Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier: CRhVOkllKEuTdJ9hPmloFxXeqOT1eLdr+WfCz0hyYEg=
Subject key identifier: 29:CF:3A:C0:CC:ED:7E:C1:F2:F7:94:E4:CF:9F:C1:AA:9B:73:F9:7B
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 019921B051EDFECB463EC311F2C12E6540CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number: 104D
Signing time: Sun 07 Sep 2025 01:00:27 +0000
Manifest this update: Sun 07 Sep 2025 01:00:27 +0000
Manifest next update: Mon 08 Sep 2025 01:00:27 +0000
Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: l7GzRVzComY+buqGGx8zztTGZZFvwsN5qwRbmsFijHs=)
2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:51:ed:fe:cb:46:3e:c3:11:f2:c1:2e:65:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Sep 7 01:00:27 2025 GMT
Not After : Sep 8 01:00:27 2025 GMT
Subject: CN=29cf3ac0cced7ec1f2f794e4cf9fc1aa9b73f97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:03:e0:6b:01:c7:f1:15:89:14:9d:67:c7:
90:6e:02:df:df:2e:be:af:87:a5:a9:4e:7f:12:32:
a9:fd:63:3f:3c:0d:cd:20:e1:f4:d9:5c:49:af:00:
c3:db:ee:2d:ba:17:7d:e9:90:38:ef:ea:9c:c0:61:
86:1a:ba:26:50:a3:8e:0e:b0:a9:8d:3a:50:ac:29:
d5:f2:32:33:0d:3c:c7:4f:bc:41:03:13:50:82:94:
12:53:32:a7:50:b5:96:c2:ca:3c:bc:a9:9b:e7:11:
20:43:58:d4:6b:94:c8:d0:47:06:bb:65:6f:e6:01:
ae:c9:9c:b5:8d:76:30:73:37:85:6e:50:77:c8:e8:
ca:51:42:15:42:a2:7f:db:78:2b:db:c4:b8:20:e8:
70:bd:1a:3d:7a:be:1a:b2:c7:a7:91:15:04:0b:4a:
c6:ad:c2:fc:f4:48:c2:6b:20:53:11:9f:50:a8:50:
0a:1c:97:64:f5:26:74:cf:f5:c7:a5:6d:ce:dc:11:
bf:94:fb:b1:2c:e2:97:f0:54:ba:3c:eb:37:83:70:
b4:7d:f4:e6:46:b2:c7:b6:6d:3d:30:2b:41:78:65:
4b:d7:b5:ba:ed:dc:02:3d:98:4a:51:52:85:d9:b8:
6c:ce:76:e3:2a:64:19:a1:27:b1:be:f4:ba:3b:96:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:3A:C0:CC:ED:7E:C1:F2:F7:94:E4:CF:9F:C1:AA:9B:73:F9:7B
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:44:3e:f1:a3:67:84:6c:10:f9:c0:88:96:a4:48:5d:fe:
c2:61:ad:a0:fe:d6:a8:bd:cc:3e:fa:63:d7:c7:28:65:4d:c2:
f4:9c:80:68:62:f7:37:e3:72:7f:72:db:c0:8b:ef:5c:ef:86:
75:4d:ee:d8:7e:ec:13:30:aa:bc:58:56:1c:b8:ae:36:c4:ad:
ea:de:1b:20:e7:7b:14:25:65:48:c9:33:02:67:99:e4:b7:79:
c4:71:8f:67:50:e0:e9:02:7f:62:e4:2b:08:9f:ce:6a:70:e6:
04:5c:cb:da:26:b1:64:18:f6:8a:42:af:ce:c9:08:79:a7:30:
3d:1d:99:de:a2:d5:03:ad:2a:0c:ab:1e:5f:5d:2a:b6:e7:f4:
3a:6d:dc:2b:c6:6b:32:e4:b1:49:1b:ac:70:fa:5f:3c:17:e5:
8c:d1:f9:d3:e8:cf:34:ea:b4:50:1a:72:62:b9:02:4f:6a:47:
8b:32:66:bc:ac:fa:ac:5e:87:59:49:b9:e9:f6:55:ed:23:0c:
23:fa:f8:9d:b5:c5:41:f6:89:6a:b3:c5:98:d8:a6:28:dd:88:
15:5c:76:9d:5e:40:0d:24:62:32:84:82:0f:55:b1:f1:47:ef:
49:58:b7:d1:66:e9:01:87:dd:3b:ab:fe:61:f7:02:e3:5e:bf:
85:b5:67:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsFHt/stGPsMR8sEuZUDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTNjZjExNGJlNGZhNGM0ZmY3NmIyMThmYWQ1MGU1MTcz
OTE2MGQwHhcNMjUwOTA3MDEwMDI3WhcNMjUwOTA4MDEwMDI3WjAzMTEwLwYDVQQD
EygyOWNmM2FjMGNjZWQ3ZWMxZjJmNzk0ZTRjZjlmYzFhYTliNzNmOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eUD4GsBx/EViRSdZ8eQbgLf3y6+
r4elqU5/EjKp/WM/PA3NIOH02VxJrwDD2+4tuhd96ZA47+qcwGGGGromUKOODrCp
jTpQrCnV8jIzDTzHT7xBAxNQgpQSUzKnULWWwso8vKmb5xEgQ1jUa5TI0EcGu2Vv
5gGuyZy1jXYwczeFblB3yOjKUUIVQqJ/23gr28S4IOhwvRo9er4assenkRUEC0rG
rcL89EjCayBTEZ9QqFAKHJdk9SZ0z/XHpW3O3BG/lPuxLOKX8FS6POs3g3C0ffTm
RrLHtm09MCtBeGVL17W67dwCPZhKUVKF2bhsznbjKmQZoSexvvS6O5YRoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnPOsDM7X7B8veU5M+fwaqbc/l7MB8GA1UdIwQY
MBaAFISjzxFL5PpMT/drIY+tUOUXORYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUt
NTM5MzI5YmVkNDZlLzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUtNTM5MzI5YmVkNDZl
LzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOBEPvGj
Z4RsEPnAiJakSF3+wmGtoP7WqL3MPvpj18coZU3C9JyAaGL3N+Nyf3LbwIvvXO+G
dU3u2H7sEzCqvFhWHLiuNsSt6t4bIOd7FCVlSMkzAmeZ5Ld5xHGPZ1Dg6QJ/YuQr
CJ/OanDmBFzL2iaxZBj2ikKvzskIeacwPR2Z3qLVA60qDKseX10qtuf0Om3cK8Zr
MuSxSRuscPpfPBfljNH50+jPNOq0UBpyYrkCT2pHizJmvKz6rF6HWUm56fZV7SMM
I/r4nbXFQfaJarPFmNimKN2IFVx2nV5ADSRiMoSCD1Wx8UfvSVi30WbpAYfdO6v+
YfcC416/hbVn+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:49 2025 by rpki-client