Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier: tfTww2vZ2e7XdtcaXCAzk1QuSQJi6eMa0rEBK5Yy3N0=
Subject key identifier: 0D:34:56:E4:9E:39:AB:F4:8A:7D:6E:51:42:2D:63:B2:45:8C:6B:9D
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 0199FBEB11EE71AB9E074787B8026EE3D71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number: 0B
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 8jP_y3ejZgoctYO3RIyWsm1WwTY.roa (hash: ecd4E/hh4r+6kZxHuFwVi+mLNAKKO0mfpn1+ByWy+90=)
2: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (hash: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=)
3: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: eYSruVNqreKpQZ9iSjBCqXTqyymjoMZB6JT3pw7ReNs=)
4: kcL34WnZYMdN4SVhN2PeVdwWvgo.roa (hash: hEzKI9j+KADlA8KNZpHMbM3OEdQSPR+S9HcqTPPWTXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:11:ee:71:ab:9e:07:47:87:b8:02:6e:e3:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=0d3456e49e39abf48a7d6e51422d63b2458c6b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:49:06:d1:d4:ae:c1:55:09:c0:2f:dd:22:
02:84:b5:28:a6:aa:c6:37:75:71:13:5d:2f:da:e4:
c7:83:31:cc:6e:3e:8c:70:48:b7:5e:21:e7:25:83:
bc:78:49:70:8c:3d:3c:b6:c4:28:0c:32:26:fd:2a:
c6:8d:02:6b:42:41:b5:97:f9:50:7d:7a:67:9c:fc:
c2:b4:9c:e6:ae:07:1c:28:c9:9a:a4:51:df:4f:a1:
dc:86:aa:14:47:ef:21:d8:b3:3a:c8:e3:80:97:44:
7d:fc:a3:57:29:0c:91:09:51:3d:4e:71:74:4d:f1:
c0:74:fb:4b:3a:04:a8:2e:69:ba:7d:aa:12:15:a9:
e2:5d:d5:08:33:54:61:37:41:41:df:6c:29:b3:c5:
2f:8b:35:29:01:25:59:8d:6c:f5:e6:e1:5f:b7:1b:
3c:ca:25:e4:d4:48:de:a6:0c:64:22:21:ad:1f:45:
35:39:d5:d0:c8:4f:f2:28:7d:61:43:2b:f9:4f:81:
17:88:b7:3d:3e:ac:07:b2:b4:d7:1c:a1:e7:ba:d6:
f3:da:e7:a0:9a:5b:d4:94:00:f6:ef:4c:f2:6d:06:
0b:ed:e7:75:a2:17:54:4a:0a:0c:b7:e6:ab:43:d7:
63:44:26:9c:af:de:e6:f6:82:46:ae:f9:28:c3:7e:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:56:E4:9E:39:AB:F4:8A:7D:6E:51:42:2D:63:B2:45:8C:6B:9D
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:77:8b:f5:06:a8:68:89:16:72:a7:ef:57:36:84:a6:bd:
7d:40:a3:c2:87:ae:20:73:c6:7f:38:34:b8:97:76:c4:9c:d1:
d9:95:5d:24:ae:1e:b3:42:55:96:fa:e2:e7:b9:47:9c:fa:32:
95:be:db:7e:b6:a7:85:09:f6:f8:cb:0f:01:a8:45:fe:2a:0b:
b8:83:f3:3c:91:f7:df:da:ae:a8:9a:19:ce:f9:86:6f:10:16:
28:70:c6:ac:01:2b:52:c7:64:dc:ba:05:e2:95:a0:63:e6:34:
88:bd:6b:07:ba:21:cd:a5:ff:52:6c:eb:34:be:b7:bd:58:ac:
83:6d:a9:15:1b:1f:f9:77:ed:a6:1b:15:45:29:f7:cf:c9:d2:
b3:c3:20:5d:89:4a:25:94:5c:cf:13:ef:3f:69:d6:2f:6c:a7:
d6:6f:66:95:95:00:ec:62:1c:91:f4:f5:a6:f7:d7:bb:06:79:
28:17:e8:46:56:1d:65:b3:b6:41:9b:53:82:4f:fa:e5:21:92:
94:0e:d4:b1:68:bc:3d:ae:be:7c:97:d4:76:72:41:9f:f0:ba:
02:1c:56:f8:f1:f5:1e:3d:b3:73:54:06:0c:60:ba:c1:3b:3e:
e3:6f:7f:9f:3e:0d:f3:5c:c3:42:61:57:1e:99:4e:d2:3a:07:
3b:b1:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:49 2025 by rpki-client