Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: PRrAaXncMRKJqfi7M8q15XDPpoff7PnDx/ym/XnMUSg=
Subject key identifier: B1:55:0D:20:0E:3D:28:E0:48:74:74:C1:31:55:FF:47:83:5E:02:26
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 019A71B7972742F969BB32352BDC6D911408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: bNcp9r8B9pmmiU/ztEhSPj4kF+osRNEc5XHJge0jCAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:97:27:42:f9:69:bb:32:35:2b:dc:6d:91:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=b1550d200e3d28e0487474c13155ff47835e0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:30:b9:2b:ff:aa:da:4d:c7:68:0f:30:5c:
51:37:d0:b9:c0:bf:ea:37:ee:37:86:83:42:e1:38:
7b:76:b0:a2:8c:d6:7f:e4:ba:3e:a0:2b:8f:8e:63:
bd:ec:8d:5c:c4:23:95:8a:a9:6d:cc:ee:18:3e:1b:
62:7b:80:2e:8a:bc:8f:b1:11:ef:68:a5:a9:69:41:
3d:6b:60:58:bd:b2:02:14:62:08:42:44:21:b6:c6:
0f:56:5a:4b:6e:c6:f5:ef:ca:93:f7:2f:56:df:9f:
4d:47:46:6f:ff:ac:e1:82:31:9e:db:9a:f5:4c:63:
8d:be:00:46:62:73:f9:96:e9:4c:c0:d8:71:96:2a:
1b:1e:13:1f:1a:75:ba:de:52:7c:d1:d3:d5:1b:dd:
91:9f:38:d1:ae:9c:16:a6:aa:6d:a2:68:e5:14:43:
20:06:a7:0a:a0:76:8e:d7:f5:67:56:bb:b5:de:87:
8f:78:f3:b9:22:40:f7:dc:5a:e0:67:60:d2:ac:da:
b9:63:c3:c8:5b:17:73:9c:fa:5e:bc:90:b3:1e:fa:
f2:bb:1a:eb:4a:37:47:81:a2:77:ca:2e:cd:41:fa:
2b:9c:cc:80:18:c2:37:16:65:5d:38:41:08:69:24:
52:48:0e:1c:05:48:14:64:e3:06:51:48:1b:17:a9:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:0D:20:0E:3D:28:E0:48:74:74:C1:31:55:FF:47:83:5E:02:26
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:40:02:69:ac:10:d7:a0:01:bd:53:51:f2:09:9d:fb:e8:
07:44:e9:69:7c:1d:88:0d:17:d6:6d:6f:fb:f4:ea:6d:0e:17:
50:6f:b6:9a:a7:65:1b:4a:73:46:9b:c7:11:14:e3:1e:4d:7d:
e8:61:4e:70:5c:b1:69:66:01:08:4c:69:5a:51:ed:0b:4b:eb:
a5:be:91:c0:28:22:18:a7:c3:05:eb:fc:78:3e:e4:20:4c:57:
b0:22:da:ad:6e:a8:a6:df:e1:b9:31:47:23:7d:78:99:45:f2:
ad:54:82:03:46:cf:8c:c5:f5:85:ea:ef:1d:88:0d:90:b2:fa:
b5:5c:5b:c5:b6:79:77:cb:06:98:40:fb:fb:c7:d4:68:bb:02:
86:2e:89:2a:42:76:6c:c4:3d:5e:4a:8c:22:62:c9:fb:31:f3:
d8:54:37:e5:b3:01:27:0e:e3:07:01:3f:14:3f:8e:16:a4:01:
fa:89:1a:c5:e0:74:57:8b:23:6e:5d:e0:fb:f2:40:fb:87:2b:
c5:18:01:e9:26:32:a7:7f:34:3c:40:83:91:65:e0:3a:ac:8e:
71:7e:3f:7e:9c:6a:a7:19:da:db:d7:05:f3:91:05:cc:10:f9:
23:bb:94:6c:2f:a6:ab:7c:f4:e1:49:93:95:d5:62:46:8a:a5:
49:cf:2c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5cnQvlpuzI1K9xtkRQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1
ZDVmODEwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
EyhiMTU1MGQyMDBlM2QyOGUwNDg3NDc0YzEzMTU1ZmY0NzgzNWUwMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2kwuSv/qtpNx2gPMFxRN9C5wL/q
N+43hoNC4Th7drCijNZ/5Lo+oCuPjmO97I1cxCOViqltzO4YPhtie4AuiryPsRHv
aKWpaUE9a2BYvbICFGIIQkQhtsYPVlpLbsb178qT9y9W359NR0Zv/6zhgjGe25r1
TGONvgBGYnP5lulMwNhxliobHhMfGnW63lJ80dPVG92RnzjRrpwWpqptomjlFEMg
BqcKoHaO1/VnVru13oePePO5IkD33FrgZ2DSrNq5Y8PIWxdznPpevJCzHvryuxrr
SjdHgaJ3yi7NQfornMyAGMI3FmVdOEEIaSRSSA4cBUgUZOMGUUgbF6nimwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFVDSAOPSjgSHR0wTFV/0eDXgImMB8GA1UdIwQY
MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et
Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4
LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcZAAmms
ENegAb1TUfIJnfvoB0TpaXwdiA0X1m1v+/TqbQ4XUG+2mqdlG0pzRpvHERTjHk19
6GFOcFyxaWYBCExpWlHtC0vrpb6RwCgiGKfDBev8eD7kIExXsCLarW6opt/huTFH
I314mUXyrVSCA0bPjMX1hervHYgNkLL6tVxbxbZ5d8sGmED7+8fUaLsChi6JKkJ2
bMQ9XkqMImLJ+zHz2FQ35bMBJw7jBwE/FD+OFqQB+okaxeB0V4sjbl3g+/JA+4cr
xRgB6SYyp380PECDkWXgOqyOcX4/fpxqpxna29cF85EFzBD5I7uUbC+mq3z04UmT
ldViRoqlSc8s0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:19 2025 by rpki-client