
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: wvDiW9EB2poQKxkEva3E/iBmP+fMZ45yDj1K1K1W/Dg=
Subject key identifier: 1F:9B:13:6C:00:60:1E:E1:5F:7D:17:3F:4A:DF:E8:80:FA:F7:22:2D
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 0198733D882FDF4D8E2A3F94A05D69905A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 03AD
Signing time: Mon 04 Aug 2025 04:01:09 +0000
Manifest this update: Mon 04 Aug 2025 04:01:09 +0000
Manifest next update: Tue 05 Aug 2025 04:01:09 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: 1cGiNRZgL34lJhw8kqf4f/2fj1E6I5gRxSYppdXSVVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:88:2f:df:4d:8e:2a:3f:94:a0:5d:69:90:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Aug 4 04:01:09 2025 GMT
Not After : Aug 5 04:01:09 2025 GMT
Subject: CN=1f9b136c00601ee15f7d173f4adfe880faf7222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:21:d2:b4:bd:4b:2b:ad:19:73:f5:51:6d:
a7:52:a8:f3:d3:dc:95:94:44:4f:20:45:73:ca:1c:
a9:1a:fd:1a:f2:13:c2:fa:af:2f:11:44:18:a6:12:
b5:8b:e7:ba:d8:e8:7f:2e:ba:3a:49:2c:5c:51:20:
b2:1f:18:f2:e1:a2:a8:02:5a:d5:86:78:13:78:35:
42:75:6d:6b:63:0f:d5:a5:f2:ce:18:99:de:0b:49:
19:9f:6f:e1:dd:c5:42:14:ee:53:e1:a5:ea:2d:0b:
76:10:e1:0b:61:61:54:8c:dd:3d:8f:66:73:97:1c:
3f:a8:b8:e7:d7:9c:3e:9e:38:7d:40:f2:f6:2d:20:
3b:0f:75:0b:99:7d:2b:04:4e:d5:50:ed:c0:75:ae:
d0:fc:4d:c1:1d:0b:47:47:4c:0b:7e:5c:55:15:a0:
98:dc:d7:d6:b5:5b:5e:62:b2:53:27:aa:ec:3c:d5:
a0:a9:19:24:f6:7c:b0:ae:36:f5:85:2e:31:f8:9d:
1c:4f:d8:32:37:38:7f:7b:e1:57:b2:d2:31:0c:55:
0b:d8:a2:fe:f4:58:05:5d:90:1f:0e:70:6a:6f:4e:
d3:85:4b:fa:f1:cb:79:5c:0e:4d:35:9b:c7:16:de:
a1:16:d7:5c:84:9e:31:08:1c:64:ec:d4:76:c0:34:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9B:13:6C:00:60:1E:E1:5F:7D:17:3F:4A:DF:E8:80:FA:F7:22:2D
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7d:01:93:ed:e8:01:07:2c:05:a0:83:13:38:05:a2:6d:ca:
44:72:72:ef:d7:09:75:ca:ac:b2:0a:91:3e:01:3a:21:cc:91:
2e:ae:7e:f2:6d:fe:26:a7:f1:8d:d7:e0:d0:af:ca:c6:f0:9d:
35:99:1d:e9:b8:fb:b7:ff:9f:67:b0:b1:37:1c:29:a2:da:98:
10:8b:0e:38:47:ab:bd:eb:60:d0:18:30:32:83:12:fd:a4:c8:
52:d3:9b:81:d2:44:67:7b:e7:b5:a0:9c:2e:8a:95:f8:05:90:
62:b5:1d:fb:31:d5:6d:d2:16:1b:68:08:ae:50:b8:36:b8:16:
0e:f9:8a:8a:97:7a:f7:fc:f2:03:de:8e:67:8f:d8:b7:49:5a:
99:08:20:bc:56:95:5e:49:10:b2:c2:32:4d:d6:c8:48:61:c7:
81:3c:cd:42:e2:ca:7c:b6:bd:32:ed:57:87:62:e3:c5:83:3a:
2e:69:a4:2e:f4:0b:55:42:9e:4a:91:18:ae:a0:2e:81:06:59:
49:6b:8d:7e:91:69:e9:4f:38:2a:c4:ae:37:2c:1f:5a:15:1d:
62:9c:cd:b8:a4:e4:d8:75:c1:d9:80:65:7c:02:82:20:91:ec:
7c:aa:3f:3c:02:da:40:c1:52:ef:1a:91:b5:a6:9e:ed:39:bc:
0d:7b:85:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPYgv302OKj+UoF1pkFptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDI4ZjkwMTQyODNiMzQ5ZDE2Y2FmZGM5NGI3ZjVlZjE1
MzBlNGQwHhcNMjUwODA0MDQwMTA5WhcNMjUwODA1MDQwMTA5WjAzMTEwLwYDVQQD
EygxZjliMTM2YzAwNjAxZWUxNWY3ZDE3M2Y0YWRmZTg4MGZhZjcyMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVwh0rS9SyutGXP1UW2nUqjz09yV
lERPIEVzyhypGv0a8hPC+q8vEUQYphK1i+e62Oh/Lro6SSxcUSCyHxjy4aKoAlrV
hngTeDVCdW1rYw/VpfLOGJneC0kZn2/h3cVCFO5T4aXqLQt2EOELYWFUjN09j2Zz
lxw/qLjn15w+njh9QPL2LSA7D3ULmX0rBE7VUO3Ada7Q/E3BHQtHR0wLflxVFaCY
3NfWtVteYrJTJ6rsPNWgqRkk9nywrjb1hS4x+J0cT9gyNzh/e+FXstIxDFUL2KL+
9FgFXZAfDnBqb07ThUv68ct5XA5NNZvHFt6hFtdchJ4xCBxk7NR2wDRjQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+bE2wAYB7hX30XP0rf6ID69yItMB8GA1UdIwQY
MBaAFIUCj5AUKDs0nRbK/clLf17xUw5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEt
ODYzOWU1ZGE5N2U3LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lNzBmY2UtOTYxMi00MDQ3LTkyZTEtODYzOWU1ZGE5N2U3
LzEvaFFLUGtCUW9PelNkRnNyOXlVdF9YdkZURGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArn0Bk+3o
AQcsBaCDEzgFom3KRHJy79cJdcqssgqRPgE6IcyRLq5+8m3+Jqfxjdfg0K/KxvCd
NZkd6bj7t/+fZ7CxNxwpotqYEIsOOEervetg0BgwMoMS/aTIUtObgdJEZ3vntaCc
LoqV+AWQYrUd+zHVbdIWG2gIrlC4NrgWDvmKipd69/zyA96OZ4/Yt0lamQggvFaV
XkkQssIyTdbISGHHgTzNQuLKfLa9Mu1Xh2LjxYM6LmmkLvQLVUKeSpEYrqAugQZZ
SWuNfpFp6U84KsSuNywfWhUdYpzNuKTk2HXB2YBlfAKCIJHsfKo/PALaQMFS7xqR
taae7Tm8DXuF3g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:17 2025 by rpki-client