Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: VA6mhL1+o92CYKFc2HrDEq0lrlMRaL5GDua6QeqEars=
Subject key identifier: 9B:C9:AB:36:3D:F6:8A:D5:E9:30:70:42:1C:EF:66:41:4F:A7:A3:A6
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0199FE472FBAEA9C1DAC5499AF58EED0602E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 13EA
Signing time: Sun 19 Oct 2025 21:01:42 +0000
Manifest this update: Sun 19 Oct 2025 21:01:42 +0000
Manifest next update: Mon 20 Oct 2025 21:01:42 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: LGLSnqUwhZKXOkI6f1jzo2TcZIXuWCRzL5hULKGk4/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2f:ba:ea:9c:1d:ac:54:99:af:58:ee:d0:60:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Oct 19 21:01:42 2025 GMT
Not After : Oct 20 21:01:42 2025 GMT
Subject: CN=9bc9ab363df68ad5e93070421cef66414fa7a3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:59:38:77:ae:f1:c9:9d:00:1f:d5:bd:d1:
d4:a2:db:56:e4:fe:ba:6c:a8:1f:e9:45:66:0e:40:
bf:b5:41:03:3f:6e:ee:06:d7:fe:cb:de:2f:5d:0e:
29:11:c5:85:75:dc:56:21:67:8b:89:4b:42:29:e3:
41:69:68:70:18:c8:02:53:4d:d9:29:30:64:91:48:
20:e5:b1:09:ff:19:c5:1a:7d:97:87:ba:6f:15:f7:
2e:b5:71:b6:9c:ca:6f:e6:87:48:6e:ab:d0:a4:67:
de:c1:d6:33:c1:b1:29:01:7a:f1:4f:c1:3b:b8:06:
92:44:be:6a:ad:86:a8:8b:8a:29:48:35:53:f4:68:
60:b9:c9:d9:f5:5a:a2:fd:3e:ec:29:69:4e:ba:b3:
0a:ce:44:17:10:85:08:b2:77:aa:6e:43:e1:13:62:
27:8d:0a:53:17:c9:5a:65:ec:db:c5:81:5d:6b:67:
7b:c8:ad:1f:52:7e:88:b5:5e:fe:3a:cb:d3:87:14:
83:70:fa:de:5b:2b:b9:23:a8:6c:01:07:e4:b9:f4:
e8:c5:cc:7f:fc:1d:43:85:41:e7:16:e9:7d:2e:a5:
17:ac:80:6c:32:4e:15:b9:73:63:c4:6b:b8:bb:aa:
f3:ff:30:43:6b:63:87:ef:2a:b7:84:04:27:68:f2:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:AB:36:3D:F6:8A:D5:E9:30:70:42:1C:EF:66:41:4F:A7:A3:A6
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:4a:b8:92:bc:76:82:b0:52:dc:b8:b5:01:ab:32:fe:7f:
7c:e4:b9:9d:30:21:03:9d:c9:92:bf:80:7c:9d:70:be:1b:aa:
34:89:48:f8:b6:63:ac:d5:05:0c:88:78:0c:7e:07:8e:4b:ba:
77:36:b3:ba:19:70:89:97:04:57:47:ed:0e:79:37:c6:5b:0f:
8e:3f:d2:25:ba:2c:91:16:79:10:51:6b:72:78:4c:d9:0c:15:
a8:4b:6d:89:2c:28:1b:a5:b3:98:75:9e:bc:05:2b:68:f8:50:
3a:5d:a2:03:f1:e8:57:ff:07:7e:7a:b0:98:f9:a8:bc:f1:d5:
2c:41:c1:00:64:3b:6a:8d:32:4b:6d:bd:4d:0f:d7:e7:81:94:
f3:3b:50:12:1c:ee:5f:c7:d2:ae:07:78:ea:17:81:26:39:62:
1e:24:56:1b:9a:12:f7:cb:c5:20:ce:29:f8:3a:49:26:0e:ca:
61:15:41:fc:a6:8f:9c:b3:57:3e:8f:83:b9:98:50:4f:fb:5d:
34:3b:40:a4:c6:98:e7:35:5b:8f:54:b0:56:cd:df:1e:71:ad:
98:89:da:9f:f9:e7:72:1c:20:3d:6d:9a:2e:fc:5c:16:dc:a5:
5c:e6:99:f9:6c:b3:58:c5:fc:7f:4f:e7:81:6d:ea:dd:31:2f:
f8:5d:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:08 2025 by rpki-client