Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: cztgJxFkzMWRJuoZvRk/A/4Nfwsck5pPFoPaJRBkVTU=
Subject key identifier: 2C:E4:31:B7:96:46:80:4A:6B:AC:DF:BF:15:D1:E2:EB:C4:C0:F1:45
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 0199239F5586DD4C3E0BB49754B69041B2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 0A62
Signing time: Sun 07 Sep 2025 10:01:08 +0000
Manifest this update: Sun 07 Sep 2025 10:01:08 +0000
Manifest next update: Mon 08 Sep 2025 10:01:08 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: tUI2cuD36AN/lpgAEhCgHYRvlBLUSmh+SzVy27qcS4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:55:86:dd:4c:3e:0b:b4:97:54:b6:90:41:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Sep 7 10:01:08 2025 GMT
Not After : Sep 8 10:01:08 2025 GMT
Subject: CN=2ce431b79646804a6bacdfbf15d1e2ebc4c0f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:d3:72:cc:8c:30:a6:22:b8:bb:d9:55:1a:
c0:96:2b:29:cc:01:9b:ae:06:99:83:5f:d3:ac:bc:
ee:0e:c8:d5:b4:35:f8:05:b1:81:fa:82:7e:a0:75:
f1:00:15:a2:ec:48:8f:12:7f:54:f9:ec:5f:15:da:
d9:63:99:77:ce:bc:fe:09:63:02:53:17:b2:ea:82:
4f:76:b2:80:06:80:3d:de:a8:38:94:11:15:ca:03:
98:d2:29:16:19:70:b5:fb:e9:75:c7:59:cb:6c:1f:
5d:f0:6a:98:f9:d3:65:b9:7b:6c:e6:be:14:6e:86:
04:2d:ec:b4:00:89:dd:ee:d3:13:48:5c:94:19:77:
de:67:c6:04:7f:b5:35:38:98:c3:67:af:c6:2d:db:
99:bd:2f:72:20:0b:a0:42:dd:f8:ee:78:80:c9:00:
cc:ad:a9:12:38:41:5b:28:ab:38:df:da:9c:9f:03:
29:7e:eb:e3:2d:33:62:ac:2a:78:d2:3f:c7:95:ef:
d9:75:70:f1:f3:50:6c:04:ff:49:5e:b7:94:80:0f:
b0:eb:96:33:f1:03:78:28:74:5e:40:24:59:ba:50:
e6:7e:10:8d:e2:f1:fd:03:1d:19:cc:bb:37:7c:a1:
30:ef:14:c9:93:1a:0a:e9:f5:f7:86:36:c1:ca:11:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:31:B7:96:46:80:4A:6B:AC:DF:BF:15:D1:E2:EB:C4:C0:F1:45
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:1d:e4:e2:33:2d:e7:3e:68:46:de:fe:3b:12:63:13:63:
3a:a6:8e:f9:ae:4c:68:d3:1e:1b:9a:8b:19:66:96:db:14:2a:
9d:96:66:4a:70:d3:ce:60:5a:67:ad:38:9d:c7:51:e4:46:cb:
72:93:f7:10:9d:df:2a:46:ab:9e:a8:46:af:05:b3:91:70:4f:
78:61:bd:22:39:2d:e2:48:a0:e9:e3:6c:68:87:8d:4f:62:d6:
da:e7:ca:8d:da:17:f4:0d:74:07:94:69:22:ab:4e:04:39:58:
23:c6:22:ff:50:28:cf:90:98:a9:ec:e7:ff:9d:d6:01:72:40:
e2:d1:64:96:03:92:f3:19:db:d2:37:f3:4a:c5:55:3e:6f:a4:
4a:61:2f:f8:59:58:0e:bd:f2:8b:9b:c2:fa:c8:38:2c:c6:c1:
ee:84:71:20:30:4d:e5:71:17:d3:e9:c0:f7:e2:cb:79:b3:d4:
f9:49:ef:72:50:64:1d:fb:5e:68:c9:3a:b4:98:f5:ba:e7:33:
a9:a4:0b:3a:61:b1:79:10:57:a6:99:7a:d4:db:cb:5f:ca:1e:
7e:85:a4:47:a1:5f:51:d3:98:da:e1:f2:19:16:83:76:67:75:
fd:9f:ad:15:dd:b1:e8:42:42:9d:78:b1:e2:3c:bc:bf:4f:5b:
ca:cf:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:44 2025 by rpki-client