Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier: SBai862dkmma2RzoerHkkbzw3hp84QwbUHMHPWynD1M=
Subject key identifier: 93:94:20:91:D9:75:82:02:56:0C:63:DB:12:22:33:A3:92:65:B2:20
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 019A71B7939DD0C8345DBBE3994061DC6E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number: 10FB
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: TA4BxvnKYe1HTFxEJYQKdJWFCkp6P1MiBtA7hPFiA8g=)
2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:93:9d:d0:c8:34:5d:bb:e3:99:40:61:dc:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=93942091d9758202560c63db122233a39265b220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:45:12:16:72:41:1f:da:7e:ec:8a:9b:9b:
a9:4e:90:1e:55:e2:14:d8:d9:ab:89:94:e5:57:f8:
61:9f:ac:2f:0f:44:17:4b:3e:22:de:21:35:fb:95:
51:aa:aa:e2:8a:55:f6:05:aa:ce:d6:d6:33:6f:49:
ee:8c:cc:6e:7d:b1:d0:de:d5:1e:f7:53:eb:fe:b0:
16:e6:d3:ce:37:14:97:4d:72:9b:71:ec:f6:c3:14:
43:77:06:2b:da:a8:e9:2e:4f:e6:b4:67:ba:13:35:
38:da:a9:24:bd:36:ac:19:57:a0:3b:30:d6:68:e5:
af:7e:bf:57:e4:d1:0b:e2:35:b1:4c:db:60:14:12:
71:be:f0:b9:17:27:8d:de:14:d3:ae:f0:53:85:16:
1f:ac:d5:19:3a:e6:64:b3:91:f8:0b:06:fa:1e:9a:
b5:63:7b:f7:74:64:a1:35:07:49:cd:4f:2f:c0:08:
5d:64:eb:da:05:5e:54:86:ef:c4:b6:ce:f5:54:98:
04:32:be:08:68:f1:5a:46:3c:35:3c:81:95:39:09:
ac:8b:5a:ed:29:27:f1:ab:cf:af:bf:5e:ce:8c:ea:
e4:28:e9:3f:51:91:00:12:aa:c0:d0:60:f0:ba:95:
e2:6e:f0:50:05:a5:a4:ec:5d:37:8c:e7:59:87:f1:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:20:91:D9:75:82:02:56:0C:63:DB:12:22:33:A3:92:65:B2:20
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:df:c3:d9:9f:39:de:51:95:89:e5:72:c6:89:9b:e7:81:75:
6b:56:bf:9b:bd:14:b7:a5:ed:e9:de:12:cd:dd:34:7d:81:21:
84:87:7a:ec:68:59:73:8e:59:85:ce:42:e1:a7:f0:7b:aa:cd:
b4:73:be:a0:21:17:0e:b1:28:ba:24:d2:3c:32:61:fa:4c:b5:
18:93:38:d1:2f:67:4f:c3:88:29:75:48:c9:89:c5:74:ee:7b:
0b:42:59:25:89:94:41:cd:39:80:03:57:79:c0:c0:90:b3:08:
27:c1:ce:84:f8:e3:32:45:bc:43:fc:84:3b:79:d1:23:3d:d5:
b6:01:23:1c:89:66:90:5f:b4:04:7e:4a:0d:a5:3a:41:68:8f:
9a:af:c9:f2:46:7e:7f:8a:22:6b:bf:44:e5:ec:f1:5d:d1:71:
c3:22:d0:15:23:70:a6:7a:77:0b:c0:f3:f6:01:95:00:30:b4:
cc:84:50:98:c3:71:e4:71:8e:d0:d3:82:2e:b0:08:ea:31:d4:
aa:5b:b0:e7:ce:f9:92:87:72:96:3e:1c:0a:17:1f:b9:21:f6:
e8:af:fc:35:9b:32:11:af:41:62:59:85:72:4d:04:b8:c9:52:
43:b0:98:fc:0b:15:60:c4:b9:12:1b:15:9e:a5:2c:6c:ad:f8:
1f:4b:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:56 2025 by rpki-client