Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
File: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft (raw, json)
Hash identifier: UEWaVjnz3tNxVRxA7R8G89sJmxgD1BuPi0OpkcpzQFM=
Subject key identifier: 27:CB:D2:C6:9F:86:67:F3:B2:BE:AD:79:10:D0:81:30:8A:25:8E:9E
Authority key identifier: 86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
Certificate issuer: /CN=8649aa4b328735536d27c168cdbf4ea177701dce
Certificate serial: 0197707572FC94A109B5BE4898315359BCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 22:00:34 +0000
Manifest this update: Sat 14 Jun 2025 22:00:34 +0000
Manifest next update: Sun 15 Jun 2025 22:00:34 +0000
Files and hashes: 1: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl (hash: ko1Q8wGTQ0lqJRd2oVK7ecOx13dbWX1JT6T7g1SWVoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:72:fc:94:a1:09:b5:be:48:98:31:53:59:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8649aa4b328735536d27c168cdbf4ea177701dce
Validity
Not Before: Jun 14 22:00:34 2025 GMT
Not After : Jun 15 22:00:34 2025 GMT
Subject: CN=27cbd2c69f8667f3b2bead7910d081308a258e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:16:fb:1b:f4:bd:69:5f:17:94:15:86:b4:
e4:1b:5d:74:04:01:ff:aa:37:2a:4c:cf:fa:3e:56:
b6:20:77:03:90:e9:69:0c:92:54:72:d6:84:3d:20:
e3:8b:73:9c:5a:2e:20:0d:52:ba:8b:4f:6a:a9:75:
b3:bf:5a:7b:7b:01:f5:35:2b:88:19:34:67:c0:a1:
78:1f:a1:49:1b:f5:ce:78:35:75:b1:1f:2c:d9:4f:
b4:e0:9e:56:0c:ae:9d:ba:5d:b2:38:06:72:81:4b:
ee:c4:6b:01:5e:17:53:18:75:bd:a5:65:5c:0c:9a:
3b:87:b3:26:18:c8:08:ea:ac:d1:58:aa:20:65:85:
93:38:4e:9d:52:93:54:0d:ba:39:40:59:28:af:07:
d1:da:4a:c5:01:d7:c0:01:40:d4:8d:79:52:fa:7b:
84:8d:4b:5d:16:07:ca:01:38:1c:ff:26:53:02:0e:
9a:4c:7d:4f:e6:2a:7b:87:7e:af:8f:41:11:ea:34:
6f:f4:4f:c9:8d:c4:9d:da:cc:c0:9e:b9:7b:9f:c6:
09:f8:ba:e5:96:24:3a:5c:37:31:44:98:cf:2c:b5:
c0:35:98:eb:3a:50:60:9f:aa:d7:f0:df:ef:60:c8:
8f:9a:c8:fd:20:58:f5:ef:67:76:d7:77:8f:23:08:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CB:D2:C6:9F:86:67:F3:B2:BE:AD:79:10:D0:81:30:8A:25:8E:9E
X509v3 Authority Key Identifier:
keyid:86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:b0:a7:ee:16:b0:5a:55:b6:f7:55:33:10:c5:3c:f8:d7:
46:4e:cd:98:d6:b8:31:53:01:56:33:9e:fa:6c:4e:6b:20:cc:
44:5a:6e:23:25:e6:4e:c8:b6:25:07:e8:09:42:de:21:88:f1:
a5:5f:82:fc:0b:e4:28:03:b6:df:47:84:aa:32:d5:41:32:f4:
61:38:62:1f:f9:04:7b:97:5d:c9:b9:d3:2d:c7:e4:e4:c1:72:
9e:8f:a1:06:18:36:41:cd:a1:9a:fb:11:fa:6b:d4:80:2f:f6:
59:66:86:ac:63:47:f2:f4:b6:b7:11:a1:8b:a0:25:94:42:a0:
23:97:16:b9:33:cc:6a:6a:b8:ce:f8:b1:be:94:1a:54:f4:da:
6b:cc:2f:8f:07:e3:ec:9e:bd:82:7a:e0:47:9c:93:e3:fd:0e:
b4:e3:eb:fb:fe:6d:ce:fa:74:16:0f:be:40:6a:0d:46:3e:59:
67:92:db:98:6a:3a:88:91:74:70:4d:ee:34:51:71:45:94:4e:
5c:44:a9:48:33:46:08:0e:d1:3d:12:9a:77:d7:e7:72:ce:6d:
5d:e4:aa:35:b0:02:5f:0b:1d:79:0c:96:87:f2:1b:1e:9f:51:
be:42:c2:53:27:60:15:e2:f6:c0:96:b7:b1:c0:fa:3d:f0:eb:
24:a3:93:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdXL8lKEJtb5ImDFTWbzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDlhYTRiMzI4NzM1NTM2ZDI3YzE2OGNkYmY0ZWExNzc3
MDFkY2UwHhcNMjUwNjE0MjIwMDM0WhcNMjUwNjE1MjIwMDM0WjAzMTEwLwYDVQQD
EygyN2NiZDJjNjlmODY2N2YzYjJiZWFkNzkxMGQwODEzMDhhMjU4ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRYW+xv0vWlfF5QVhrTkG110BAH/
qjcqTM/6Pla2IHcDkOlpDJJUctaEPSDji3OcWi4gDVK6i09qqXWzv1p7ewH1NSuI
GTRnwKF4H6FJG/XOeDV1sR8s2U+04J5WDK6dul2yOAZygUvuxGsBXhdTGHW9pWVc
DJo7h7MmGMgI6qzRWKogZYWTOE6dUpNUDbo5QFkorwfR2krFAdfAAUDUjXlS+nuE
jUtdFgfKATgc/yZTAg6aTH1P5ip7h36vj0ER6jRv9E/JjcSd2szAnrl7n8YJ+Lrl
liQ6XDcxRJjPLLXANZjrOlBgn6rX8N/vYMiPmsj9IFj172d213ePIwiBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfL0safhmfzsr6teRDQgTCKJY6eMB8GA1UdIwQY
MBaAFIZJqksyhzVTbSfBaM2/TqF3cB3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jNGQ0MWYtNjBjZC00Y2JiLWIyNTMt
MTlmMWRhYjJkMWI0LzEvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jNGQ0MWYtNjBjZC00Y2JiLWIyNTMtMTlmMWRhYjJkMWI0
LzEvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS6wp+4W
sFpVtvdVMxDFPPjXRk7NmNa4MVMBVjOe+mxOayDMRFpuIyXmTsi2JQfoCULeIYjx
pV+C/AvkKAO230eEqjLVQTL0YThiH/kEe5ddybnTLcfk5MFyno+hBhg2Qc2hmvsR
+mvUgC/2WWaGrGNH8vS2txGhi6AllEKgI5cWuTPMamq4zvixvpQaVPTaa8wvjwfj
7J69gnrgR5yT4/0OtOPr+/5tzvp0Fg++QGoNRj5ZZ5LbmGo6iJF0cE3uNFFxRZRO
XESpSDNGCA7RPRKad9fncs5tXeSqNbACXwsdeQyWh/IbHp9RvkLCUydgFeL2wJa3
scD6PfDrJKOTHw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:13:35 2025 by rpki-client