Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
File: HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft (raw, json)
Hash identifier: X1eTipQ68Opdfr3S1w8UM+FU7HVkELteFZNzHY3eKC0=
Subject key identifier: 7E:DC:42:E7:AF:36:73:E2:41:53:89:F8:8A:76:58:30:AF:6A:1C:80
Authority key identifier: 1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
Certificate issuer: /CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Certificate serial: 019A7225A62D5266137484330B3940F98773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
Manifest number: 0376
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl (hash: 9MThOzRejLaL3iCCJIMuGQl7be0u5SEhKwcs/eRe6v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:2d:52:66:13:74:84:33:0b:39:40:f9:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=7edc42e7af3673e2415389f88a765830af6a1c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:90:34:5d:dc:aa:20:00:ff:b7:f9:78:3c:
0d:83:36:99:a5:65:be:c6:7b:62:a7:af:8d:59:b4:
33:85:26:58:aa:13:de:62:3e:21:fd:86:52:e7:3f:
cb:de:86:0a:48:aa:6f:69:3a:b8:27:d0:c1:be:d5:
2a:d0:53:ef:5a:37:37:db:4a:d2:ad:0f:7d:69:7b:
9a:a7:e4:6e:ac:33:52:7f:67:db:b9:90:44:dd:1c:
e1:12:f0:08:99:2a:1e:05:2c:a8:e4:d3:db:a2:7d:
b4:fb:8a:9f:1c:24:1b:b1:8a:0d:d0:9a:6a:1e:4a:
cb:d0:6c:01:bc:5a:8e:cb:c0:5c:52:6d:9d:66:89:
71:07:ea:51:7c:49:54:ad:59:5d:8a:96:b4:b2:38:
bf:11:0d:c2:53:4a:d3:65:77:47:ad:e9:52:0d:cc:
41:e2:8c:b3:a5:a5:e3:7c:88:3c:38:fc:e7:95:9a:
40:3f:f2:48:d2:9f:ee:c0:e6:d6:00:cd:69:04:96:
62:50:24:9d:28:1d:b1:c3:73:26:18:6c:d2:45:9f:
e7:59:ed:da:d6:19:77:99:2e:93:56:0d:ee:a6:68:
1c:a1:3f:66:a6:dc:66:4a:8f:f1:7b:d9:d4:07:13:
03:16:12:73:0b:97:3a:ae:0c:98:ff:bc:96:dd:09:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:42:E7:AF:36:73:E2:41:53:89:F8:8A:76:58:30:AF:6A:1C:80
X509v3 Authority Key Identifier:
keyid:1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4e:40:a1:21:c1:50:b7:a7:89:1c:ba:1f:ac:b4:13:c1:40:
f8:ea:12:a5:b0:87:85:24:bc:81:4c:6e:b9:3f:43:cd:77:3d:
cf:d2:39:4f:5d:23:54:09:2a:80:22:96:8e:58:44:37:02:5b:
d3:59:21:ff:a5:d8:3e:c2:76:e2:7c:2e:c4:38:0e:14:37:94:
b5:14:25:df:49:d6:95:71:63:76:3c:79:78:a6:8a:a5:68:88:
6a:d1:6a:72:a3:4a:42:df:c3:37:3b:b5:00:76:63:92:12:fd:
8b:c9:e3:6a:0d:35:85:1c:7e:4b:d6:4e:03:55:d4:7a:e7:df:
60:46:ff:2f:3c:ff:a9:a5:69:97:27:a3:00:49:83:ff:02:80:
6d:86:3b:f1:79:b6:2d:e9:64:96:ee:3e:25:96:e1:40:16:b9:
a8:23:89:0b:3a:ba:00:6d:a4:8b:68:7c:88:8d:e0:95:50:ff:
f4:07:37:67:91:68:8d:2a:1b:ef:88:25:95:4f:db:6f:59:a8:
71:41:b0:bf:c3:b6:43:9e:b3:8b:7c:d6:76:0f:a2:83:cf:cc:
91:36:c6:63:6e:7d:32:71:4e:b5:22:0c:1e:2e:b5:5d:0f:9d:
31:a3:30:c3:98:29:ce:0b:b5:ba:25:34:31:ee:00:59:5f:64:
f9:ca:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:57 2025 by rpki-client