Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
File: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft (raw, json)
Hash identifier: 7qb+LFcwCvbS0E96dzyWMuNfQWn10zX5chT7zvOpfRk=
Subject key identifier: 66:1E:6E:4E:94:B0:56:55:BD:E9:3C:9C:5D:98:BE:BD:ED:70:30:D0
Authority key identifier: 86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
Certificate issuer: /CN=8649aa4b328735536d27c168cdbf4ea177701dce
Certificate serial: 019A522C00E7901BFBB178D96DD74995EFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 04:00:06 +0000
Manifest this update: Wed 05 Nov 2025 04:00:06 +0000
Manifest next update: Thu 06 Nov 2025 04:00:06 +0000
Files and hashes: 1: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl (hash: OFGVV7dh3f4Vg57HaNrzoSkb3M0EqWtkGKZNzFc2fj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:00:e7:90:1b:fb:b1:78:d9:6d:d7:49:95:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8649aa4b328735536d27c168cdbf4ea177701dce
Validity
Not Before: Nov 5 04:00:06 2025 GMT
Not After : Nov 6 04:00:06 2025 GMT
Subject: CN=661e6e4e94b05655bde93c9c5d98bebded7030d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:de:76:83:c8:bf:2d:7c:5f:6e:cc:67:05:
89:5d:37:c6:a9:7c:1f:9b:0d:31:a2:b9:fd:25:f5:
eb:eb:d9:ff:d1:32:23:2b:76:3a:6b:25:ea:60:91:
29:f6:b5:9d:82:c2:fa:5c:6a:24:f0:ed:88:1a:90:
30:b5:47:76:cb:75:0d:8e:2c:91:bb:15:7d:95:51:
d5:06:98:85:82:e0:6e:23:e3:e9:74:81:8d:b7:8b:
74:09:a8:5f:e4:29:a5:36:1f:52:c4:59:4a:27:2e:
92:7e:d8:1f:34:e4:2a:cb:03:6d:4a:46:8f:0d:ea:
ce:e1:2c:50:fb:eb:75:6f:1c:cb:ec:f1:6d:bf:38:
ed:d1:35:13:d5:90:f8:cf:10:b9:5f:15:fc:e0:99:
37:0b:49:5d:1c:66:fc:ac:56:27:0d:01:e3:05:d2:
77:18:55:13:56:da:14:df:33:e5:98:1b:8d:6e:dd:
59:cf:0d:00:16:68:a6:04:7d:68:fc:87:59:0b:94:
7d:21:8b:56:1b:d2:9b:4c:d2:be:13:06:64:3a:5b:
8f:76:0b:81:ca:03:de:ca:5d:54:cf:9b:10:df:4a:
5e:f7:51:4f:8d:4f:1b:fc:77:23:c6:3e:0d:77:29:
cc:f1:8b:11:75:26:7d:38:15:72:54:4f:f2:64:4a:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:6E:4E:94:B0:56:55:BD:E9:3C:9C:5D:98:BE:BD:ED:70:30:D0
X509v3 Authority Key Identifier:
keyid:86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:69:23:b0:f2:a5:76:09:0e:ea:c0:00:e2:57:42:ba:9d:
e0:7e:9c:5a:2d:16:39:7c:97:7b:6d:93:28:93:9f:33:32:bb:
77:a0:16:ef:d4:d0:20:36:3c:cc:5d:08:e9:48:67:26:e7:51:
cd:a1:23:83:61:b6:2b:73:5f:3a:c4:40:97:9a:c8:5a:5d:83:
39:87:95:58:8d:b0:22:96:87:3a:21:16:ed:50:a8:de:64:0a:
66:c8:00:dd:9a:a0:76:ca:ff:34:f9:25:63:37:b8:a8:e2:49:
2b:77:ad:48:84:0b:25:92:d2:6a:df:73:b6:7e:e1:b4:b7:09:
bb:40:ec:fa:f7:01:0b:fd:db:6a:19:9b:8c:c3:2d:ab:d2:21:
6d:b2:f9:6e:48:7a:8d:23:e1:9d:6b:0d:bc:07:92:c8:2d:d4:
35:34:d5:05:02:96:fe:6d:f3:30:c0:81:89:f5:5e:b9:64:08:
ed:88:5a:35:65:ee:37:bf:5b:4d:2b:c4:2e:97:4f:e5:56:44:
aa:af:1c:b7:f9:bc:df:e8:f0:b4:b3:eb:2d:67:c1:21:ae:95:
02:4e:32:24:57:3b:6e:5c:16:55:44:16:d2:a7:b8:e7:c5:29:
67:f8:c6:53:b7:35:3a:3f:a9:3c:a0:24:dd:a1:49:c8:89:80:
a9:3e:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:37 2025 by rpki-client