Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: LVu4PlDNIb53N+f5QIshHDD+mrODwat8wD1KFYjTplg=
Subject key identifier: 19:E0:E4:1F:54:9C:48:63:E4:F8:F7:68:6D:01:DB:DA:92:D6:04:C8
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0198D706201B05925C72C2647A6BDD3B66DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0F93
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: 4YTs7dtL73Dbum09ubFS/ykiXsDKo+NQMr/LD+vxCGs=)
3: pjkORl4e_icMku-dYwyxSK4dpvQ.roa (hash: jYn2CwjUvaCvvwmPswUUWp4ZR7edzl8SVBDQU+3D+k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:20:1b:05:92:5c:72:c2:64:7a:6b:dd:3b:66:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=19e0e41f549c4863e4f8f7686d01dbda92d604c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:c4:58:35:e6:88:18:27:27:8c:64:8a:91:
0d:28:6d:da:41:db:2f:9f:db:fa:c8:ab:d5:f5:ca:
4d:5f:8f:fd:39:f3:4b:7b:e2:b2:e2:79:06:4e:cf:
53:2e:6d:93:82:f3:20:85:76:9e:22:bb:81:2a:b1:
f3:07:0a:93:53:31:3b:75:5b:78:f3:1d:ad:41:53:
bd:b7:82:a2:c3:66:70:9e:5e:ff:fd:83:f0:a5:99:
87:b7:fa:73:cf:8c:04:03:ae:ec:42:b6:5d:80:cb:
6a:a2:1c:ea:0a:0f:57:68:da:2b:ee:8e:da:15:4b:
59:44:87:b0:b8:64:ea:52:a1:18:f2:3c:6a:06:10:
00:ca:e2:9c:5c:88:85:64:85:66:f2:aa:03:36:81:
2b:8e:76:58:a0:95:b6:c1:c3:54:5b:70:97:cc:fb:
7b:26:22:24:f2:5b:66:9a:94:09:b8:a4:68:65:8e:
ab:9b:ed:35:f1:ca:b4:81:14:4c:a7:dc:22:93:c3:
e9:7c:03:a3:b0:46:4f:50:22:fa:bc:cb:60:b3:f5:
6e:9a:5d:c3:7c:dd:84:2a:35:a0:83:95:7a:c4:47:
09:4c:6a:c6:b0:60:0a:e1:af:ba:ad:98:aa:9b:81:
98:4e:8d:ea:95:59:be:69:1b:e5:2c:69:e9:df:ed:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:E4:1F:54:9C:48:63:E4:F8:F7:68:6D:01:DB:DA:92:D6:04:C8
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:a9:b7:4e:3c:15:0a:67:84:25:c4:81:28:29:20:1f:dc:
fe:b3:62:64:37:94:7e:37:9f:2e:43:b2:91:6d:e7:f5:df:2b:
ec:74:1c:04:e4:27:32:94:c2:ac:23:05:ce:1d:08:71:42:14:
4f:24:58:9d:d5:50:93:f2:96:aa:a1:89:97:cb:a2:19:1d:af:
0e:ac:3a:f5:03:5c:c8:ae:68:5f:b0:82:f6:cf:f6:58:60:e6:
69:44:9a:e5:8e:1b:6e:8d:ca:c5:df:90:9e:f1:22:a5:94:40:
03:d7:6e:e8:0e:71:ac:5a:1b:5d:82:ad:27:fe:f3:bc:0b:d9:
88:5f:f9:a0:f6:e1:45:73:d7:04:bc:69:8a:e7:45:7f:9f:f5:
a4:e7:f7:c5:30:6f:4d:50:c6:b4:64:f3:08:2e:69:89:9e:43:
a1:18:cb:0e:90:33:e1:19:97:99:38:ab:c2:24:5c:3a:fd:79:
1c:87:ce:81:60:a0:ae:9a:56:c9:78:0d:15:e0:8d:da:42:44:
f1:87:7a:6f:2b:61:53:02:bb:fa:31:2d:79:99:5e:f4:20:7e:
f6:c0:55:e0:7b:fd:13:d6:f9:4f:b0:ba:86:e5:bb:2a:d1:28:
27:74:91:cb:43:43:e8:9d:98:95:a6:7a:57:fc:16:24:a5:f6:
fd:2e:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:34 2025 by rpki-client