Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: 96cZqC03LkltF2OEu0Apb6R2xRGhqwqWyBbQ5T2TH6I=
Subject key identifier: F3:61:CE:A7:D7:D8:E8:52:9F:4F:F8:94:04:E6:0C:26:7C:65:8A:00
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019A1986484EA4494D84F56EA8046CA73722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0C68
Signing time: Sat 25 Oct 2025 04:00:22 +0000
Manifest this update: Sat 25 Oct 2025 04:00:22 +0000
Manifest next update: Sun 26 Oct 2025 04:00:22 +0000
Files and hashes: 1: 0qRVIHZKX4qGnjxAiU1aoisO8_I.roa (hash: lyCpmpSchMKVPytHVw70ZjOKFalrbZ7DXCdpS6ih0A8=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: Usphlw+fYa60pI1lv1BGz0H70EVZMnBOXAPa7T26yMU=)
3: XrZ7_VYsTjVO1Hdr6lTXBYRHdDM.roa (hash: /HTMnGOuDTUdEjSKAx29mQcK6o1vmtlFHqUYC092xGg=)
4: fNaHZKQWzTR0TatLxGJsV51nz-I.roa (hash: sE2fqms9057unxv9v3lOHD2WZe1GOPfgICxqGHioarI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:48:4e:a4:49:4d:84:f5:6e:a8:04:6c:a7:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Oct 25 04:00:22 2025 GMT
Not After : Oct 26 04:00:22 2025 GMT
Subject: CN=f361cea7d7d8e8529f4ff89404e60c267c658a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:db:3d:ce:64:fd:7d:a4:31:cd:bb:75:1e:
05:74:86:f3:9e:6b:7e:74:f1:c9:d3:a1:b7:ef:1b:
32:1d:f1:79:78:31:39:92:8d:06:9a:ed:5d:e7:4a:
47:28:32:ef:1b:3d:a6:01:a8:c5:f7:6a:ac:c1:06:
16:36:42:2e:ba:28:94:90:3e:ba:82:4c:87:93:e0:
1f:4e:98:aa:8d:a7:9b:66:1c:4a:e5:6e:48:f1:05:
69:54:83:8f:c6:10:b1:16:92:76:5c:b1:2e:13:46:
2c:d6:55:42:b1:92:69:7a:f1:b8:63:85:0d:75:45:
8b:2a:88:a0:91:f0:a1:59:c9:08:74:e7:55:a8:6a:
43:16:51:25:72:78:29:67:b7:79:cb:e9:e9:c8:b7:
f5:b4:ca:f7:9a:6a:f4:58:9a:37:48:6c:31:77:b9:
e4:a9:00:99:17:0e:12:d5:fd:d6:37:64:42:e3:00:
42:72:e6:c7:c7:b7:d7:8a:2e:a1:9f:fb:23:63:fe:
61:af:17:22:18:c7:71:c6:d4:2b:78:4f:35:16:8e:
ad:74:67:e1:25:ac:5b:b2:14:a5:a5:26:a3:e1:25:
a6:d9:b0:e3:16:c9:ee:25:56:c9:d7:ef:ca:a4:25:
6c:fb:06:6e:18:f7:63:ba:11:0e:a9:ca:25:25:05:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:CE:A7:D7:D8:E8:52:9F:4F:F8:94:04:E6:0C:26:7C:65:8A:00
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:12:2c:15:3c:d9:34:00:b7:4e:ff:d6:88:57:c1:53:89:
45:23:11:ff:34:6a:9c:ab:e2:2b:7a:b9:e8:1f:98:95:53:4d:
7f:aa:73:26:81:08:36:63:0c:bf:a7:7f:68:b1:43:e1:65:db:
88:d8:9e:ee:f2:1e:e7:96:29:69:50:cc:a8:ad:d1:23:e9:3f:
16:25:db:34:99:4b:06:94:f5:fc:ca:fb:c6:09:d9:5c:9b:f8:
b1:67:4b:76:b2:4f:1b:76:f1:db:0d:0c:eb:64:24:40:ce:b2:
fe:08:3e:e8:f0:8f:d3:02:6c:fb:15:eb:bf:f9:b2:fd:17:23:
a8:9b:a5:23:8a:b9:ba:3d:72:5e:ac:92:0a:3f:79:19:f7:a2:
ae:eb:ba:b9:83:b7:18:7e:61:d0:26:4d:a5:43:4a:5f:77:9a:
fa:ac:6f:bf:b0:83:90:82:e3:2a:ef:f5:6e:d3:86:29:51:03:
d4:e4:a9:64:c6:9d:65:a5:1c:01:43:b7:5b:0a:6e:b6:0d:9d:
28:06:59:c5:c2:b1:e8:92:b2:11:d3:a3:4f:b9:b2:e2:0b:3c:
68:44:f4:e6:72:78:7c:5c:3f:d3:6c:89:2c:2b:e6:92:56:40:
12:cc:fb:0e:a3:ba:e9:d4:11:cc:ff:92:69:b8:65:e7:d5:b7:
3c:d3:aa:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZhkhOpElNhPVuqARspzciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl
OGVmMzEwHhcNMjUxMDI1MDQwMDIyWhcNMjUxMDI2MDQwMDIyWjAzMTEwLwYDVQQD
EyhmMzYxY2VhN2Q3ZDhlODUyOWY0ZmY4OTQwNGU2MGMyNjdjNjU4YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo/bPc5k/X2kMc27dR4FdIbznmt+
dPHJ06G37xsyHfF5eDE5ko0Gmu1d50pHKDLvGz2mAajF92qswQYWNkIuuiiUkD66
gkyHk+AfTpiqjaebZhxK5W5I8QVpVIOPxhCxFpJ2XLEuE0Ys1lVCsZJpevG4Y4UN
dUWLKoigkfChWckIdOdVqGpDFlElcngpZ7d5y+npyLf1tMr3mmr0WJo3SGwxd7nk
qQCZFw4S1f3WN2RC4wBCcubHx7fXii6hn/sjY/5hrxciGMdxxtQreE81Fo6tdGfh
JaxbshSlpSaj4SWm2bDjFsnuJVbJ1+/KpCVs+wZuGPdjuhEOqcolJQXyFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNhzqfX2OhSn0/4lATmDCZ8ZYoAMB8GA1UdIwQY
MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt
MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi
LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrkSLBU8
2TQAt07/1ohXwVOJRSMR/zRqnKviK3q56B+YlVNNf6pzJoEINmMMv6d/aLFD4WXb
iNie7vIe55YpaVDMqK3RI+k/FiXbNJlLBpT1/Mr7xgnZXJv4sWdLdrJPG3bx2w0M
62QkQM6y/gg+6PCP0wJs+xXrv/my/RcjqJulI4q5uj1yXqySCj95Gfeiruu6uYO3
GH5h0CZNpUNKX3ea+qxvv7CDkILjKu/1btOGKVED1OSpZMadZaUcAUO3Wwputg2d
KAZZxcKx6JKyEdOjT7my4gs8aET05nJ4fFw/02yJLCvmklZAEsz7DqO66dQRzP+S
abhl59W3PNOqVw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 09:00:15 2025 by rpki-client