Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: gKqFBRdRY9k08la1H3LZc2ep7/bdKwrguZoQQ1upMDg=
Subject key identifier: 81:6C:FD:E2:39:C7:49:AD:95:78:62:DF:84:1F:57:84:3E:C9:75:EF
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 0198D6CD5DA7C40BC4AF389148E8439415C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 06DF
Signing time: Sat 23 Aug 2025 12:00:39 +0000
Manifest this update: Sat 23 Aug 2025 12:00:39 +0000
Manifest next update: Sun 24 Aug 2025 12:00:39 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: k6s2wF/LrY7VPto2AJeQOtANBDIAGFbFkSz4AvILaXo=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:5d:a7:c4:0b:c4:af:38:91:48:e8:43:94:15:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Aug 23 12:00:39 2025 GMT
Not After : Aug 24 12:00:39 2025 GMT
Subject: CN=816cfde239c749ad957862df841f57843ec975ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:de:a9:c8:e5:de:29:47:14:12:09:d0:ce:
e7:dd:f0:78:8e:a8:3b:e3:2a:f5:d6:53:0d:29:0f:
68:4f:da:12:36:b9:c3:f4:d7:f1:ab:02:76:fa:60:
b5:ec:fa:de:f5:4f:e4:3f:a9:e0:3f:97:b0:b6:d9:
28:6a:45:23:b4:d9:d2:85:08:4d:e0:05:68:2d:ab:
f8:49:3b:07:1e:22:aa:92:ed:03:da:5a:13:6f:19:
29:b9:8b:15:1a:2e:d5:ce:ef:c7:7b:aa:aa:75:03:
cd:cc:72:9e:5b:8e:db:73:35:5f:3d:bf:36:60:7f:
d3:ed:55:c2:3a:2f:7c:71:1b:54:86:3e:63:92:a7:
d7:d1:4d:62:83:4c:ca:d3:be:e7:4c:b0:bf:ee:72:
c3:f5:32:d7:75:69:56:65:aa:04:df:3e:d8:26:b0:
87:d3:f0:f0:dc:74:fa:be:aa:0a:0b:c7:84:a9:06:
39:d8:a3:67:99:12:e2:29:f2:5d:3e:cc:83:5d:dc:
c9:36:e2:a1:af:bb:29:9f:42:77:23:1e:68:15:5a:
60:21:dc:68:83:82:cf:0f:78:fd:f4:9a:a8:8c:c7:
59:0f:46:a3:b7:e2:6c:86:0a:46:5c:1a:e6:4d:3a:
bf:dd:b4:84:1c:39:b2:ec:2c:5e:d6:80:98:d3:ea:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:FD:E2:39:C7:49:AD:95:78:62:DF:84:1F:57:84:3E:C9:75:EF
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e4:9d:40:26:6c:8f:94:55:7c:cd:38:2c:4c:d9:44:1a:98:
e5:b9:0f:cd:12:ca:64:2b:27:c6:83:ff:52:f2:b7:9c:1d:cb:
e4:fd:39:aa:48:81:f8:1b:65:29:61:fa:53:16:b0:af:79:80:
54:9f:db:07:de:71:31:fb:fb:1e:3e:de:4d:5c:fe:ab:8d:4f:
0b:21:be:e3:42:fe:ea:e4:d7:ba:cf:14:e2:5b:d9:07:fc:df:
cb:1b:1d:d5:6c:ce:ba:5a:bf:c0:32:d0:d0:50:f2:33:51:e5:
ff:a2:16:cb:7b:ae:37:ae:a1:2e:f0:fc:8d:8e:77:e3:88:42:
1d:85:67:3e:f5:f9:07:7f:6a:5d:b8:63:bf:c0:8e:74:0d:34:
7a:61:81:a7:70:de:da:e8:82:57:09:8e:42:31:09:a6:14:94:
b8:d6:f7:e2:e5:d1:f2:60:8b:c9:41:a4:74:67:9d:06:8d:c9:
0e:5b:26:4d:f0:85:a5:37:16:00:16:cc:e6:89:3f:54:8a:c7:
71:15:21:48:72:f5:0d:bf:79:b9:ed:35:01:22:cf:be:aa:ab:
a4:c0:6f:5c:a9:98:fd:48:90:db:f3:8b:b2:10:31:c9:a3:ba:
5e:c2:0c:70:0d:49:94:a7:79:a7:c9:5c:86:19:17:1a:98:0b:
75:4b:47:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzV2nxAvErziRSOhDlBXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2QwNDRjMDkxZTg4YjgwYjRiMjY5ZWJiNzk2YjNmMjQ1
NDRiNWYwHhcNMjUwODIzMTIwMDM5WhcNMjUwODI0MTIwMDM5WjAzMTEwLwYDVQQD
Eyg4MTZjZmRlMjM5Yzc0OWFkOTU3ODYyZGY4NDFmNTc4NDNlYzk3NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSTeqcjl3ilHFBIJ0M7n3fB4jqg7
4yr11lMNKQ9oT9oSNrnD9NfxqwJ2+mC17Pre9U/kP6ngP5ewttkoakUjtNnShQhN
4AVoLav4STsHHiKqku0D2loTbxkpuYsVGi7Vzu/He6qqdQPNzHKeW47bczVfPb82
YH/T7VXCOi98cRtUhj5jkqfX0U1ig0zK077nTLC/7nLD9TLXdWlWZaoE3z7YJrCH
0/Dw3HT6vqoKC8eEqQY52KNnmRLiKfJdPsyDXdzJNuKhr7spn0J3Ix5oFVpgIdxo
g4LPD3j99JqojMdZD0ajt+JshgpGXBrmTTq/3bSEHDmy7Cxe1oCY0+oxHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFs/eI5x0mtlXhi34QfV4Q+yXXvMB8GA1UdIwQY
MBaAFB09BEwJHoi4C0smnrt5az8kVEtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYt
YzQxNzQ0MmVmZjkzLzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYtYzQxNzQ0MmVmZjkz
LzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuSdQCZs
j5RVfM04LEzZRBqY5bkPzRLKZCsnxoP/UvK3nB3L5P05qkiB+BtlKWH6Uxawr3mA
VJ/bB95xMfv7Hj7eTVz+q41PCyG+40L+6uTXus8U4lvZB/zfyxsd1WzOulq/wDLQ
0FDyM1Hl/6IWy3uuN66hLvD8jY5344hCHYVnPvX5B39qXbhjv8COdA00emGBp3De
2uiCVwmOQjEJphSUuNb34uXR8mCLyUGkdGedBo3JDlsmTfCFpTcWABbM5ok/VIrH
cRUhSHL1Db95ue01ASLPvqqrpMBvXKmY/UiQ2/OLshAxyaO6XsIMcA1JlKd5p8lc
hhkXGpgLdUtHUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:37 2025 by rpki-client