Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: ugD8CEyAMpgoSbyM7UcNcyEdHuCEo8cD9JV2lA+6Zcs=
Subject key identifier: 81:D4:28:61:1C:31:D3:9F:69:C3:AB:3A:8D:A7:74:18:A7:3D:47:40
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 019A5451D80DA9CDAF76E58E8163DCAE55BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 14:00:41 +0000
Manifest this update: Wed 05 Nov 2025 14:00:41 +0000
Manifest next update: Thu 06 Nov 2025 14:00:41 +0000
Files and hashes: 1: XPrFj5zrogqrQA0ZGMw9Cj_3tIM.roa (hash: y5bDj30kHbVlnej3Qo9ZyWbBqUGtip3DeFT5c1pzf8I=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: DTBkKR3Kh5cS19rmZmdyjXC4cxQxOA6fHwZL6PmHeTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:d8:0d:a9:cd:af:76:e5:8e:81:63:dc:ae:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Nov 5 14:00:41 2025 GMT
Not After : Nov 6 14:00:41 2025 GMT
Subject: CN=81d428611c31d39f69c3ab3a8da77418a73d4740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:2a:ea:03:11:ba:dd:bd:11:43:fc:95:31:
ce:03:e8:3e:de:c7:56:1c:83:3c:64:5b:37:6c:36:
ee:46:0f:11:3f:70:0d:20:47:31:35:2e:65:0d:6a:
38:3b:28:4e:63:21:28:01:b5:ab:ea:88:5f:2f:f8:
06:98:1a:ae:09:88:d3:85:4a:42:03:37:7a:ad:9d:
97:0e:30:e1:8c:55:5e:03:17:f5:76:70:c8:98:79:
5c:6d:66:16:ad:85:93:92:82:9c:ee:25:65:64:f8:
e1:3e:3c:a9:05:26:9d:fe:43:35:41:48:2f:1b:9d:
38:5e:de:5a:f0:b5:52:a6:37:0d:31:54:be:c2:9c:
65:2a:a1:e7:a2:89:6f:2f:48:c2:94:33:21:b4:32:
59:33:68:55:ec:00:2a:b9:e8:fd:32:57:b8:0b:fe:
66:bf:49:6e:a5:86:f7:aa:5e:60:c7:63:ab:3a:a9:
72:00:ec:27:76:61:f1:c2:16:e0:2a:d5:ac:0f:b1:
f1:b6:cf:f8:53:86:96:52:3c:93:47:b2:6a:de:ff:
0f:8a:87:63:e6:81:00:c1:6b:83:45:02:2f:5f:bb:
90:53:c2:41:f4:24:d2:8e:3e:a9:90:d4:d5:f8:fd:
c3:00:2c:79:55:fa:30:4e:f5:47:59:47:ff:f8:ba:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:28:61:1C:31:D3:9F:69:C3:AB:3A:8D:A7:74:18:A7:3D:47:40
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:b4:7d:28:83:f5:d9:fa:15:21:81:0e:e2:7b:e5:00:6d:
1e:2f:2d:a0:d3:3c:f4:ea:f6:be:4b:03:41:b6:0b:84:e9:43:
ea:45:c6:87:5d:fe:d7:72:e3:ce:2e:57:36:7a:60:62:0d:34:
f2:dd:d8:02:7c:35:0d:ba:ca:fa:7e:9c:82:bd:53:07:45:f3:
bb:d2:27:61:e8:da:84:56:ea:7e:ff:4c:15:63:39:8c:96:03:
ad:13:0c:6d:dd:f1:f4:ce:2a:ba:ac:39:d9:1f:64:6f:4f:4d:
7e:72:52:56:cb:1f:14:c6:14:f4:07:68:f8:b5:9f:8c:b7:eb:
0b:bb:f8:43:ec:d0:c2:e2:f8:76:fb:a5:05:34:b3:16:92:04:
60:1c:b0:fe:63:3d:70:6d:16:3a:36:34:c8:49:f7:d3:59:64:
6d:c1:9d:bf:db:c8:42:4a:15:b5:a5:73:60:c9:fa:7e:41:c7:
1c:7b:3c:61:d1:88:0a:ca:fd:35:1c:2b:09:6c:06:cf:55:03:
e2:ac:6e:fe:b5:e3:aa:42:ca:6f:e5:81:c6:47:aa:e8:7b:e2:
27:10:b7:70:a9:de:df:27:68:99:bd:f4:1f:c0:77:5b:4b:20:
d6:65:d7:08:ee:17:bc:83:04:c9:7b:2b:6c:d6:6d:d7:76:6d:
fa:68:8e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUdgNqc2vduWOgWPcrlW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh
NzJlNWMwHhcNMjUxMTA1MTQwMDQxWhcNMjUxMTA2MTQwMDQxWjAzMTEwLwYDVQQD
Eyg4MWQ0Mjg2MTFjMzFkMzlmNjljM2FiM2E4ZGE3NzQxOGE3M2Q0NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRIq6gMRut29EUP8lTHOA+g+3sdW
HIM8ZFs3bDbuRg8RP3ANIEcxNS5lDWo4OyhOYyEoAbWr6ohfL/gGmBquCYjThUpC
Azd6rZ2XDjDhjFVeAxf1dnDImHlcbWYWrYWTkoKc7iVlZPjhPjypBSad/kM1QUgv
G504Xt5a8LVSpjcNMVS+wpxlKqHnoolvL0jClDMhtDJZM2hV7AAquej9Mle4C/5m
v0lupYb3ql5gx2OrOqlyAOwndmHxwhbgKtWsD7Hxts/4U4aWUjyTR7Jq3v8Piodj
5oEAwWuDRQIvX7uQU8JB9CTSjj6pkNTV+P3DACx5VfowTvVHWUf/+Lr8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHUKGEcMdOfacOrOo2ndBinPUdAMB8GA1UdIwQY
MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct
M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk
LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkK0fSiD
9dn6FSGBDuJ75QBtHi8toNM89Or2vksDQbYLhOlD6kXGh13+13Ljzi5XNnpgYg00
8t3YAnw1DbrK+n6cgr1TB0Xzu9InYejahFbqfv9MFWM5jJYDrRMMbd3x9M4quqw5
2R9kb09NfnJSVssfFMYU9Ado+LWfjLfrC7v4Q+zQwuL4dvulBTSzFpIEYByw/mM9
cG0WOjY0yEn301lkbcGdv9vIQkoVtaVzYMn6fkHHHHs8YdGICsr9NRwrCWwGz1UD
4qxu/rXjqkLKb+WBxkeq6HviJxC3cKne3ydomb30H8B3W0sg1mXXCO4XvIMEyXsr
bNZt13Zt+miOOw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:29 2025 by rpki-client