Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: OsHorPQLgwyB/+kArGMPkUgpcu6vUudPxDF/TEocXC8=
Subject key identifier: BD:71:73:DA:ED:8D:4C:CE:7F:73:4A:3D:65:19:BE:B1:1E:DD:DD:9E
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 019A71B88C1A99AFF8D93BF17C23FD860B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 0B0F
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: FDTsqZrtIlE7NfwkPUlclD9T+SqkHnZ+mgZTWA8uBgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:1a:99:af:f8:d9:3b:f1:7c:23:fd:86:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=bd7173daed8d4cce7f734a3d6519beb11edddd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:63:f3:27:e0:e5:67:67:32:bd:f8:8e:52:
cc:58:f4:53:24:18:6d:36:6b:4d:82:98:a1:8e:d4:
69:c3:7e:7d:f0:92:7b:e6:bd:d6:30:c0:c6:95:66:
6a:35:3e:37:19:64:bb:f1:63:1d:e2:c0:a6:86:03:
7c:7e:3f:6b:e6:c9:4b:5e:eb:8a:b4:9b:ea:e4:61:
7e:07:f4:ed:d9:ed:08:e8:87:a8:91:fa:bf:c6:ac:
6f:28:d3:81:5c:97:5f:71:6e:72:f3:bc:59:b2:74:
45:95:bc:89:28:76:a0:65:8e:e5:55:aa:9d:c0:38:
02:44:48:25:c5:8c:59:de:21:60:ed:81:57:9e:bc:
32:52:f2:11:16:0d:a8:19:8d:a9:e4:9f:75:62:f8:
db:8a:98:65:bc:db:6b:4b:a1:1b:85:4d:12:e5:ef:
b2:94:69:7e:05:90:2f:a5:ca:08:ca:cd:ed:39:43:
f8:a7:2d:aa:fb:7c:b2:2d:db:3b:e3:0b:c7:58:60:
bb:77:82:1e:fd:7a:d8:d8:34:58:7b:f4:ec:1d:75:
ce:9c:32:86:65:18:24:d1:f3:20:f1:54:a0:34:48:
70:74:56:33:0a:f4:6f:67:1c:c4:60:70:75:fc:48:
ab:5e:82:2a:db:fd:68:db:de:29:f4:11:18:5c:31:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:73:DA:ED:8D:4C:CE:7F:73:4A:3D:65:19:BE:B1:1E:DD:DD:9E
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:65:8a:5e:cb:74:7a:94:7f:64:df:f6:f4:93:34:7d:f4:ab:
d8:f9:dc:57:52:7c:78:4c:51:45:41:6a:38:c7:a3:ac:99:e8:
d6:45:51:fd:a9:57:f3:27:eb:42:91:ea:46:a8:2b:91:b9:d3:
c5:f6:ff:cb:9d:ac:60:40:e2:47:e5:3c:e5:e7:b4:30:e7:4f:
36:a1:23:b4:a6:e8:8e:eb:89:40:31:f6:19:2c:54:74:42:9a:
7e:a3:29:e4:42:4d:34:c2:19:c1:f5:09:ab:04:8e:de:65:08:
6c:1f:8a:9a:69:8d:ea:2e:4d:ac:fe:c3:b7:b2:5d:24:e7:f7:
5c:4b:70:cb:bd:85:03:cf:c1:76:f7:08:65:ae:06:8e:cb:06:
e5:da:d4:ff:dd:c4:5f:1b:23:9b:aa:80:d7:90:bf:d0:09:c3:
de:71:1c:7e:98:45:85:02:f2:b8:7e:b8:be:8f:f9:30:13:87:
b8:04:55:b7:a3:e2:db:ca:64:75:ec:5a:00:c0:f8:3d:48:24:
78:85:86:56:d4:7b:75:7c:95:d6:33:a1:41:68:34:82:3b:7e:
80:05:91:40:13:78:78:0b:dd:7a:fb:a5:fd:68:3f:f3:90:1c:
b9:4b:c7:9a:10:e3:e3:4f:e4:e9:cd:0b:70:d8:69:c2:8d:f1:
a8:a7:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client