSlMeIOssR+VQUKSk1MMbhRKGPppEzQvrnnsDYPsKFPcGGnTFmUXvxAVtou
3pbmqVNWt0wWOzXvMFDazwvhPdMquZd8EDxLJDYHoGiKQNKUTUJSY4uH661iV7F0
mlDVewZYz/U0/fDBELj2YJhHoGRIt3bFuDd1F/Uap02u2t63GG6Yx9qj5qh2cq/s
rO3r7iaHn5MAXGuhY/aihIXdJHRuodaCiZ9/fa1EJKe1lJrS2pDdaBaq4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+d89H9bpOGxTh0mNSQOgjvHAGvMB8GA1UdIwQY
MBaAFBzy7IJfpjgejpT9ObBuo4tj5BoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2Ut
YzRjNjM5ODNiNTBjLzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hMDA5ZTgtMmRjNy00ZWY4LWE1Y2UtYzRjNjM5ODNiNTBj
LzEvSFBMc2dsLW1PQjZPbFAwNXNHNmppMlBrR2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBBRxJeE
XK5ekbLue9yvLyCESqqtRiTL2MGaY5zr8BSaXUXdABCSNBkJtzkFsIt41fD+PNEL
aNXifMisxvW8ZQZebQWzBT5TLCnevwe8Dd6piECWbzaE0LzOTKqsr33X9SImx41x
MrgZS2yj4q+eBL/FXeRHLQHoKgZ/j/6g44OiiV800wjT7sSz/0P5s4CMbYqBZXGA
bvD+GFf4SU1VhljWcGqJaQxuRM+K7H19EVmLFmuUlTo+A8QiKloAtgaXMh3Ejs8e
3uEsk8Eof6u6hRpBNdwNRiQ5MRyHUThbRx5lVFF/xPgRe0m7ItjH8bR0CZM5SM5E
KnxmWzp5PffyMQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:40 2025 by rpki-client