Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
File: HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json)
Hash identifier: 41vpuPwd5ENFygxvcFX5oyzZmoJNugaGxhzDg+ISUY4=
Subject key identifier: 89:5B:25:9E:7E:05:48:0A:AE:35:69:AC:A3:2B:76:A2:57:A6:46:B4
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial: 019A7226383AAE468F704F971A3083E85986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: vaNZEBuAPKDoguCsQAGghdasrwXCvcdoUlhoUXuXVho=)
2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:38:3a:ae:46:8f:70:4f:97:1a:30:83:e8:59:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=895b259e7e05480aae3569aca32b76a257a646b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:c7:d4:34:1b:26:7a:4e:30:78:ff:2a:32:
7c:9e:c9:ac:3c:54:da:af:60:b0:8e:00:52:0f:5f:
bd:88:fc:60:47:dc:0d:9f:18:86:52:8f:d0:62:2f:
77:7b:ad:7b:9f:ee:1e:d7:9d:ef:87:96:1f:3c:14:
c4:27:a0:44:0f:76:7f:8f:2a:d7:63:ca:45:06:46:
d4:83:7a:90:6e:8d:8d:17:9b:43:63:15:37:20:ee:
d5:5c:b2:6a:ab:d8:fa:36:f5:36:94:3b:4c:8b:6f:
fe:31:ed:78:ec:8b:18:90:3f:09:7b:b9:e6:fe:f8:
e9:e8:e4:e2:b8:62:c3:d1:0e:e0:17:e6:f4:ea:40:
e4:0a:3e:51:67:f1:9f:af:fc:c0:bf:00:08:30:b8:
c3:76:99:bd:23:f3:ce:8e:a9:ad:c3:99:38:61:f4:
a5:15:49:91:4f:2d:96:87:19:a1:fc:ca:8d:27:06:
fe:7c:1a:a2:56:57:25:47:74:e5:13:80:78:4b:58:
71:10:5b:2f:cc:79:fd:56:fa:40:36:8a:ca:c9:dd:
5f:fa:87:f7:2c:85:c5:37:29:fb:99:93:7b:34:98:
a5:65:ea:19:9e:a3:2e:37:64:09:a6:32:09:14:7a:
71:4b:e3:62:0b:8b:5b:e2:37:46:2e:ca:15:27:37:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:25:9E:7E:05:48:0A:AE:35:69:AC:A3:2B:76:A2:57:A6:46:B4
X509v3 Authority Key Identifier:
keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:77:95:60:83:b8:f7:f2:b9:c6:86:b1:1a:95:53:d0:54:9d:
31:32:8b:4f:1b:ad:64:b4:36:c0:41:40:5e:38:78:55:16:77:
e0:14:e4:63:6d:3f:9b:7b:63:62:25:e3:63:3e:2a:30:d2:a1:
bf:1e:fc:35:e0:a1:34:d9:6f:b1:3c:c9:6b:94:92:16:74:3f:
74:e5:68:21:aa:45:4d:70:44:d5:d8:12:9e:c7:51:f8:8a:9b:
f5:b1:10:6e:1f:35:2a:a2:fc:cf:af:c0:50:34:48:07:1f:75:
ce:fc:8f:24:46:e1:54:de:ab:90:6c:7c:a2:bf:f9:44:08:86:
a7:fb:73:9e:16:50:f4:3f:3e:da:8e:ed:52:89:7b:8c:90:16:
65:79:34:4e:50:30:87:2a:aa:47:14:c0:f4:27:4b:71:2b:e9:
7b:67:99:8e:06:89:93:41:e8:bd:0b:57:55:ca:3e:9b:24:7b:
cf:a2:f2:8f:5e:84:f9:42:f5:f3:ff:df:f7:a8:fc:2a:f7:4c:
31:ce:a8:5b:c7:a9:79:6f:f7:69:97:1f:10:65:70:71:40:3c:
d6:cd:db:a9:2d:cf:f2:ca:81:d5:92:68:d7:a4:e2:3c:72:19:
b9:ad:b7:7b:db:ea:10:68:93:06:72:f5:4d:fa:b2:58:45:51:
9d:b7:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:22 2025 by rpki-client