Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: OC0qFQCzTQhvC/LcIQTtURAbJkhTKUMDWaQliDY7ljQ=
Subject key identifier: C7:95:10:7B:4C:1F:FF:07:2A:7D:51:33:C3:44:1B:7C:D0:78:BD:91
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 0199FBEC3324D1FA36E1FA4BEEC24295F0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: Ts23OViaQmlj0TXdfIGddgTB+zFyeHYXGUf9o8lZ1q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:33:24:d1:fa:36:e1:fa:4b:ee:c2:42:95:f0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=c795107b4c1fff072a7d5133c3441b7cd078bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:9a:89:0f:22:e5:10:45:64:f7:49:a1:fa:
fb:3d:01:1d:50:ca:d2:e4:ba:35:73:d2:a4:c5:b3:
2f:31:fc:8e:ae:2b:22:66:e7:63:d6:91:7d:2d:88:
81:1d:56:46:17:7f:b8:9d:af:6b:bd:b7:5e:14:bc:
d5:9c:ce:16:3f:2b:30:1e:e6:e1:a6:58:fd:11:d4:
c8:e3:7e:f4:ae:40:14:19:6c:cb:b0:ee:a5:78:f5:
b1:08:74:ac:4d:8c:74:81:3a:c3:04:88:fd:bd:36:
f3:c5:17:08:28:44:5b:2d:ce:e1:65:47:48:1c:d6:
9d:fd:02:34:33:08:13:94:af:15:39:9f:04:e9:1e:
47:e5:72:ac:b7:70:b6:90:65:bb:08:ef:84:3d:2a:
1a:b2:b9:12:79:e6:f9:84:04:b8:f5:dc:60:0a:a3:
e4:cc:63:52:ba:2d:3a:7a:79:3c:a6:1f:88:39:cc:
b1:6b:19:5c:39:00:b2:62:b1:28:98:1b:1a:78:21:
c9:fa:bf:cd:e9:93:d0:d3:d4:32:c8:50:4d:5a:b2:
fa:b6:aa:cf:ca:14:79:62:af:f3:d6:54:25:54:94:
77:ef:64:a9:1e:e7:13:71:3e:8b:01:b2:fc:b9:85:
f4:43:cc:6d:60:f8:4a:1d:b1:c9:f0:f2:02:36:ab:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:10:7B:4C:1F:FF:07:2A:7D:51:33:C3:44:1B:7C:D0:78:BD:91
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:cc:1a:25:de:a9:c7:fc:5e:47:54:82:84:17:8c:62:d4:
c6:ba:b4:ce:d8:94:5c:0f:b7:c0:0f:6c:e0:1c:04:b5:01:59:
b3:5b:c0:1e:3e:80:1c:22:27:4b:f2:0b:98:6b:26:d9:95:79:
41:41:5f:8a:f6:75:ee:36:78:0b:63:ad:64:9e:54:7f:24:dc:
09:6d:d5:b7:b7:88:d1:87:be:a1:0b:28:68:a3:ea:f8:77:fd:
43:55:a7:bd:98:58:8b:0f:22:ce:b3:83:c4:40:5d:77:41:85:
06:55:40:85:aa:b3:d4:fc:c3:6f:b7:aa:44:10:8e:95:06:e1:
7e:e6:68:4c:23:00:bd:b4:76:be:93:62:a2:89:0d:20:6d:72:
ea:ac:9e:14:92:4c:70:dc:52:b4:66:cb:86:37:49:1d:7e:e1:
99:3e:02:ce:17:7e:51:a3:eb:25:8b:a0:2e:a0:c7:4c:db:74:
09:7a:9e:aa:45:f6:00:af:0e:41:c7:db:60:26:cd:40:a5:f5:
f9:96:f9:df:84:f0:6d:ae:f5:49:a9:38:97:36:0b:b0:2e:28:
e6:b6:7b:ed:af:cf:16:34:61:da:1d:0a:f1:61:53:b6:c8:83:
73:4a:c0:aa:49:43:5b:a0:21:03:93:30:1a:a6:33:4a:41:bd:
a7:82:b6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77DMk0fo24fpL7sJClfD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1
ZDVmODEwHhcNMjUxMDE5MTAwMzA0WhcNMjUxMDIwMTAwMzA0WjAzMTEwLwYDVQQD
EyhjNzk1MTA3YjRjMWZmZjA3MmE3ZDUxMzNjMzQ0MWI3Y2QwNzhiZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO2aiQ8i5RBFZPdJofr7PQEdUMrS
5Lo1c9KkxbMvMfyOrisiZudj1pF9LYiBHVZGF3+4na9rvbdeFLzVnM4WPyswHubh
plj9EdTI4370rkAUGWzLsO6lePWxCHSsTYx0gTrDBIj9vTbzxRcIKERbLc7hZUdI
HNad/QI0MwgTlK8VOZ8E6R5H5XKst3C2kGW7CO+EPSoasrkSeeb5hAS49dxgCqPk
zGNSui06enk8ph+IOcyxaxlcOQCyYrEomBsaeCHJ+r/N6ZPQ09QyyFBNWrL6tqrP
yhR5Yq/z1lQlVJR372SpHucTcT6LAbL8uYX0Q8xtYPhKHbHJ8PICNqvPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeVEHtMH/8HKn1RM8NEG3zQeL2RMB8GA1UdIwQY
MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et
Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4
LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPjMGiXe
qcf8XkdUgoQXjGLUxrq0ztiUXA+3wA9s4BwEtQFZs1vAHj6AHCInS/ILmGsm2ZV5
QUFfivZ17jZ4C2OtZJ5UfyTcCW3Vt7eI0Ye+oQsoaKPq+Hf9Q1WnvZhYiw8izrOD
xEBdd0GFBlVAhaqz1PzDb7eqRBCOlQbhfuZoTCMAvbR2vpNiookNIG1y6qyeFJJM
cNxStGbLhjdJHX7hmT4Czhd+UaPrJYugLqDHTNt0CXqeqkX2AK8OQcfbYCbNQKX1
+Zb534Twba71Sak4lzYLsC4o5rZ77a/PFjRh2h0K8WFTtsiDc0rAqklDW6AhA5Mw
GqYzSkG9p4K2Lw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:13 2025 by rpki-client