Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: RU4UeLLD2f8U/gfpxvSlQ6XY4MTRly4KByPJlnwsVYQ=
Subject key identifier: 13:B5:4D:9A:F1:6C:C8:CC:0A:EE:75:5B:2E:FE:51:62:B6:BE:02:83
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 019922FA0C3C17F07A10AC88FF363DA9A570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 0408
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: lFu5KKw57d8CjzTiCK/e8rWxHD9eX5S4TX2f5DkGaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0c:3c:17:f0:7a:10:ac:88:ff:36:3d:a9:a5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=13b54d9af16cc8cc0aee755b2efe5162b6be0283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:23:3a:4b:05:15:ff:2e:6b:2a:76:18:b8:
16:ae:5d:c0:01:07:f9:1d:5b:c1:e1:40:54:ff:e6:
1a:44:b8:a8:de:f2:e7:58:23:2a:a5:83:28:4e:b0:
1d:8c:e2:d4:e9:c5:fc:89:28:f1:61:13:f3:9a:2b:
e8:07:91:ee:98:44:97:30:ac:bd:72:eb:a2:fb:61:
92:3c:01:f1:0c:cf:db:15:55:94:51:8e:9f:bf:8b:
0a:bc:6e:f3:1d:29:c4:12:7a:2f:cc:c2:6a:7d:2e:
3e:cb:85:cd:88:29:75:42:25:d7:74:aa:aa:b1:a9:
fe:64:79:12:16:5b:e9:a4:c6:be:11:68:80:87:6b:
e0:f0:5e:c4:65:c8:5a:6c:b9:07:88:5d:90:e3:ae:
c8:47:29:d0:01:eb:29:87:63:44:8f:51:9a:ba:aa:
0c:bb:df:4d:fd:c0:c3:2d:1d:a3:6a:cc:e1:f3:a9:
2b:24:ff:16:82:3b:8c:99:00:94:44:11:68:d2:33:
30:5f:d8:05:bf:ef:6f:8d:70:9c:c3:a5:4c:cd:de:
db:01:5b:e0:19:e1:3b:d7:56:24:01:cf:b8:75:97:
12:98:70:5d:6f:16:fb:70:74:56:f4:03:86:b0:a3:
35:a4:58:7a:c7:e7:70:05:c7:7d:7e:61:c2:52:a5:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:4D:9A:F1:6C:C8:CC:0A:EE:75:5B:2E:FE:51:62:B6:BE:02:83
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:59:28:10:1f:1b:10:4a:c7:65:ba:8e:5a:23:82:5d:20:
3b:cc:a1:6d:f4:fc:22:ec:a9:c7:6b:2d:eb:20:83:04:42:60:
f3:f7:9a:fc:58:04:a6:e9:2c:79:3f:af:78:9b:95:41:d3:5c:
bd:0d:8a:3e:3f:4c:0d:21:08:ad:2a:a5:3c:a7:ae:fd:eb:2c:
f3:ec:c4:1a:71:41:be:54:11:8c:97:dc:fd:8d:c2:1a:08:3a:
77:2c:cf:02:17:f4:f0:3e:00:ae:6c:56:0b:71:de:d9:66:78:
80:09:96:73:4f:dc:80:bf:f7:7d:69:0e:e1:53:83:7f:21:39:
ec:18:87:9a:b6:27:1a:e1:16:b7:35:7a:0a:a2:56:83:8e:06:
9b:29:fa:2b:62:a0:35:97:43:66:d1:96:d5:db:a7:8e:4d:04:
3e:07:1a:f4:4f:c2:3b:a7:5f:d5:9e:58:de:07:04:4c:14:5f:
a7:3e:39:ba:3a:8b:63:f3:be:28:f0:97:e7:87:af:86:e5:e9:
a1:56:fc:cd:29:15:06:b0:52:d6:29:7d:fa:18:d9:72:3f:bd:
9b:b8:13:81:e6:b1:f7:39:b5:4d:25:cc:dc:13:0e:2d:5e:3b:
8b:cb:82:17:d4:64:a8:17:64:dc:b4:4a:49:aa:3f:16:09:69:
81:f8:f6:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+gw8F/B6EKyI/zY9qaVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDI4ZjkwMTQyODNiMzQ5ZDE2Y2FmZGM5NGI3ZjVlZjE1
MzBlNGQwHhcNMjUwOTA3MDcwMDM2WhcNMjUwOTA4MDcwMDM2WjAzMTEwLwYDVQQD
EygxM2I1NGQ5YWYxNmNjOGNjMGFlZTc1NWIyZWZlNTE2MmI2YmUwMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYjOksFFf8uayp2GLgWrl3AAQf5
HVvB4UBU/+YaRLio3vLnWCMqpYMoTrAdjOLU6cX8iSjxYRPzmivoB5HumESXMKy9
cuui+2GSPAHxDM/bFVWUUY6fv4sKvG7zHSnEEnovzMJqfS4+y4XNiCl1QiXXdKqq
san+ZHkSFlvppMa+EWiAh2vg8F7EZchabLkHiF2Q467IRynQAesph2NEj1GauqoM
u99N/cDDLR2jaszh86krJP8WgjuMmQCURBFo0jMwX9gFv+9vjXCcw6VMzd7bAVvg
GeE711YkAc+4dZcSmHBdbxb7cHRW9AOGsKM1pFh6x+dwBcd9fmHCUqUxdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBO1TZrxbMjMCu51Wy7+UWK2vgKDMB8GA1UdIwQY
MBaAFIUCj5AUKDs0nRbK/clLf17xUw5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEt
ODYzOWU1ZGE5N2U3LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEtODYzOWU1ZGE5N2U3
LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALghZKBAf
GxBKx2W6jlojgl0gO8yhbfT8Iuypx2st6yCDBEJg8/ea/FgEpukseT+veJuVQdNc
vQ2KPj9MDSEIrSqlPKeu/ess8+zEGnFBvlQRjJfc/Y3CGgg6dyzPAhf08D4ArmxW
C3He2WZ4gAmWc0/cgL/3fWkO4VODfyE57BiHmrYnGuEWtzV6CqJWg44Gmyn6K2Kg
NZdDZtGW1dunjk0EPgca9E/CO6df1Z5Y3gcETBRfpz45ujqLY/O+KPCX54evhuXp
oVb8zSkVBrBS1il9+hjZcj+9m7gTgeax9zm1TSXM3BMOLV47i8uCF9RkqBdk3LRK
Sao/Fglpgfj2pw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:19 2025 by rpki-client