Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: DYjAahWKVvXFiZ944h6SsQhQlqj59fYIcqjQa3YBVYg=
Subject key identifier: 41:80:F9:5E:AB:40:59:09:DE:DF:D4:03:93:71:7E:39:DC:76:FA:62
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019A71B988822979DCB82849C60FD42F878B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:55 +0000
Manifest this update: Tue 11 Nov 2025 07:02:55 +0000
Manifest next update: Wed 12 Nov 2025 07:02:55 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: gRB5Nbngb5VkgA5v78GT02CZ6KZHvx+zUtaD13PkqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:88:82:29:79:dc:b8:28:49:c6:0f:d4:2f:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Nov 11 07:02:55 2025 GMT
Not After : Nov 12 07:02:55 2025 GMT
Subject: CN=4180f95eab405909dedfd40393717e39dc76fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:62:d7:a1:2d:a3:13:74:1f:bb:8b:93:8e:
10:96:6f:63:97:9c:7e:be:a5:c5:74:a7:e3:70:1f:
75:fd:c3:ec:20:58:62:d9:dc:67:3c:cd:5c:d0:0a:
fb:3e:56:97:e6:74:3c:24:7d:d6:a1:07:d4:4b:8c:
c6:89:57:31:0b:95:f2:76:5a:fb:31:3e:0d:ac:56:
f6:01:fc:62:4f:b6:35:03:6f:59:2a:a4:2c:ed:68:
a7:55:91:ac:9b:d1:3d:2f:12:21:1c:b9:9c:7b:5d:
61:42:51:8c:54:3d:7c:7b:21:12:82:1f:a4:1d:ed:
be:1d:a1:40:24:97:d6:79:45:cd:0d:c7:3a:82:81:
37:a6:fc:42:28:8c:ed:87:32:ef:05:99:1c:dd:2d:
94:d8:8b:83:ff:74:24:7d:c4:36:8e:51:2f:bc:58:
15:2c:58:e5:70:a8:ed:0e:79:8a:aa:04:53:0a:44:
de:04:4a:d2:25:f3:74:b4:89:9d:a1:42:dc:68:45:
a6:2e:0c:92:6b:03:6e:b4:97:a3:8b:a8:f4:fa:ab:
a1:19:91:c4:80:be:59:60:18:84:3b:3d:e4:46:d8:
f5:aa:23:b7:03:d2:08:2e:5d:ec:a4:65:9c:83:3f:
d7:87:4a:69:73:1c:c7:70:8d:3d:2a:92:f9:c3:3e:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:F9:5E:AB:40:59:09:DE:DF:D4:03:93:71:7E:39:DC:76:FA:62
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d9:5b:0d:c8:2e:a1:00:b5:72:6c:35:27:8d:a7:ee:26:a3:
6b:59:95:1d:fc:a3:71:80:5e:31:4f:51:12:d3:ed:32:4b:8d:
bf:51:0e:bc:b1:63:f9:25:75:b2:96:ab:ce:c3:0b:ee:ff:5f:
9c:81:d9:6c:83:5d:a6:f7:7d:9b:64:84:9e:16:cf:a0:97:73:
2b:43:a2:43:ac:be:af:f9:33:49:37:3b:18:ff:dd:1b:fc:ef:
90:a5:60:45:bc:68:2c:8e:a9:84:54:83:98:21:ce:6d:b9:f4:
05:12:01:37:ec:37:29:66:75:ba:21:03:0b:9e:17:da:1c:91:
8f:8b:a5:8a:ad:48:ae:73:85:93:b0:10:2e:83:e1:28:92:aa:
06:11:cb:65:a2:3a:6f:52:2b:20:4c:00:0a:d0:16:d1:28:20:
56:0f:aa:6c:f1:6b:ce:55:b7:2a:ca:4d:a8:e1:ee:2f:27:11:
cf:e7:15:31:7f:16:07:80:14:0f:14:d3:01:56:1e:62:79:9c:
88:ee:bf:1a:eb:22:52:ba:e3:0a:a2:d1:6d:e2:16:ba:15:e9:
8c:84:40:99:dd:85:0a:35:7a:37:e7:9a:6e:00:f8:2e:34:d8:
a5:21:65:1c:88:58:fd:f2:2b:4c:01:f2:54:a6:55:9b:1c:94:
24:01:60:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuYiCKXncuChJxg/UL4eLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3
MWRjOTMwHhcNMjUxMTExMDcwMjU1WhcNMjUxMTEyMDcwMjU1WjAzMTEwLwYDVQQD
Eyg0MTgwZjk1ZWFiNDA1OTA5ZGVkZmQ0MDM5MzcxN2UzOWRjNzZmYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Bdi16EtoxN0H7uLk44Qlm9jl5x+
vqXFdKfjcB91/cPsIFhi2dxnPM1c0Ar7PlaX5nQ8JH3WoQfUS4zGiVcxC5Xydlr7
MT4NrFb2AfxiT7Y1A29ZKqQs7WinVZGsm9E9LxIhHLmce11hQlGMVD18eyESgh+k
He2+HaFAJJfWeUXNDcc6goE3pvxCKIzthzLvBZkc3S2U2IuD/3QkfcQ2jlEvvFgV
LFjlcKjtDnmKqgRTCkTeBErSJfN0tImdoULcaEWmLgySawNutJeji6j0+quhGZHE
gL5ZYBiEOz3kRtj1qiO3A9IILl3spGWcgz/Xh0ppcxzHcI09KpL5wz4AIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGA+V6rQFkJ3t/UA5NxfjncdvpiMB8GA1UdIwQY
MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt
MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh
LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNlbDcgu
oQC1cmw1J42n7iaja1mVHfyjcYBeMU9REtPtMkuNv1EOvLFj+SV1sparzsML7v9f
nIHZbINdpvd9m2SEnhbPoJdzK0OiQ6y+r/kzSTc7GP/dG/zvkKVgRbxoLI6phFSD
mCHObbn0BRIBN+w3KWZ1uiEDC54X2hyRj4uliq1IrnOFk7AQLoPhKJKqBhHLZaI6
b1IrIEwACtAW0SggVg+qbPFrzlW3KspNqOHuLycRz+cVMX8WB4AUDxTTAVYeYnmc
iO6/GusiUrrjCqLRbeIWuhXpjIRAmd2FCjV6N+eabgD4LjTYpSFlHIhY/fIrTAHy
VKZVmxyUJAFglA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:45 2025 by rpki-client