Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: /wfOF27rnvTEi1XL5zSOR77KzV4cGX7xRixXrt31EiE=
Subject key identifier: 9D:3D:E6:D8:FD:53:46:19:F0:35:66:AC:CD:CA:F4:C7:45:A1:E4:AE
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0199FE470F77470CCF2D8976DE6EE9949518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 102C
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: N3dVrwD+wfJ/+x3V2SutmPvRR55eW3ZJZRCuxhctlsI=)
3: pjkORl4e_icMku-dYwyxSK4dpvQ.roa (hash: jYn2CwjUvaCvvwmPswUUWp4ZR7edzl8SVBDQU+3D+k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0f:77:47:0c:cf:2d:89:76:de:6e:e9:94:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=9d3de6d8fd534619f03566accdcaf4c745a1e4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:d7:a6:6a:f3:af:67:91:c4:d1:6a:4a:fa:
72:e3:1d:3c:5d:25:15:31:b3:a7:7e:81:d1:bb:de:
aa:2b:93:ea:cf:e5:f9:54:46:ab:6d:45:47:a3:17:
eb:42:0b:43:91:3f:2f:e6:50:85:c9:30:ba:41:d9:
e0:7b:c2:62:26:6d:ab:68:27:39:a7:17:75:12:7e:
03:a9:ab:e0:10:9b:20:fe:8f:60:d4:38:cc:14:a4:
e3:59:6d:8e:0d:03:e0:20:76:d6:6c:82:9e:08:62:
c9:41:8f:b7:ab:cd:6f:85:e5:0d:ec:50:9f:40:c3:
33:fc:0c:92:01:e7:65:01:93:c0:49:7c:32:82:d2:
57:59:24:3c:22:2c:4f:93:09:39:38:2b:64:af:a0:
7d:68:71:69:d7:33:a7:95:9f:aa:1f:68:fc:47:fc:
04:9f:74:6f:8b:e2:57:4c:46:b3:f8:a2:62:1c:5b:
41:44:98:a0:b9:6a:80:53:32:52:c2:68:25:0c:ca:
e2:9c:da:19:84:4f:31:27:3e:95:55:fa:ac:52:fb:
43:39:9d:5f:4a:30:13:bc:34:29:2f:0a:5c:5e:e4:
f1:64:33:b3:9d:f5:26:cc:24:21:56:b5:91:c4:d5:
d5:30:70:41:f1:5a:ff:c6:c5:b1:c0:c7:c4:c9:cc:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:E6:D8:FD:53:46:19:F0:35:66:AC:CD:CA:F4:C7:45:A1:E4:AE
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:8c:51:08:cf:0c:b5:3f:55:e6:26:ab:86:c1:f3:c7:db:
9b:a4:0b:28:ae:f8:cd:6a:69:d8:02:41:81:61:7f:91:b7:20:
67:6e:f6:71:47:fd:ff:ba:ba:4d:d6:54:b4:6b:71:80:1e:20:
51:b9:ba:d2:33:02:c1:c4:1c:93:f7:7f:88:e8:75:0d:91:92:
e1:ed:82:b6:38:d6:e3:9b:51:5d:98:ac:6e:9f:88:77:28:a7:
50:61:4f:0b:11:aa:e4:e2:d4:b6:50:bf:49:1d:3d:62:41:bb:
c3:db:50:ac:d1:90:bc:7a:64:2b:ce:c6:b6:95:82:12:3b:0f:
af:1f:da:cd:99:8e:cd:21:58:54:14:48:3a:a7:73:ce:d2:35:
30:53:f9:8d:2b:bc:c2:51:ce:a7:b0:40:80:ce:74:8f:3f:b4:
da:56:ee:97:3e:1e:7a:ff:50:d6:50:e0:3a:77:85:d4:0c:b4:
4a:d2:8f:81:89:5c:5a:7a:01:46:94:82:7f:75:6d:26:09:31:
fa:66:cf:d3:a5:83:ed:c5:11:79:66:46:9e:fa:91:e9:74:17:
40:13:39:58:d0:6b:00:f8:ed:ce:31:f4:a7:9c:e4:3c:e5:68:
87:1e:b5:f6:93:cd:a3:52:42:b5:ef:d8:21:03:3f:a1:67:f6:
f4:ad:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:49 2025 by rpki-client