Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: d2+vtRdWZqT7QvhafumsBUbZX6Sitj0SpG+oPlIDeWc=
Subject key identifier: C4:4A:3B:4A:38:AC:8F:1A:19:AB:C8:08:CD:00:E9:DE:E1:E8:D8:C8
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019A06A4A0D00E562950576D7DE5BE06B841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 068B
Signing time: Tue 21 Oct 2025 12:00:43 +0000
Manifest this update: Tue 21 Oct 2025 12:00:43 +0000
Manifest next update: Wed 22 Oct 2025 12:00:43 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: ezf2J8/lnborEFDPFkYVTh3LwScugv/cyTHMPaPCEDk=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:a0:d0:0e:56:29:50:57:6d:7d:e5:be:06:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Oct 21 12:00:43 2025 GMT
Not After : Oct 22 12:00:43 2025 GMT
Subject: CN=c44a3b4a38ac8f1a19abc808cd00e9dee1e8d8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:80:6e:a8:0d:b4:ac:34:ee:be:d6:4c:2f:
5f:b7:13:14:79:20:be:fa:6e:6f:ef:e7:71:30:e5:
6c:d6:1b:46:71:96:f2:49:4f:66:43:14:24:e1:c2:
8d:30:c3:34:16:34:58:61:fa:10:5b:5e:1d:07:96:
77:ae:cb:01:5c:99:32:14:e7:be:09:f0:f9:23:e0:
d6:ae:b1:8b:a9:42:72:08:38:c9:3e:80:7a:40:c4:
6c:af:d6:50:17:91:7d:df:ac:80:c2:6e:74:b8:40:
5d:ac:7b:28:bc:43:38:f8:60:0d:17:f3:58:3a:1a:
58:af:ff:9a:da:1f:a8:56:c5:72:77:df:50:67:23:
7a:7e:55:4f:1b:ba:3a:09:5b:e8:8b:65:4a:7b:80:
19:74:bd:6e:34:88:75:93:e8:8f:6a:a1:ea:de:d0:
1d:9a:bd:a9:13:5f:1f:c0:d1:eb:9d:b4:74:bd:f0:
3c:72:df:f6:2c:9b:8d:91:6c:f1:3a:ab:19:fc:d5:
85:e8:e9:2c:12:67:e0:55:e4:24:7d:c4:b4:1f:b0:
01:ac:02:09:5e:d9:5a:69:78:ea:c8:c6:59:dc:ea:
26:ab:7a:88:38:56:5b:36:98:a6:fd:1c:37:5a:1e:
9f:e7:b0:7c:6b:b5:7b:5f:62:90:38:a8:e9:4f:65:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:3B:4A:38:AC:8F:1A:19:AB:C8:08:CD:00:E9:DE:E1:E8:D8:C8
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:50:ee:b8:d1:7c:77:38:e0:56:2f:2d:0f:18:4e:7c:aa:
91:3b:96:63:28:34:72:40:4b:1b:24:ee:dd:64:4d:ab:a8:27:
f8:18:6a:ed:6b:ee:e2:8f:57:d0:3f:26:f3:23:f1:19:b1:66:
0a:d0:26:33:8f:a4:4e:4b:cf:f3:8d:92:99:cf:25:e4:5e:a5:
68:80:1b:3e:df:3c:7a:09:ef:5e:91:f7:5a:30:c7:1b:0d:5d:
97:86:a8:23:d8:80:31:4e:82:df:d8:ed:5f:7f:c6:d8:24:f0:
00:73:1c:be:1e:a6:7f:37:f3:34:a6:9f:da:6e:97:f9:c8:e2:
28:08:d9:e8:2d:7f:e8:39:0c:08:0c:44:b0:58:b5:df:07:6d:
38:08:20:aa:c7:9f:e6:b1:2c:f9:31:ec:d1:39:58:63:ac:74:
29:82:05:b7:71:96:80:16:d6:52:25:29:f4:e3:68:86:d0:10:
85:93:4e:f9:d4:ff:98:22:1d:b1:d9:d7:97:9c:26:b7:30:76:
16:b0:bf:89:1b:66:7e:77:fc:e4:7a:30:2a:bc:89:2d:4e:5d:
25:bf:39:41:02:16:b4:d1:ba:94:cd:62:3c:8b:11:25:99:a1:
db:9a:0f:d3:73:48:6b:1a:00:f5:65:bd:1f:38:48:ab:cb:f4:
dd:8b:27:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGpKDQDlYpUFdtfeW+BrhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDkyZjJhNjkxMDQzM2M1YmNkODI2OWM0NDBlOGMxYzc4
MDBkNmIwHhcNMjUxMDIxMTIwMDQzWhcNMjUxMDIyMTIwMDQzWjAzMTEwLwYDVQQD
EyhjNDRhM2I0YTM4YWM4ZjFhMTlhYmM4MDhjZDAwZTlkZWUxZThkOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYyAbqgNtKw07r7WTC9ftxMUeSC+
+m5v7+dxMOVs1htGcZbySU9mQxQk4cKNMMM0FjRYYfoQW14dB5Z3rssBXJkyFOe+
CfD5I+DWrrGLqUJyCDjJPoB6QMRsr9ZQF5F936yAwm50uEBdrHsovEM4+GANF/NY
OhpYr/+a2h+oVsVyd99QZyN6flVPG7o6CVvoi2VKe4AZdL1uNIh1k+iPaqHq3tAd
mr2pE18fwNHrnbR0vfA8ct/2LJuNkWzxOqsZ/NWF6OksEmfgVeQkfcS0H7ABrAIJ
XtlaaXjqyMZZ3Oomq3qIOFZbNpim/Rw3Wh6f57B8a7V7X2KQOKjpT2V6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRKO0o4rI8aGavICM0A6d7h6NjIMB8GA1UdIwQY
MBaAFIVJLyppEEM8W82CacRA6MHHgA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYt
ZDZhOWEyODI4NGNmLzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYtZDZhOWEyODI4NGNm
LzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvBQ7rjR
fHc44FYvLQ8YTnyqkTuWYyg0ckBLGyTu3WRNq6gn+Bhq7Wvu4o9X0D8m8yPxGbFm
CtAmM4+kTkvP842Smc8l5F6laIAbPt88egnvXpH3WjDHGw1dl4aoI9iAMU6C39jt
X3/G2CTwAHMcvh6mfzfzNKaf2m6X+cjiKAjZ6C1/6DkMCAxEsFi13wdtOAggqsef
5rEs+THs0TlYY6x0KYIFt3GWgBbWUiUp9ONohtAQhZNO+dT/mCIdsdnXl5wmtzB2
FrC/iRtmfnf85HowKryJLU5dJb85QQIWtNG6lM1iPIsRJZmh25oP03NIaxoA9WW9
HzhIq8v03Ysn+Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:08:41 2025 by rpki-client