Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File: kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier: LfifFE2e2G9qRA3zGy+aeGWlHT7de/YvpedWvbmUhqc=
Subject key identifier: 67:86:00:19:86:82:D9:A4:2F:57:50:BD:8B:F0:45:32:86:C2:4E:05
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer: /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial: 019892C8E5056B541E461684CCFEB95F6DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number: 103C
Signing time: Sun 10 Aug 2025 07:01:35 +0000
Manifest this update: Sun 10 Aug 2025 07:01:35 +0000
Manifest next update: Mon 11 Aug 2025 07:01:35 +0000
Files and hashes: 1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: 4I5CgUTdbvjNhOFGegcGjdl/cBWDJeziolSwGjBEdRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:e5:05:6b:54:1e:46:16:84:cc:fe:b9:5f:6d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
Validity
Not Before: Aug 10 07:01:35 2025 GMT
Not After : Aug 11 07:01:35 2025 GMT
Subject: CN=678600198682d9a42f5750bd8bf0453286c24e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:bd:64:43:ef:98:10:3e:4e:fb:03:f1:b1:
30:b0:49:91:7f:00:74:6c:ee:9c:73:56:a1:8e:5a:
1f:08:97:76:9b:6d:4c:c3:48:e8:fa:7a:ca:72:33:
25:1d:94:ee:7b:14:4a:1c:b9:9f:e0:8b:1c:0d:4b:
54:bf:f8:74:4c:90:58:58:d6:e7:b1:1c:a3:65:ec:
f9:58:e3:9a:00:0c:bb:72:db:9f:c0:33:17:a1:70:
72:e8:81:68:46:a5:9d:66:72:f0:4b:d6:a5:69:4a:
f3:bb:66:4e:7d:e7:f9:62:c8:cd:23:89:90:c6:11:
f7:88:56:af:bc:39:0e:f1:95:bb:43:a3:ab:be:dc:
c9:c2:5f:80:ff:3b:b9:07:f6:e8:67:11:ed:c7:af:
a0:0a:d2:fb:c4:29:44:6a:16:84:cf:ed:cf:f9:c8:
09:10:40:ca:00:fe:f8:cd:52:8b:db:06:fe:d1:15:
f0:dc:9b:a1:48:64:db:d8:8d:42:fc:21:85:f3:a9:
b0:28:e7:8d:cb:50:7c:90:d7:41:03:b4:60:3b:03:
78:b0:a4:29:6d:3f:26:b5:2f:1a:32:4f:6f:a7:40:
29:c1:44:42:67:78:ef:24:b2:d3:89:a9:0b:b9:33:
ca:9c:bb:a8:3f:13:c7:53:31:77:37:3e:19:cc:61:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:00:19:86:82:D9:A4:2F:57:50:BD:8B:F0:45:32:86:C2:4E:05
X509v3 Authority Key Identifier:
keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:e2:f4:2a:40:5f:07:ef:c9:4b:d1:ed:89:76:16:4c:e4:
25:32:1d:fe:01:20:5a:53:18:96:2e:97:b7:04:98:e7:70:47:
9e:e9:d7:72:17:27:1f:b8:65:51:16:5f:02:4b:8f:4e:bc:0b:
d7:93:d5:fa:51:8b:b6:88:b2:ed:11:0e:42:ed:ce:0d:75:35:
de:c5:a1:7d:60:63:a5:07:0d:6e:05:96:84:c6:75:6e:2c:24:
a5:fa:9f:68:b0:ef:8e:89:08:15:5d:13:fb:86:b5:84:a0:00:
88:12:0a:46:4c:ae:1d:20:1d:2d:64:3e:36:22:7d:76:7e:2b:
c9:02:aa:d5:d7:90:d9:fd:73:97:aa:35:e9:51:a0:03:68:b6:
a5:e2:20:f1:25:a6:27:c4:8a:2d:8b:9b:35:59:f1:ec:4b:5a:
12:dc:e7:e6:47:10:11:bb:24:53:99:29:ec:46:ba:66:92:7c:
8f:51:90:28:70:0d:3e:da:81:c3:2f:02:bd:b0:a9:61:5c:4c:
1e:b0:5a:dc:c3:1f:68:47:b8:16:a9:fb:02:e9:fd:d6:15:1a:
b2:d6:e6:d1:b8:2d:16:1d:9f:60:97:bd:30:88:fd:b8:bf:6e:
a5:02:06:f9:5d:3d:c6:27:61:93:d8:b2:14:b6:47:84:30:41:
c4:63:fe:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyOUFa1QeRhaEzP65X23/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2E0ZDEyOTI0YjUzNTdlMzAyNjdhZmUzYzVjYzczNjQy
NDExNTgwHhcNMjUwODEwMDcwMTM1WhcNMjUwODExMDcwMTM1WjAzMTEwLwYDVQQD
Eyg2Nzg2MDAxOTg2ODJkOWE0MmY1NzUwYmQ4YmYwNDUzMjg2YzI0ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCW9ZEPvmBA+TvsD8bEwsEmRfwB0
bO6cc1ahjlofCJd2m21Mw0jo+nrKcjMlHZTuexRKHLmf4IscDUtUv/h0TJBYWNbn
sRyjZez5WOOaAAy7ctufwDMXoXBy6IFoRqWdZnLwS9alaUrzu2ZOfef5YsjNI4mQ
xhH3iFavvDkO8ZW7Q6OrvtzJwl+A/zu5B/boZxHtx6+gCtL7xClEahaEz+3P+cgJ
EEDKAP74zVKL2wb+0RXw3JuhSGTb2I1C/CGF86mwKOeNy1B8kNdBA7RgOwN4sKQp
bT8mtS8aMk9vp0ApwURCZ3jvJLLTiakLuTPKnLuoPxPHUzF3Nz4ZzGF4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeGABmGgtmkL1dQvYvwRTKGwk4FMB8GA1UdIwQY
MBaAFJB6TRKSS1NX4wJnr+PFzHNkJBFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEt
NjIxYTJiYjQwYzY2LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZWY0NGYtY2JkZi00MTIwLTg0ZjEtNjIxYTJiYjQwYzY2
LzEva0hwTkVwSkxVMWZqQW1ldjQ4WE1jMlFrRVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXvi9CpA
XwfvyUvR7Yl2FkzkJTId/gEgWlMYli6XtwSY53BHnunXchcnH7hlURZfAkuPTrwL
15PV+lGLtoiy7REOQu3ODXU13sWhfWBjpQcNbgWWhMZ1biwkpfqfaLDvjokIFV0T
+4a1hKAAiBIKRkyuHSAdLWQ+NiJ9dn4ryQKq1deQ2f1zl6o16VGgA2i2peIg8SWm
J8SKLYubNVnx7EtaEtzn5kcQEbskU5kp7Ea6ZpJ8j1GQKHANPtqBwy8CvbCpYVxM
HrBa3MMfaEe4Fqn7Aun91hUastbm0bgtFh2fYJe9MIj9uL9upQIG+V09xidhk9iy
FLZHhDBBxGP+Iw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:14 2025 by rpki-client