Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier: REzJNJ0sqpjUdR1fManFt9O2eRSQO6Nxzt7xULUCXII=
Subject key identifier: 15:A9:85:00:09:5E:8C:6E:B4:86:BC:F6:84:E7:CC:B9:C2:C2:D1:9B
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 01976584CF05A5683EC4779F53661428E49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number: 0F67
Signing time: Thu 12 Jun 2025 19:01:31 +0000
Manifest this update: Thu 12 Jun 2025 19:01:31 +0000
Manifest next update: Fri 13 Jun 2025 19:01:31 +0000
Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: OBnJAzm/xQlxqGp2dh7L6FJS/zyeZgWN56yx1FDf7GE=)
2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:cf:05:a5:68:3e:c4:77:9f:53:66:14:28:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Jun 12 19:01:31 2025 GMT
Not After : Jun 13 19:01:31 2025 GMT
Subject: CN=15a98500095e8c6eb486bcf684e7ccb9c2c2d19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:b7:63:54:84:5f:d3:17:f5:6b:f9:f6:50:
c9:d2:69:b6:80:25:e3:7c:16:10:53:de:af:95:70:
c5:96:86:4a:38:7f:0e:66:82:d9:df:db:aa:c1:73:
71:57:88:47:f2:bf:86:b5:26:fa:9f:68:fb:13:14:
c5:71:5c:3d:2d:e9:41:69:3f:63:67:1e:06:7b:03:
7e:ed:0f:a6:85:9d:dd:4c:e9:23:a6:32:bd:c8:69:
6e:9a:10:d2:30:f1:a1:70:ad:71:78:4d:c4:cd:8b:
d9:3f:73:c5:67:3d:a8:a5:56:a9:7e:9f:8f:24:e6:
15:ca:f0:01:14:c5:87:c3:1c:0d:1f:5f:64:67:28:
36:de:dd:03:25:9b:1f:f5:cb:84:89:ee:73:3d:05:
15:d7:78:20:92:74:9a:27:d8:f9:70:70:3a:23:ed:
61:ee:fa:39:9e:ce:77:55:78:45:86:0a:d0:51:89:
f9:25:ee:38:f4:d6:97:4d:ad:59:45:72:8c:53:13:
1e:e5:97:91:87:e1:a7:ad:dc:30:5d:1f:4a:f2:f1:
69:a7:ab:a2:16:6d:95:3e:b5:30:67:de:59:72:e3:
07:1e:06:43:54:63:c5:4e:56:9d:68:08:dd:da:80:
5d:e6:a4:c2:07:f7:20:c5:44:43:f4:9e:a4:50:28:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:85:00:09:5E:8C:6E:B4:86:BC:F6:84:E7:CC:B9:C2:C2:D1:9B
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:d6:fc:7f:b2:74:eb:76:38:b5:97:e0:ec:a5:bc:a5:c2:
63:ec:16:bd:36:b3:88:78:e1:25:57:36:fd:b6:08:86:01:aa:
b1:16:5b:75:fb:16:d7:71:a9:29:ed:99:d3:22:7e:cb:5a:0f:
76:05:f0:29:84:a4:ee:05:8c:96:29:4b:e5:35:36:13:6a:83:
e7:e0:20:e1:25:67:ba:b9:3a:e8:17:29:5a:d8:2e:a7:00:3d:
c9:7c:ef:10:55:31:cb:d3:0c:32:b0:27:d5:8c:f2:a4:48:76:
f5:2f:2e:0a:d4:d6:e6:cf:96:90:f1:c4:62:a6:c7:66:d2:0d:
bb:54:bf:b7:16:a5:a6:43:81:fe:36:47:7c:78:23:c5:33:97:
b4:ca:17:37:6b:d1:31:25:8c:12:69:a7:c8:3c:5f:e0:ae:6a:
6e:fe:9a:5a:80:f9:41:09:b9:89:44:82:56:bd:4f:66:a7:28:
61:2f:df:4e:1e:f2:0c:36:87:9c:ad:c8:46:62:de:6c:c0:5e:
86:8e:e3:62:ed:a7:6f:a9:d8:c7:3c:83:1b:2e:a7:ff:9d:41:
f4:8d:67:9a:a4:93:7e:a4:8b:c3:92:98:0a:e9:22:15:9b:51:
68:39:53:32:7b:e7:ee:05:39:db:88:16:e6:71:b0:5f:54:d3:
f7:9a:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:55:54 2025 by rpki-client