Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: kNFhkd7pv2Xj1MFm1a4Oloe3VhbyBo2ccdk54yStUVU=
Subject key identifier: 76:66:F9:3C:B7:8B:73:3C:92:BA:20:57:9F:5E:A6:5F:5C:50:2A:61
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 019A71B7F27B6170CF73B2717F83666D00AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 0830
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: tnUWRb263BIYbKDgR1jP+iBqi//0KAlXhyu/jhNbBNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f2:7b:61:70:cf:73:b2:71:7f:83:66:6d:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=7666f93cb78b733c92ba20579f5ea65f5c502a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:48:c4:17:e2:18:da:a7:50:34:5d:c3:27:
5c:67:d2:2b:be:a3:23:63:e8:a0:d2:45:28:d5:ff:
b6:5d:2b:8e:42:4c:69:e7:d5:3e:58:e2:ee:71:a2:
ef:85:2b:ab:6e:41:f4:68:b2:94:2e:cf:f5:2a:94:
b1:6a:e9:2c:6c:1a:12:2c:32:5c:8e:79:a4:1a:62:
2d:3c:5d:d5:ea:f4:d2:f8:67:25:9c:83:ea:8f:d0:
b9:70:ae:03:7e:f9:89:ea:96:89:71:d4:95:25:8c:
fc:73:88:d8:6c:b0:a8:82:37:6b:33:69:2b:33:66:
af:4b:09:10:7f:19:bd:b3:23:e3:88:e9:96:ed:57:
b7:1a:82:38:e8:44:17:c6:08:97:34:df:57:81:88:
40:95:01:65:89:f7:25:4a:05:39:95:1c:23:51:87:
a7:d3:98:7c:a5:99:18:a7:8e:c5:cc:a1:e7:5a:22:
7f:9e:77:6e:fb:eb:e8:6d:97:b0:4f:66:aa:16:e2:
1f:06:22:64:56:04:25:56:0c:77:07:d4:a9:33:73:
7c:bf:33:f5:4a:f5:0e:c6:4f:80:46:31:dd:60:ee:
da:99:4b:71:32:a2:41:be:19:d7:59:0d:19:a0:cf:
06:97:5e:21:79:5d:b1:63:10:bb:7f:ae:6f:e1:25:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:F9:3C:B7:8B:73:3C:92:BA:20:57:9F:5E:A6:5F:5C:50:2A:61
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:db:24:09:da:c8:39:31:0c:32:ee:ae:4e:72:34:62:f0:
9c:44:7f:d9:7f:7d:76:0a:ef:c2:16:75:b4:78:f8:99:45:d9:
92:2f:22:d8:25:48:19:9d:05:6d:78:4d:21:e1:43:98:02:a1:
56:87:18:03:b4:dc:7f:e8:5c:12:81:f0:d2:bd:24:a0:c6:55:
87:a9:43:43:48:0c:70:b2:dd:38:76:9a:81:95:fc:7b:50:2a:
18:68:ee:fe:49:b5:09:23:7e:a2:c7:10:3d:b9:12:7f:d6:7b:
15:cc:1a:05:d2:b3:4d:a8:8e:b2:aa:e4:9d:fa:81:29:7c:3e:
ed:8d:ce:c4:6a:1d:85:67:30:8b:70:07:0e:b6:d2:e7:c4:56:
5d:a9:3e:ec:a3:0f:3f:bd:da:28:81:76:64:be:0a:ef:0e:58:
33:69:e3:89:ff:e4:94:ec:d9:af:5b:84:45:89:be:3f:4d:15:
b4:24:ba:ac:63:63:4c:f0:6c:ba:17:11:7b:bb:18:85:ab:68:
e2:4f:e0:3a:75:b2:2e:e6:f0:b2:d0:8b:94:82:49:a1:07:03:
94:cf:27:55:93:94:d8:29:ad:65:ea:29:ca:9a:df:a4:e5:4a:
e0:ca:c5:28:06:37:de:6e:fd:ba:56:1f:12:84:59:fc:d6:1c:
64:b9:8a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt/J7YXDPc7Jxf4NmbQCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDQyNmI3NGU4Y2Y2ZmZkZWRiN2IwNjA0MTgwODMyYTg2
MjVmMzIwHhcNMjUxMTExMDcwMTExWhcNMjUxMTEyMDcwMTExWjAzMTEwLwYDVQQD
Eyg3NjY2ZjkzY2I3OGI3MzNjOTJiYTIwNTc5ZjVlYTY1ZjVjNTAyYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gRIxBfiGNqnUDRdwydcZ9IrvqMj
Y+ig0kUo1f+2XSuOQkxp59U+WOLucaLvhSurbkH0aLKULs/1KpSxauksbBoSLDJc
jnmkGmItPF3V6vTS+GclnIPqj9C5cK4DfvmJ6paJcdSVJYz8c4jYbLCogjdrM2kr
M2avSwkQfxm9syPjiOmW7Ve3GoI46EQXxgiXNN9XgYhAlQFlifclSgU5lRwjUYen
05h8pZkYp47FzKHnWiJ/nndu++vobZewT2aqFuIfBiJkVgQlVgx3B9SpM3N8vzP1
SvUOxk+ARjHdYO7amUtxMqJBvhnXWQ0ZoM8Gl14heV2xYxC7f65v4SVlaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZm+Ty3i3M8krogV59epl9cUCphMB8GA1UdIwQY
MBaAFB5EJrdOjPb/3tt7BgQYCDKoYl8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEt
YjQ3NDBhMjE1OGYwLzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81N2QwOGUtMWZiOC00ZmZjLThhNzEtYjQ3NDBhMjE1OGYw
LzEvSGtRbXQwNk05dl9lMjNzR0JCZ0lNcWhpWHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi67bJAna
yDkxDDLurk5yNGLwnER/2X99dgrvwhZ1tHj4mUXZki8i2CVIGZ0FbXhNIeFDmAKh
VocYA7Tcf+hcEoHw0r0koMZVh6lDQ0gMcLLdOHaagZX8e1AqGGju/km1CSN+oscQ
PbkSf9Z7FcwaBdKzTaiOsqrknfqBKXw+7Y3OxGodhWcwi3AHDrbS58RWXak+7KMP
P73aKIF2ZL4K7w5YM2njif/klOzZr1uERYm+P00VtCS6rGNjTPBsuhcRe7sYhato
4k/gOnWyLubwstCLlIJJoQcDlM8nVZOU2CmtZeopyprfpOVK4MrFKAY33m79ulYf
EoRZ/NYcZLmKHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client