Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: Fs2eu8dabKd0Pj9iNp1/49bI5rxKq9IYkdU4m3UKxSA=
Subject key identifier: D2:34:05:89:BA:90:7A:2C:D0:96:9F:DD:13:87:10:51:57:ED:C2:CA
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019A01B5D73C9D4AAAAC104E1456C81701EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 13:01:25 +0000
Manifest this update: Mon 20 Oct 2025 13:01:25 +0000
Manifest next update: Tue 21 Oct 2025 13:01:25 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: ELFe0+bf6Jjkgp0Uf5BQ5bBrQdau8ESq2CwJIqujMmQ=)
3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:d7:3c:9d:4a:aa:ac:10:4e:14:56:c8:17:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Oct 20 13:01:25 2025 GMT
Not After : Oct 21 13:01:25 2025 GMT
Subject: CN=d2340589ba907a2cd0969fdd1387105157edc2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:17:11:98:7a:18:0e:3f:33:93:c9:97:c0:
ce:57:ed:3a:ed:34:b0:8e:61:f5:82:06:bf:4d:96:
15:13:f7:20:59:81:2f:90:81:45:f6:97:38:9e:33:
62:3d:3c:59:7e:a8:a4:f8:ba:9e:69:1f:f8:83:78:
b9:85:7f:42:18:f6:ee:66:ae:df:01:17:c8:0c:da:
3e:43:2b:ff:91:b1:ce:6b:08:12:8f:b3:26:74:10:
73:2b:f5:23:60:1a:16:a4:a9:76:7d:60:55:a9:db:
71:95:e8:c4:de:d8:f1:86:25:46:14:9f:fd:f5:18:
9d:33:c7:2f:6d:94:c4:2e:ef:85:5f:f1:ce:b0:64:
96:1e:93:d8:c2:da:7e:15:f5:d6:8e:80:dd:d3:3c:
c0:ca:7f:a6:5e:4c:a6:8f:a8:97:ba:b2:30:79:32:
98:77:66:40:0e:77:cf:d7:8a:49:83:67:16:16:c3:
55:12:cf:d4:97:c4:95:f0:a8:ca:7b:a4:82:f5:b4:
cd:8b:90:d5:fc:94:fe:82:c4:f8:d7:d3:e1:1b:ab:
45:44:0b:91:02:44:aa:90:db:b4:0f:3e:59:8b:9d:
c1:3c:37:a6:6e:08:93:54:00:fc:10:40:97:7c:43:
67:fa:bd:90:9b:b6:bb:3a:65:2d:e7:77:2c:94:d0:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:34:05:89:BA:90:7A:2C:D0:96:9F:DD:13:87:10:51:57:ED:C2:CA
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:e5:97:5a:ca:33:59:d8:2a:eb:56:42:81:3f:3b:dd:8c:
e5:b8:43:35:aa:09:64:e7:d1:a5:c7:e9:a8:1f:96:68:5e:1a:
8f:74:11:6b:65:b2:be:94:16:ab:43:8c:87:ee:d2:2b:2e:24:
52:55:09:34:d6:06:da:75:e7:cd:51:24:b4:22:26:67:c5:c2:
48:0b:d6:f9:72:31:59:f0:33:29:e7:ed:0c:4a:2c:6e:25:8e:
6c:91:2b:b2:db:ef:23:c0:fd:d0:63:38:d8:17:c3:8f:22:60:
62:98:88:2b:11:76:71:f5:98:c9:fe:89:c3:00:e8:02:42:4f:
66:a0:97:84:23:fc:c4:d5:f9:8d:8b:9a:b0:99:2c:9d:bd:fb:
06:2c:cd:78:3c:5f:0f:ff:51:6d:32:9c:68:d7:19:81:a6:63:
a6:9f:bc:36:56:24:84:41:9e:a2:e1:66:7a:9e:47:27:d4:16:
17:3a:6f:bc:0a:71:69:26:b2:b9:96:0f:0c:64:91:7e:a4:90:
1c:24:76:e7:af:a8:cd:97:01:ae:99:09:1c:ff:78:eb:85:df:
a8:80:19:a0:77:5a:27:43:fc:4e:a3:31:d8:e3:69:09:08:c9:
4d:c2:6a:c4:31:b3:22:45:d9:18:78:d7:a5:53:fb:1c:03:a8:
cc:83:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:54 2025 by rpki-client