Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: R0dI6zBIJoxst3/qgm6kAlqkTllpTxVSm21mp9EHba8=
Subject key identifier: A6:BD:00:EB:EE:38:BC:3F:5D:83:55:49:7C:01:CB:AA:72:75:9A:18
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 019A729341FE12FF38AD5207C8408106D3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0ABF
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: o8PlYzXJ0x54NB+PJFVWgsK/HS5v6Y5DXRktLk5yIAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:41:fe:12:ff:38:ad:52:07:c8:40:81:06:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=a6bd00ebee38bc3f5d8355497c01cbaa72759a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:53:7b:26:6c:a3:17:94:21:ef:94:53:ea:
11:df:25:e7:f7:36:83:6b:29:b1:57:8b:f4:9b:48:
6f:af:2f:a6:3e:4e:b3:bb:27:bb:fa:48:0d:ed:78:
38:19:ff:84:b5:6d:ba:d3:66:5d:77:61:04:11:0b:
db:6f:34:b2:11:d3:73:08:f2:fb:91:55:66:a7:90:
a8:b5:a5:55:b0:8c:aa:64:34:e8:f5:da:c5:48:89:
a4:76:f2:9f:2c:6e:b7:b3:dd:ec:d5:45:f2:4a:ae:
2f:6d:d9:de:2d:79:08:4b:66:d3:20:db:d7:0c:f6:
c1:8f:e3:c0:68:44:8b:3f:22:3c:a7:25:0b:47:b5:
35:1b:ad:0b:63:40:c7:c3:36:a1:2a:d0:68:68:9d:
b6:d9:e3:d5:65:fd:0b:77:da:12:6f:66:13:a6:8e:
15:9c:14:1b:a2:3b:ab:96:fa:8b:f0:0d:f1:12:6c:
ea:40:31:b5:e3:c0:89:dc:7c:74:60:22:3a:c1:a0:
75:20:98:96:92:78:f5:76:d8:7e:52:95:dc:29:d9:
c4:24:ed:1a:d7:4e:91:fa:f0:f0:5c:9a:07:a3:b2:
83:41:31:fa:40:a7:90:5e:cd:19:a7:eb:31:28:b6:
1f:04:f3:82:bf:28:3b:8a:57:a9:13:37:ba:f4:76:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BD:00:EB:EE:38:BC:3F:5D:83:55:49:7C:01:CB:AA:72:75:9A:18
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:8c:16:8d:7e:e2:e3:43:a0:e5:00:f4:29:20:9d:87:6a:
04:64:9c:3a:05:2b:d4:e2:d2:97:86:f1:87:92:3d:32:b4:95:
52:a6:44:ba:15:82:e1:0e:1d:fd:d8:a9:93:40:0a:91:03:0e:
40:25:f4:60:78:f4:4d:57:f6:e4:79:30:0c:d0:e3:a8:db:53:
c8:76:e4:84:d2:f6:64:86:d1:32:d3:7e:7e:d6:7c:77:3b:50:
19:a7:6a:26:9e:df:17:72:ce:5a:67:13:0a:3b:de:09:78:00:
25:27:17:73:bc:6c:dc:32:66:68:5a:95:4d:cb:dd:60:af:ff:
63:a2:0d:98:15:2d:42:31:51:9c:d9:95:c3:52:5e:31:eb:4e:
31:6b:e7:c2:7b:fb:7d:95:25:6d:9d:74:33:83:40:55:3d:80:
fe:da:c7:eb:2f:0b:05:a5:2a:27:6b:78:82:65:fb:de:66:d5:
24:c2:8e:a0:e0:1b:ce:cd:0f:45:0c:28:e7:4a:8e:b0:33:db:
3c:34:7f:16:cc:1d:98:66:d6:07:2a:53:51:1f:68:0b:e6:eb:
aa:07:a2:c5:10:a7:1b:9d:0f:b2:2e:34:d6:e3:6f:bd:50:15:
44:79:b3:5d:82:86:a5:15:9d:57:3e:ef:ae:40:cb:1b:43:41:
76:2a:8a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0H+Ev84rVIHyECBBtPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjUxMTExMTEwMDQ0WhcNMjUxMTEyMTEwMDQ0WjAzMTEwLwYDVQQD
EyhhNmJkMDBlYmVlMzhiYzNmNWQ4MzU1NDk3YzAxY2JhYTcyNzU5YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zhTeyZsoxeUIe+UU+oR3yXn9zaD
aymxV4v0m0hvry+mPk6zuye7+kgN7Xg4Gf+EtW2602Zdd2EEEQvbbzSyEdNzCPL7
kVVmp5CotaVVsIyqZDTo9drFSImkdvKfLG63s93s1UXySq4vbdneLXkIS2bTINvX
DPbBj+PAaESLPyI8pyULR7U1G60LY0DHwzahKtBoaJ222ePVZf0Ld9oSb2YTpo4V
nBQbojurlvqL8A3xEmzqQDG148CJ3Hx0YCI6waB1IJiWknj1dth+UpXcKdnEJO0a
106R+vDwXJoHo7KDQTH6QKeQXs0Zp+sxKLYfBPOCvyg7ilepEze69HZ46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa9AOvuOLw/XYNVSXwBy6pydZoYMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi2MFo1+
4uNDoOUA9CkgnYdqBGScOgUr1OLSl4bxh5I9MrSVUqZEuhWC4Q4d/dipk0AKkQMO
QCX0YHj0TVf25HkwDNDjqNtTyHbkhNL2ZIbRMtN+ftZ8dztQGadqJp7fF3LOWmcT
CjveCXgAJScXc7xs3DJmaFqVTcvdYK//Y6INmBUtQjFRnNmVw1JeMetOMWvnwnv7
fZUlbZ10M4NAVT2A/trH6y8LBaUqJ2t4gmX73mbVJMKOoOAbzs0PRQwo50qOsDPb
PDR/FswdmGbWBypTUR9oC+brqgeixRCnG50Psi401uNvvVAVRHmzXYKGpRWdVz7v
rkDLG0NBdiqKew==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:59 2025 by rpki-client