Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: LZAjCkiXurUbmLh+mGJNhCQ8BcPIQvQ91wWo/PbCY9k=
Subject key identifier: FD:B2:38:6F:54:2D:B3:C4:CB:80:D6:58:26:CA:DF:37:A3:4E:0D:04
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 019921B23FB53499D30E5A00FC028B27E78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:02:33 +0000
Manifest this update: Sun 07 Sep 2025 01:02:33 +0000
Manifest next update: Mon 08 Sep 2025 01:02:33 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: UsV86mXVczSEYKtT2fvuLngCV8oNRJy52eIF7Wy5WHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:3f:b5:34:99:d3:0e:5a:00:fc:02:8b:27:e7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Sep 7 01:02:33 2025 GMT
Not After : Sep 8 01:02:33 2025 GMT
Subject: CN=fdb2386f542db3c4cb80d65826cadf37a34e0d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:bd:d8:67:c0:61:40:90:7c:aa:ad:ff:fe:
44:92:68:1f:e2:ec:bb:28:3d:78:45:ae:bf:77:4a:
ba:19:dd:eb:af:31:38:2b:5b:a4:3e:a2:16:60:c2:
b1:46:c9:36:d2:df:13:b2:e9:e1:64:b6:cd:90:63:
59:47:62:e7:bc:e4:0e:c8:ba:4f:9f:bc:71:5a:a8:
9e:82:67:ae:28:1a:5a:80:b0:80:ad:da:9e:17:b7:
76:d0:32:00:aa:f3:f9:11:b4:82:10:39:94:86:be:
9d:c2:a0:a3:f6:65:68:26:d3:77:5a:61:a8:a8:f3:
e0:01:2b:8a:81:8f:f7:76:cf:82:69:c5:44:33:de:
1b:74:d9:cf:9e:1a:a3:35:b0:40:b4:0b:8e:0f:2c:
02:9f:2c:2e:6c:8c:49:81:00:b0:f5:e2:41:6a:fd:
d5:c0:c2:d9:69:f6:20:cb:cf:5a:d4:1b:10:0f:ee:
fd:dd:bc:ae:40:1a:ad:9b:f8:c1:14:12:e5:0d:53:
ca:0f:8a:8c:73:bc:b2:ee:06:cd:74:41:30:e1:5f:
24:b2:10:a4:bd:a3:ec:36:53:5a:58:3f:5a:5e:48:
20:21:43:04:a0:ef:e0:9a:6a:c5:94:72:56:21:13:
be:6d:62:b5:02:97:39:88:b7:49:02:a7:d4:a3:57:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:38:6F:54:2D:B3:C4:CB:80:D6:58:26:CA:DF:37:A3:4E:0D:04
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4b:aa:44:fd:27:62:62:c1:2b:8f:14:e6:f2:5d:7e:4f:b1:
bf:d1:67:4e:c5:1e:7e:08:c6:93:65:45:65:1a:43:cd:3a:8e:
ef:66:2b:2d:73:62:a9:47:92:5b:ec:7f:24:c4:18:9b:a8:d5:
45:70:8d:ca:62:ad:5b:34:12:0f:32:90:ed:e1:f4:15:5a:ac:
f4:cd:9b:eb:ab:fd:c5:02:6b:68:9b:94:b7:cf:53:53:fd:29:
65:3c:46:ac:ed:f7:b1:68:ea:ba:00:4b:5e:a9:0f:36:91:68:
e4:af:50:34:17:a1:1b:cc:f1:0d:2c:db:9d:09:58:59:be:ce:
82:a4:9c:6d:9d:b7:4f:30:ea:c7:fc:57:01:b0:ba:3d:31:69:
85:86:19:7a:ef:9e:6a:18:e0:c1:ff:bd:19:c7:fe:ae:ff:f1:
e4:d7:c5:72:2b:7f:6e:5f:98:34:7d:37:c7:3a:f4:5c:3f:03:
58:06:99:f2:37:d7:08:a1:2b:7c:ed:b1:fe:5a:5c:e3:64:94:
44:9c:bc:8d:55:26:26:34:48:d5:fb:db:f5:10:ac:80:e1:9f:
d8:ef:d3:09:8d:49:4f:68:08:2e:27:34:3b:a6:b5:be:de:c1:
78:cd:1c:f6:4d:15:e0:ec:6a:89:04:97:7a:f2:62:73:d1:12:
13:23:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:41 2025 by rpki-client