Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: GZKiVzfLOo6t0Tyde4uslq4ha3WTLE5vPvEyvboH+P0=
Subject key identifier: 77:68:14:B8:B0:F7:1E:27:DE:F3:46:53:94:8A:FC:87:1E:15:E4:E7
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 019A4DE18770D78CB3A18680CFEA82B03FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: Fa1+4cyI3fEl/ruFa/llVNAYRtkQ7OUOVLr9DLlPtaQ=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:87:70:d7:8c:b3:a1:86:80:cf:ea:82:b0:3f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=776814b8b0f71e27def34653948afc871e15e4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:7d:8d:28:33:bf:76:d9:ff:07:08:b4:68:
21:56:de:31:76:8b:29:1e:c9:fe:4f:e4:88:e1:c7:
fb:6e:27:b3:60:6f:4b:4a:0b:43:57:34:dd:e1:a5:
25:fb:29:8b:9c:c2:25:8c:90:72:35:67:6f:54:e0:
26:91:2e:14:3a:2e:82:7f:6d:f1:db:a8:06:5c:c3:
c3:10:dd:b7:e7:02:67:5a:73:f4:fc:75:85:01:cb:
17:89:b7:46:22:e7:e5:e5:56:84:6c:33:9a:c3:07:
bf:e5:d2:fd:be:d4:a5:8d:2b:9b:9f:82:0b:71:fd:
fe:a1:43:2a:f0:8f:98:09:4d:8e:99:2a:9b:46:55:
d8:bc:42:0d:65:9d:47:ad:76:e4:c4:80:7c:1a:48:
9a:8c:28:3d:3c:22:2a:95:33:3c:e7:4d:05:17:3b:
8a:d0:3e:90:cf:87:05:bc:25:71:0c:f8:fd:3f:1e:
be:ac:6f:82:f5:e6:ac:29:9d:43:b3:26:89:36:57:
52:77:ca:ef:7b:ba:f5:a3:8d:5b:52:ff:ce:48:ea:
ea:89:16:3b:71:d9:9f:d3:eb:71:3a:72:5b:f0:d4:
aa:b6:94:fb:eb:5b:b6:57:59:8e:11:51:e5:f8:be:
bb:0a:7e:5e:a1:f9:10:b8:45:0e:8e:f2:5e:8f:5a:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:14:B8:B0:F7:1E:27:DE:F3:46:53:94:8A:FC:87:1E:15:E4:E7
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b5:93:19:02:d8:d8:f9:0d:31:6e:96:c0:2c:24:14:f4:76:
d5:ee:ce:57:c8:f9:8e:ef:03:a0:6e:40:94:38:35:52:e7:f9:
40:25:b6:48:1a:e4:2e:1d:4f:63:9b:d1:6e:8b:ff:7f:36:f6:
f5:0e:8b:ad:e6:b1:aa:32:de:2f:60:93:4f:f0:92:32:94:2c:
f6:6d:37:b1:59:fa:1e:7b:50:f3:0f:11:db:a8:a3:82:38:e9:
a2:ef:ef:92:c7:58:76:25:9f:83:07:c2:c1:e5:22:35:95:a9:
06:79:a6:64:8b:71:93:48:4b:c5:7b:a5:cd:c4:2c:3d:30:17:
5f:14:57:a2:bf:f6:ab:d2:74:d8:3f:89:d5:f7:8e:4e:7f:57:
76:5f:d6:ce:41:ab:c8:9e:42:3f:22:18:9f:5a:48:3d:17:02:
78:29:91:c4:b4:9b:4f:a2:26:dc:a0:4c:7d:3f:1f:3c:58:d6:
0e:ef:69:bb:35:a1:e8:4c:87:85:48:aa:be:58:d4:8b:3f:92:
e7:84:10:94:f7:b9:5e:9d:c7:d2:98:09:0a:78:39:dd:c6:78:
a3:4b:d0:d4:f0:fb:f3:a7:85:ee:6d:13:ed:32:4b:cb:fc:24:
b7:6c:d0:fc:e1:9e:a1:52:57:d4:9d:44:bf:41:24:53:6c:f9:
df:49:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:41:50 2025 by rpki-client