Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: ax9BnLOkiKFiOxz4tZQJes78vVR3yXI2jGyybI4A+O4=
Subject key identifier: C5:7D:6E:0A:24:8C:EE:E4:71:BD:3B:85:86:90:6D:AA:DA:81:1E:D1
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 019A71B8154AE0D9093149C5B792593F6BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: 5T5v9TeUmXlwQwPKtkRTJuIwEjc+ek3SXui14zdSD8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:15:4a:e0:d9:09:31:49:c5:b7:92:59:3f:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=c57d6e0a248ceee471bd3b8586906daada811ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:7b:78:89:6f:07:db:05:5d:52:af:c1:81:
50:fe:38:6b:42:b2:b1:cc:66:aa:50:64:6a:7a:87:
7f:2e:61:ea:b7:28:c6:9d:d8:6e:13:4e:92:6f:e3:
0e:06:f6:8d:e7:75:d6:b4:4e:9e:09:3e:1e:8f:b2:
f0:15:46:7e:70:0a:6d:98:6c:bd:88:7e:1d:d5:3a:
60:8f:98:cb:ad:d8:a7:d4:6e:e5:d6:f8:43:44:ad:
9f:14:91:08:58:94:20:39:90:72:12:7e:f0:4e:08:
f9:e4:b8:f2:96:7b:46:2f:20:2f:73:3c:26:31:2d:
72:2e:90:dc:1c:3b:91:1a:de:6f:0c:ad:eb:5e:40:
3b:8e:52:ba:e5:55:23:ca:8e:78:9f:c1:a2:18:99:
aa:ab:47:7c:c3:26:81:a3:41:b4:9c:46:8b:e9:6b:
07:3b:38:04:40:3e:0f:9a:fb:49:4a:a3:92:88:12:
9e:fc:ac:48:9f:ae:6a:2c:75:e3:15:8f:db:7b:63:
18:16:a4:45:73:c2:70:31:75:3c:ea:6a:ac:2a:c1:
60:2e:7b:f2:76:7e:ed:06:bc:8f:82:cd:a4:98:ac:
32:d3:0e:9c:20:d1:93:86:4d:58:b9:f2:c4:4d:f3:
34:ba:2c:22:66:33:1d:66:d6:c0:e6:b1:fc:10:1a:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:6E:0A:24:8C:EE:E4:71:BD:3B:85:86:90:6D:AA:DA:81:1E:D1
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fe:c2:e4:e3:fd:eb:69:04:60:3d:4b:73:ee:40:c6:ef:aa:
f8:93:71:a6:85:6f:9f:ae:7a:15:d6:26:7d:09:a0:ca:65:af:
2f:e1:57:ba:92:3f:a1:f5:8a:4e:b7:01:92:1d:4a:14:a1:db:
61:0b:0b:0a:cb:b1:70:16:db:fa:da:c4:c5:7f:ac:3b:02:38:
f2:57:be:74:c7:95:4e:fe:89:69:15:c1:2f:24:7c:25:d2:fb:
a8:36:09:10:10:69:ef:a3:4d:c2:39:cd:ba:e5:4a:74:11:04:
10:5d:82:98:ce:45:69:c3:b3:60:a2:b6:a6:12:00:d9:22:ea:
00:74:dc:6f:34:52:d5:aa:11:77:5e:68:8d:a7:01:cb:1f:80:
8c:71:22:da:60:48:03:9f:fb:9c:9f:a5:a6:13:1b:5d:1f:db:
3b:96:58:ab:e2:76:fe:28:7d:ac:3a:e5:47:f9:36:bc:13:08:
4a:2e:c8:d2:9e:f1:89:bc:b1:94:c2:96:df:37:9c:a9:38:27:
76:1f:87:87:8f:96:1f:fa:29:b3:e9:24:48:c9:f0:ce:18:6c:
eb:c5:d9:b7:2e:d0:58:c9:4d:d8:16:a3:3d:4e:ca:e9:ec:d4:
6f:59:21:28:d6:b5:c6:96:83:d2:e3:33:3e:d7:a6:51:3e:a4:
76:21:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:16 2025 by rpki-client