Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier: zodTnIV5/Wbmbt7BZ8mDMHPY4n904M+bmBzC7UpGGoE=
Subject key identifier: 41:0F:A5:BB:8A:5D:EE:CB:74:B9:C6:F6:0B:09:39:AF:E2:98:72:62
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 01975FB9C5D86B06808E983CC174AD5AB207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number: 0F64
Signing time: Wed 11 Jun 2025 16:01:39 +0000
Manifest this update: Wed 11 Jun 2025 16:01:39 +0000
Manifest next update: Thu 12 Jun 2025 16:01:39 +0000
Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: ywQD2AIN1l6XBox4D9qnr6PpTV7KVIgAiVPMsuPvQ0Q=)
2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:c5:d8:6b:06:80:8e:98:3c:c1:74:ad:5a:b2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Jun 11 16:01:39 2025 GMT
Not After : Jun 12 16:01:39 2025 GMT
Subject: CN=410fa5bb8a5deecb74b9c6f60b0939afe2987262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:23:6b:b4:56:ac:1e:8a:4c:e2:0d:9f:a8:
ec:66:47:32:4a:14:db:62:5f:f7:32:f8:c6:32:01:
9f:ca:4b:1e:ca:53:04:8a:a1:46:1b:96:f1:52:c3:
e6:ce:fb:73:70:aa:8e:02:e7:c2:12:70:6c:2d:9d:
fa:38:4a:c2:e9:1d:c7:69:99:85:b8:c2:d9:dc:d4:
52:15:7e:51:07:76:53:51:ff:14:13:1b:14:aa:fe:
65:75:ac:f6:fe:7a:60:f1:d7:f7:56:ef:f4:91:01:
cf:0b:92:22:c7:1a:67:f8:bb:b9:20:85:af:1f:d1:
a4:31:4b:24:79:5e:17:47:18:5f:91:5e:03:5a:58:
7d:b3:4f:72:f8:4f:f9:6e:ed:00:58:10:ec:19:c9:
3c:f6:56:8b:ec:2e:f8:6d:f1:98:0a:56:cd:b0:49:
05:c1:e9:26:49:54:64:71:04:1c:42:33:a9:12:3d:
70:b6:89:58:e4:e2:30:fd:02:8d:4f:52:b1:1c:4d:
94:65:9b:50:3a:31:02:ff:8a:d2:fb:9d:57:bd:88:
5c:40:76:9a:44:98:95:4c:8b:d4:49:90:46:3d:87:
e5:80:72:cf:f2:95:47:be:91:11:8a:7b:00:d2:78:
ae:a2:2f:7a:0c:ce:ce:61:ea:d2:47:e4:94:09:88:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0F:A5:BB:8A:5D:EE:CB:74:B9:C6:F6:0B:09:39:AF:E2:98:72:62
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:d1:8b:09:d1:d3:da:7e:06:65:b4:28:96:ca:23:0f:9b:
a9:15:f0:9c:ed:6e:82:cf:9a:e7:50:91:d3:b0:12:94:a8:8e:
ad:90:0a:4c:75:55:1f:04:d5:90:1d:e0:2d:c5:73:63:37:60:
38:bd:19:2e:3f:01:bf:38:e2:ad:09:49:87:8a:f9:d9:7a:73:
6a:e7:29:75:f0:c3:06:32:21:52:c8:d9:02:d3:62:f3:6b:97:
95:c7:5b:2f:d1:d9:84:72:2e:bc:ca:76:de:03:d4:22:d1:eb:
64:30:8a:59:a2:84:b2:1f:77:5c:62:d3:cc:71:f8:17:70:3c:
bb:e1:b9:44:6c:b8:7c:fb:1d:a0:5d:b9:67:51:8d:7e:01:50:
11:a1:51:9b:9f:dc:33:a3:c5:95:b2:e0:1f:7a:e0:49:ba:73:
62:06:41:f6:54:0b:4e:20:56:28:16:b4:36:0f:24:cb:81:1c:
fb:8b:9c:28:a8:ec:41:e1:c5:b5:c5:85:36:79:4c:65:50:c5:
6c:a3:15:c3:73:29:69:7e:96:2d:0f:7e:f4:c2:ce:eb:b1:fa:
85:f7:78:6a:22:be:a9:7f:90:08:19:36:5e:03:d1:c5:32:ed:
df:81:7d:9a:c8:05:5a:52:3f:25:9b:cc:02:59:ec:2a:bb:d3:
3a:9d:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:44:17 2025 by rpki-client