Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: EgHZlEvK8RIVVxZ2TDGgr6I+eTwT4Q1t1HMoxHmAUYg=
Subject key identifier: 3E:52:20:76:49:82:E3:E4:A8:51:69:92:2F:BC:FD:32:B9:48:CE:D9
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 0199FBEA89B15BAD389BAEFEB4EE39FD7354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 09ED
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: krIC7PJ6lSZSEspeZ0qH+TIr/PhbsZwPl74dH1aY3F4=)
2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:89:b1:5b:ad:38:9b:ae:fe:b4:ee:39:fd:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=3e5220764982e3e4a85169922fbcfd32b948ced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:c1:cf:e7:ec:47:60:00:e0:54:22:e5:0e:
6a:5e:d8:72:65:25:2b:64:b3:a3:e1:06:e2:62:df:
8e:24:2e:01:6a:d0:59:61:53:50:a7:d4:79:8b:8f:
02:0b:62:5f:24:a1:b2:a2:d4:12:1a:ba:da:ea:9c:
d3:16:e1:b6:b8:ff:dc:37:70:3c:9d:c5:6b:4a:6d:
e5:0c:42:81:67:f6:4b:24:3c:cb:ae:0c:b7:9b:f9:
34:9b:47:f3:4a:d9:25:9f:29:ef:78:07:35:7f:e8:
07:91:6c:99:fd:e2:54:80:9a:7e:cc:7e:d7:3e:a8:
9f:3d:61:8f:b7:e2:cc:fe:33:ea:3d:9a:78:4f:a8:
85:23:72:9b:39:98:c5:bc:dc:d5:01:ff:bc:75:c1:
15:62:5b:6b:02:bd:44:7a:90:c5:d9:63:26:bf:f1:
91:fd:9e:7c:f4:aa:fd:3e:4a:31:1c:fa:d5:b8:2c:
3a:2a:fe:bb:05:36:25:6c:ea:2b:b3:2f:c6:0b:dc:
90:50:31:be:2d:2e:ea:51:6c:da:e8:ba:34:0b:67:
9b:72:e7:3b:b8:b3:9a:0f:8e:20:45:8b:22:af:25:
d4:a1:f2:99:aa:b4:7a:de:14:3e:25:42:0d:4c:17:
a8:aa:ec:09:5a:3c:31:cf:c8:71:b0:e2:c4:4b:de:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:20:76:49:82:E3:E4:A8:51:69:92:2F:BC:FD:32:B9:48:CE:D9
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:b9:04:b5:18:c0:28:0f:0a:e7:d1:b5:b5:dd:37:ea:37:
6a:a3:e3:d5:12:14:c8:a2:0e:a5:60:00:e9:54:4c:e5:26:d2:
d2:13:49:3e:4b:7e:85:72:76:59:43:92:31:f7:01:b0:8a:66:
91:18:55:a9:32:d9:57:b1:54:7a:7b:6d:0d:07:7a:65:b1:40:
95:43:a9:ee:96:41:fe:b7:c9:82:01:8a:55:b4:79:98:6c:2e:
98:44:6c:9b:f8:61:1a:a9:29:0c:9a:e6:d4:cb:2b:c5:60:cd:
a1:79:88:6e:c6:98:bb:97:45:74:03:26:cd:bc:72:c8:76:91:
4c:a6:9f:0c:c0:bb:9d:f8:a7:e3:c0:91:12:3a:c2:3b:93:33:
dd:29:49:0f:69:e6:c4:84:49:1a:3b:c3:10:3d:1a:55:f0:aa:
8f:d0:eb:e4:94:de:cd:4b:de:5d:a6:50:c2:23:48:a9:f6:05:
d0:c3:63:e5:c9:1e:68:89:a4:57:b6:f9:d3:3d:4f:20:44:86:
a5:35:91:d7:61:b4:72:9b:80:11:68:6d:39:6f:05:fb:ff:17:
06:0d:00:1e:27:c5:86:e6:e7:4d:80:3c:51:4f:91:44:4a:2e:
83:77:9d:f1:15:60:3d:77:96:97:cd:79:18:33:24:19:74:46:
41:12:60:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76omxW604m67+tO45/XNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2E1YzRlYTQ1M2I0NmM4MWNiMTM2ZDkyYjkzMDliMTQ2
YzNlNDUwHhcNMjUxMDE5MTAwMTE1WhcNMjUxMDIwMTAwMTE1WjAzMTEwLwYDVQQD
EygzZTUyMjA3NjQ5ODJlM2U0YTg1MTY5OTIyZmJjZmQzMmI5NDhjZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBDBz+fsR2AA4FQi5Q5qXthyZSUr
ZLOj4QbiYt+OJC4BatBZYVNQp9R5i48CC2JfJKGyotQSGrra6pzTFuG2uP/cN3A8
ncVrSm3lDEKBZ/ZLJDzLrgy3m/k0m0fzStklnynveAc1f+gHkWyZ/eJUgJp+zH7X
PqifPWGPt+LM/jPqPZp4T6iFI3KbOZjFvNzVAf+8dcEVYltrAr1EepDF2WMmv/GR
/Z589Kr9PkoxHPrVuCw6Kv67BTYlbOorsy/GC9yQUDG+LS7qUWza6Lo0C2ebcuc7
uLOaD44gRYsiryXUofKZqrR63hQ+JUINTBeoquwJWjwxz8hxsOLES96HaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5SIHZJguPkqFFpki+8/TK5SM7ZMB8GA1UdIwQY
MBaAFJB6XE6kU7RsgcsTbZK5MJsUbD5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDIt
YjJhMmI4Yjg0N2I5LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDItYjJhMmI4Yjg0N2I5
LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMO5BLUY
wCgPCufRtbXdN+o3aqPj1RIUyKIOpWAA6VRM5SbS0hNJPkt+hXJ2WUOSMfcBsIpm
kRhVqTLZV7FUenttDQd6ZbFAlUOp7pZB/rfJggGKVbR5mGwumERsm/hhGqkpDJrm
1MsrxWDNoXmIbsaYu5dFdAMmzbxyyHaRTKafDMC7nfin48CREjrCO5Mz3SlJD2nm
xIRJGjvDED0aVfCqj9Dr5JTezUveXaZQwiNIqfYF0MNj5ckeaImkV7b50z1PIESG
pTWR12G0cpuAEWhtOW8F+/8XBg0AHifFhubnTYA8UU+RREoug3ed8RVgPXeWl815
GDMkGXRGQRJgwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:20 2025 by rpki-client