Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: i/dxcj8sLkjHMEl8/eR66eU8QKOUfWDVY2jaWk+bCD0=
Subject key identifier: 5D:F2:6D:FF:66:C1:A8:BF:8D:A3:7F:C1:B9:19:8D:77:1F:8A:4A:8B
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 0198D4737289AF3FB7DCE877D528E266B13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:03:12 +0000
Manifest this update: Sat 23 Aug 2025 01:03:12 +0000
Manifest next update: Sun 24 Aug 2025 01:03:12 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: wR+vvggzmQBOw0AOtpTRLLCYqtGm6egS7UEHidQfYGc=)
3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:72:89:af:3f:b7:dc:e8:77:d5:28:e2:66:b1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Aug 23 01:03:12 2025 GMT
Not After : Aug 24 01:03:12 2025 GMT
Subject: CN=5df26dff66c1a8bf8da37fc1b9198d771f8a4a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:0c:9b:92:72:03:bc:d6:54:cc:ff:74:ac:
95:c4:e2:0a:93:99:27:19:de:c0:46:8a:3c:82:33:
14:50:ff:54:04:99:77:2b:15:0a:63:d5:36:6b:ee:
05:28:99:c2:19:d5:00:5b:f9:0d:b4:cc:13:59:71:
03:50:fe:10:cc:d3:04:4c:44:8f:69:ad:87:92:ee:
50:c6:5a:26:d8:32:49:2f:2e:da:3f:84:70:d7:2d:
c6:f5:7d:53:e0:74:c5:31:c7:f0:f9:1b:ed:54:18:
5b:50:cb:8e:ba:c7:9b:56:52:f3:fa:80:bd:18:4b:
d9:01:4d:10:ac:9f:35:c9:10:15:7c:dd:b3:d3:b2:
e2:7e:d6:e7:45:22:6d:a0:14:19:8b:13:cb:f3:d6:
82:d3:90:3e:6f:ee:dd:14:55:71:30:11:e4:cf:00:
5a:ab:e2:9f:bf:04:af:cc:0d:74:29:f3:2f:2e:03:
bd:22:a2:f6:e4:fc:8f:30:98:1f:b7:44:64:8b:7f:
69:b2:ea:c2:8c:35:04:19:b6:fd:b9:1a:8c:a9:6f:
a0:71:23:d8:c7:37:f7:b8:a0:a6:a5:c9:ab:40:8c:
a5:14:c0:52:07:f5:df:2a:e2:18:7c:00:b2:c2:36:
46:70:f4:38:cd:88:3d:bb:a4:c5:29:5a:50:4f:2f:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:6D:FF:66:C1:A8:BF:8D:A3:7F:C1:B9:19:8D:77:1F:8A:4A:8B
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:58:e5:37:67:f8:50:b2:91:0d:6a:f2:14:72:a3:0a:d0:7c:
b1:ca:ac:81:67:dd:a3:e2:83:9c:a7:5e:85:d0:41:6a:dd:d3:
12:41:c1:89:28:e9:2e:7a:25:d8:e8:c0:b6:13:13:9d:6f:3c:
ae:b2:9d:77:97:05:0d:a3:f5:e2:6a:ea:36:7e:52:a9:5d:0d:
e3:26:42:6d:db:90:a5:b0:08:24:d5:3a:8a:e1:7b:40:af:41:
f5:89:0f:20:4a:8d:8c:7b:6a:d8:fb:9f:b1:3c:77:24:06:51:
0c:71:42:0c:9e:0e:8d:b1:b5:67:fe:5b:fa:11:e4:01:2b:c7:
b4:88:e2:01:1b:18:1b:1a:4f:56:08:b4:58:83:24:64:32:94:
6e:56:f7:53:9a:ad:3d:5b:e2:79:f1:dd:d3:e7:3b:e2:2b:5b:
8f:dc:0d:22:d8:42:98:13:6a:33:4c:7e:3b:bb:fb:38:d9:39:
f3:b1:66:33:02:48:e5:fc:10:72:72:fc:ed:05:4e:87:4e:de:
27:3b:5b:48:f4:a6:f4:e3:ef:dc:53:5b:6b:c0:ec:1c:d6:2c:
1e:eb:4a:8f:19:c8:8a:f0:5a:82:19:00:b6:fa:ea:76:81:d1:
62:86:cd:2b:4d:47:67:5e:c5:13:9b:7c:df:83:69:6d:e5:d1:
7c:bf:73:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc3KJrz+33Oh31SjiZrE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjUwODIzMDEwMzEyWhcNMjUwODI0MDEwMzEyWjAzMTEwLwYDVQQD
Eyg1ZGYyNmRmZjY2YzFhOGJmOGRhMzdmYzFiOTE5OGQ3NzFmOGE0YThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc4Mm5JyA7zWVMz/dKyVxOIKk5kn
Gd7ARoo8gjMUUP9UBJl3KxUKY9U2a+4FKJnCGdUAW/kNtMwTWXEDUP4QzNMETESP
aa2Hku5Qxlom2DJJLy7aP4Rw1y3G9X1T4HTFMcfw+RvtVBhbUMuOusebVlLz+oC9
GEvZAU0QrJ81yRAVfN2z07LiftbnRSJtoBQZixPL89aC05A+b+7dFFVxMBHkzwBa
q+KfvwSvzA10KfMvLgO9IqL25PyPMJgft0Rki39psurCjDUEGbb9uRqMqW+gcSPY
xzf3uKCmpcmrQIylFMBSB/XfKuIYfACywjZGcPQ4zYg9u6TFKVpQTy96cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3ybf9mwai/jaN/wbkZjXcfikqLMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVjlN2f4
ULKRDWryFHKjCtB8scqsgWfdo+KDnKdehdBBat3TEkHBiSjpLnol2OjAthMTnW88
rrKdd5cFDaP14mrqNn5SqV0N4yZCbduQpbAIJNU6iuF7QK9B9YkPIEqNjHtq2Puf
sTx3JAZRDHFCDJ4OjbG1Z/5b+hHkASvHtIjiARsYGxpPVgi0WIMkZDKUblb3U5qt
PVviefHd0+c74itbj9wNIthCmBNqM0x+O7v7ONk587FmMwJI5fwQcnL87QVOh07e
JztbSPSm9OPv3FNba8DsHNYsHutKjxnIivBaghkAtvrqdoHRYobNK01HZ17FE5t8
34NpbeXRfL9zSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:10 2025 by rpki-client