Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: 8cObhHRWdYrpuyBjoL38uHGU2TH2WHa4+J6OJrC3Z2Y=
Subject key identifier: 79:4D:63:C8:B4:A6:0D:77:AF:67:76:3C:43:B0:11:A5:00:1D:30:2A
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019A722626BFF7F7A680E56DE602880E2840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: nnha1p7h/VEGBIhOJqk/RoN48WyBozatPt1c5xiOs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:26:bf:f7:f7:a6:80:e5:6d:e6:02:88:0e:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=794d63c8b4a60d77af67763c43b011a5001d302a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:7d:42:3c:64:b7:48:2d:28:d5:98:93:df:
0a:0d:b0:27:f5:ff:9d:3a:6a:15:af:5a:6e:40:43:
6c:e0:0a:fd:9b:fc:26:5f:3f:c2:09:3f:42:df:c5:
13:52:2c:b5:44:38:ea:59:7c:4a:91:21:9c:76:37:
cf:4c:1f:23:e0:d0:ec:70:82:1f:8d:8f:eb:03:3f:
ec:ac:54:51:e3:b5:0c:cb:91:f6:60:25:c3:1a:4f:
5c:5c:b8:e7:c1:4b:90:63:74:03:36:e7:d4:54:65:
e9:a9:5a:18:65:b1:77:87:23:48:a2:ed:36:07:69:
bd:45:12:f0:f7:f5:6f:fd:14:28:1e:95:0d:1f:32:
35:db:c3:8c:b2:dc:0b:c4:78:9d:ef:bc:cb:ba:61:
ea:51:42:2f:0c:a1:3a:f5:72:90:a4:c4:4c:ce:5a:
07:ad:b4:2a:16:31:3c:72:d9:96:78:1a:7c:4c:76:
b7:5e:4c:f1:4e:91:46:09:3e:58:81:00:ea:cf:3d:
f5:56:0b:53:cf:53:f7:4a:8e:8a:64:4f:f7:f2:a5:
3f:54:90:c2:c4:d6:96:60:a8:37:1a:5b:08:ff:40:
a7:48:bd:f6:c4:e2:4f:4d:e6:59:c9:7f:8f:e3:8c:
4a:d5:bd:f1:37:e4:5b:af:9b:1d:8f:6c:11:f0:78:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:63:C8:B4:A6:0D:77:AF:67:76:3C:43:B0:11:A5:00:1D:30:2A
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:ef:fa:c5:06:03:ea:48:86:e0:58:46:78:5d:25:ac:4e:
9d:c1:5f:fe:16:e5:2a:25:2e:b3:bd:6b:c6:3e:de:bc:b6:28:
de:bf:84:49:05:e0:62:a3:fd:3a:3f:92:22:bb:96:83:e9:74:
7b:45:97:88:30:fa:d5:fa:d7:52:4d:e0:56:ac:5f:b3:a9:c6:
34:fb:0e:d0:52:1c:48:85:f4:82:60:06:92:8d:94:43:25:c4:
b4:68:3d:f2:0e:40:cc:13:c7:3d:60:8f:fe:a9:3b:7d:7f:67:
0d:e3:9a:c8:8d:13:e5:1c:31:38:3c:64:95:49:80:c6:a7:82:
97:4a:f6:82:87:1c:89:f7:6d:9d:83:22:69:23:4f:27:e7:b5:
c8:c3:b6:e6:a0:e2:a8:de:23:5c:27:e7:d3:d0:43:db:ba:f3:
47:c9:ba:b7:27:ba:b2:cf:3d:d9:1b:07:c1:e4:5f:c4:13:09:
6d:87:74:86:29:ec:15:a2:ad:d0:1b:c9:4e:f3:c1:c6:37:6a:
ae:65:7a:56:0d:ff:e5:a6:4d:f4:58:72:d7:e2:96:e4:cc:04:
a7:88:fb:d3:34:92:5e:ca:0b:d2:b6:59:4c:b8:a6:9f:93:1b:
1d:d0:03:36:d6:5e:86:f7:f0:42:86:17:61:1f:97:17:b2:1f:
82:c6:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:58 2025 by rpki-client