Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: W6B5MYw2xsea/fmx5XQKT/4Prkw/aChBbi7u9IV6Qhs=
Subject key identifier: AA:FD:92:D1:96:C4:FF:1A:8F:0D:B5:7E:BC:E8:DB:6D:54:74:7C:86
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019A022304CE5902C34B640560B7BD46B47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 077A
Signing time: Mon 20 Oct 2025 15:00:40 +0000
Manifest this update: Mon 20 Oct 2025 15:00:40 +0000
Manifest next update: Tue 21 Oct 2025 15:00:40 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: AHg/jBJoBgAxV942s2+0EdDh2pFghIU0/uLh/SqCwhU=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:04:ce:59:02:c3:4b:64:05:60:b7:bd:46:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Oct 20 15:00:40 2025 GMT
Not After : Oct 21 15:00:40 2025 GMT
Subject: CN=aafd92d196c4ff1a8f0db57ebce8db6d54747c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:c1:c1:47:dd:46:eb:11:21:20:7b:ed:ab:
32:de:42:d2:a7:6e:37:dc:4b:e0:eb:c9:09:b9:7c:
a4:c6:61:96:8c:88:89:d6:d9:3b:32:3b:c1:65:eb:
e0:f1:8c:ab:83:fd:b8:de:25:c4:29:34:cf:46:cf:
89:5d:00:48:60:ac:fc:26:96:4b:fe:22:52:39:1d:
1b:4a:f2:b6:b2:dd:38:d1:ce:29:52:a3:13:d1:d0:
38:30:02:83:f7:3e:c5:fe:5a:65:ad:0d:29:2f:5a:
bb:8b:e0:92:e7:0b:bb:ff:8b:bb:1d:65:8b:cb:2b:
e5:94:3d:e7:37:57:35:d8:f1:27:ab:72:84:d0:68:
a3:4a:3f:65:d9:87:bf:cb:38:4a:5d:1e:76:b1:50:
65:99:7e:30:75:d8:2f:fc:54:7f:b7:3a:b5:82:c0:
5e:f5:03:4e:f7:eb:54:4f:31:0f:78:c5:fc:e6:01:
74:78:f2:5f:6e:b5:47:f8:e3:64:4f:96:e2:ce:6a:
65:66:0c:6e:77:9e:61:66:3b:f7:cf:b3:b4:f1:49:
d9:85:73:5f:0f:d1:d5:26:d1:7c:82:d4:21:f3:b0:
60:d0:88:bb:89:ea:b9:a3:ea:da:a1:50:24:53:03:
34:c9:16:62:68:4a:78:c7:71:27:05:b1:53:e1:50:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:92:D1:96:C4:FF:1A:8F:0D:B5:7E:BC:E8:DB:6D:54:74:7C:86
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0f:e0:b5:56:12:57:7e:b6:a3:d2:df:68:8f:25:dd:d9:81:
8a:d8:f8:cb:4d:0c:84:70:e6:27:65:62:71:33:a0:3b:60:b0:
72:92:e6:d2:20:a7:b6:4c:a0:11:e0:7a:d9:14:18:3a:5e:fa:
2a:f4:7e:b7:6c:91:51:f7:71:8d:2e:b1:d6:e1:62:29:7d:96:
fa:c8:ae:19:34:82:f9:25:fb:69:43:f6:04:50:58:58:33:41:
46:ed:7a:1d:d9:50:ad:8d:24:25:4d:ea:0a:0a:20:a1:a0:b5:
6c:08:ea:22:4b:3d:50:08:0b:3e:a4:4b:6d:51:72:05:70:46:
11:12:31:d5:45:92:a3:33:f5:7f:c6:8d:7e:79:8c:71:79:ae:
e9:0f:ed:3e:77:20:55:b0:70:b1:74:f5:d7:ea:91:2f:f2:9d:
4e:6d:e0:99:82:5f:52:b5:d9:83:c9:48:22:b8:84:e2:a5:25:
2c:a8:0b:19:1a:ac:f8:da:7f:2d:b8:13:04:77:3e:ff:f0:01:
1b:b6:06:1f:ef:7f:25:c1:f1:53:3a:b9:39:ad:e4:78:7e:8a:
80:5d:ae:fd:22:f5:91:cc:87:bc:76:95:92:e1:a2:ba:8e:fd:
2f:8e:3b:99:37:75:7e:10:b9:e7:d3:eb:af:37:10:f1:bb:e4:
90:7c:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:32:11 2025 by rpki-client