Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: Y1lUUGvI2WeBOmzYagtSVVOaOq3iYuGcmuwJMi30tH4=
Subject key identifier: 88:9B:63:AB:35:33:43:23:65:CA:DB:5E:4E:45:B3:88:7F:48:F7:2F
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 0199FCC633CD5E482504005724118752F99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1331
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: ucHVCylRFI8AWl+BuV0yuF6CdBSBf71GIcQVOm8RfF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:33:cd:5e:48:25:04:00:57:24:11:87:52:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=889b63ab3533432365cadb5e4e45b3887f48f72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:d6:15:5e:48:e0:9e:e2:fb:2c:16:f1:8e:
9f:4e:93:a1:ba:2c:0a:60:fb:8c:58:19:58:f7:33:
d2:0a:db:6e:c2:a4:0f:05:45:d2:8c:55:55:6e:90:
d5:aa:c2:8d:98:54:41:5e:f3:c5:2e:c1:f2:01:64:
07:d0:30:b6:c9:1b:74:82:88:af:a7:41:37:13:7f:
91:c9:d4:a7:45:1c:a0:57:17:2a:9f:09:d2:04:4a:
e4:f7:71:1b:b5:94:1e:5e:d6:26:6d:b9:aa:7a:df:
e4:7c:9e:85:36:b7:78:d6:c1:cb:1c:2e:fc:8a:00:
74:06:58:e7:9c:72:e8:38:08:1a:f5:57:8d:01:7a:
56:46:db:a3:00:47:08:6a:e2:02:f3:2e:dc:5b:48:
ed:e5:54:8f:00:56:6c:eb:d4:aa:b5:49:8e:71:26:
1a:8c:5d:5b:90:b2:be:36:01:26:d3:fd:2c:a3:f2:
e8:c0:d6:48:82:f6:53:f8:97:73:95:56:fa:45:0a:
de:67:5c:46:81:62:38:fa:0e:ef:3b:b8:b1:25:69:
88:84:88:a8:3c:13:e8:30:02:55:5d:55:a0:ea:c6:
1e:71:8d:30:d0:e5:4c:0c:b0:2c:37:03:14:a4:64:
f0:e1:79:13:88:45:60:7f:35:98:64:45:24:37:90:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:63:AB:35:33:43:23:65:CA:DB:5E:4E:45:B3:88:7F:48:F7:2F
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:82:6b:31:c3:ac:48:95:f7:ef:e6:a7:93:15:6e:d3:79:
a7:a3:db:16:6e:78:d9:8b:e5:f2:a5:ac:ee:6d:9b:fe:32:ed:
8a:4e:92:5c:e9:31:9e:1d:99:1f:30:50:f4:6f:b5:ed:54:63:
61:b0:bb:66:f7:b3:34:a2:8c:fd:0f:be:33:af:47:97:85:b3:
4c:02:be:61:4a:86:e9:26:88:2a:9e:59:d0:9d:3f:70:7a:e8:
b7:0f:81:90:fb:25:2c:d9:56:d0:52:23:7e:d7:4e:01:a4:e6:
09:bd:75:19:69:92:96:1b:bd:25:6f:12:2b:ac:a2:04:49:64:
8c:bc:3c:75:fd:fc:5e:76:40:32:f1:db:03:e4:07:7d:d2:7d:
1f:36:98:42:5f:99:79:f5:ed:7c:4d:84:f9:8b:cd:5e:51:a5:
7a:a9:0c:12:ea:a7:10:6c:a4:50:5d:76:29:36:c9:bf:b3:3b:
54:a7:37:22:b6:44:71:29:77:2a:0e:9d:16:eb:7e:28:e1:bb:
eb:be:dd:8f:8b:3d:fb:21:02:58:cb:12:40:96:10:6e:77:75:
65:98:d1:ed:a1:62:32:53:70:d2:2e:bd:22:a6:6d:8a:60:cb:
b5:f8:3b:fa:b4:9e:b1:73:e0:62:8a:e0:6d:03:b4:73:63:4f:
d4:a9:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:01 2025 by rpki-client