Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: tvgTiqSFh7qtOMArTI0kVDhUYpml9mQN8lehsUc6XCg=
Subject key identifier: CA:48:42:B4:A7:03:47:5E:07:B0:69:E7:41:C5:78:F0:8C:BD:00:5B
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01984EC2D1D09B8BBC9C2963B50F63906C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 14C9
Signing time: Mon 28 Jul 2025 02:00:46 +0000
Manifest this update: Mon 28 Jul 2025 02:00:46 +0000
Manifest next update: Tue 29 Jul 2025 02:00:46 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: uAtSRONywSCQ+CSy6Zs5XR+0kiblVkZzeBjEjKSkTtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:d1:d0:9b:8b:bc:9c:29:63:b5:0f:63:90:6c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jul 28 02:00:46 2025 GMT
Not After : Jul 29 02:00:46 2025 GMT
Subject: CN=ca4842b4a703475e07b069e741c578f08cbd005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:a6:3a:52:08:da:91:15:cb:92:de:d8:d8:
e4:f6:27:9f:d9:92:d7:fc:85:86:95:90:a5:8c:00:
c4:72:f9:c7:ae:0d:2f:93:71:74:cb:f3:b3:c8:a1:
8f:99:fa:03:39:e2:df:91:0c:09:7d:97:64:c2:6b:
c4:fb:0d:d4:0f:ce:41:67:ac:ff:09:23:72:a5:dd:
3f:c4:bd:7b:03:39:ba:fb:78:80:68:ff:49:70:bd:
ae:d7:da:53:e0:fd:19:9f:2b:af:70:07:e9:56:f0:
c4:44:05:0d:de:66:e3:d9:7a:85:53:52:a3:2e:8d:
1f:c6:4d:3c:88:32:73:9b:4c:ba:ac:b0:a8:d5:74:
35:f8:85:60:5c:0a:9e:b0:88:e1:02:87:5a:33:2d:
67:51:98:2e:c7:e8:fe:2a:13:13:66:fd:d2:e1:05:
2e:12:7c:a2:b3:b0:91:92:40:43:61:4a:1d:49:1b:
1a:16:b2:4b:33:30:76:64:51:c2:13:bd:b0:3c:1b:
00:4c:de:e9:cd:00:51:fd:9c:5b:71:8b:92:4f:99:
1f:0f:43:d6:e2:e2:fb:68:33:0d:48:c9:ef:d5:4c:
1e:00:37:b2:d5:e0:ac:76:a0:34:72:70:15:66:d4:
2e:42:27:bc:c1:fc:7c:74:05:68:6d:70:d0:81:aa:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:42:B4:A7:03:47:5E:07:B0:69:E7:41:C5:78:F0:8C:BD:00:5B
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:58:c1:d0:cd:38:ec:49:af:15:66:da:67:b3:44:69:1d:
f2:b2:0b:60:2a:24:30:54:1b:dc:0e:2e:e4:4e:92:06:53:86:
f8:26:65:bf:12:b4:33:ec:fd:60:12:de:1d:57:8c:5a:89:1b:
30:1d:b9:95:d7:3a:12:3c:8e:62:27:b8:db:cf:f2:4d:4f:bc:
70:b9:f4:42:89:68:14:32:a0:3d:a7:30:1d:8b:92:40:42:68:
c3:90:e4:65:ac:a3:fe:18:b7:fa:fc:db:90:04:95:01:d2:a6:
eb:42:6d:6b:8e:3c:e2:2b:be:aa:3c:70:01:92:e1:60:86:95:
74:7c:1e:a8:10:21:1d:df:73:a3:19:96:6d:b6:3c:07:3d:94:
60:7e:8f:3b:6e:2d:a9:52:cf:51:37:d1:b4:3e:97:ae:45:8a:
f3:cd:00:8f:c7:1e:7d:ec:6e:de:75:c8:cc:af:ff:40:53:c7:
29:54:72:b6:f4:38:6b:f1:56:e9:7b:57:19:8b:3f:1f:23:a7:
0b:e4:8a:d2:27:fd:bb:99:cc:a7:a6:fb:c0:b2:eb:1c:d8:9a:
31:e4:dd:24:55:ff:a3:9e:c2:b1:dd:72:42:ef:5b:ad:18:d3:
fe:5f:d2:0c:64:cf:a3:6f:11:c3:31:fe:50:9b:dd:fd:0c:f1:
53:90:6c:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOwtHQm4u8nCljtQ9jkGyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk
MTg1Y2IwHhcNMjUwNzI4MDIwMDQ2WhcNMjUwNzI5MDIwMDQ2WjAzMTEwLwYDVQQD
EyhjYTQ4NDJiNGE3MDM0NzVlMDdiMDY5ZTc0MWM1NzhmMDhjYmQwMDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMamOlII2pEVy5Le2Njk9ief2ZLX
/IWGlZCljADEcvnHrg0vk3F0y/OzyKGPmfoDOeLfkQwJfZdkwmvE+w3UD85BZ6z/
CSNypd0/xL17Azm6+3iAaP9JcL2u19pT4P0ZnyuvcAfpVvDERAUN3mbj2XqFU1Kj
Lo0fxk08iDJzm0y6rLCo1XQ1+IVgXAqesIjhAodaMy1nUZgux+j+KhMTZv3S4QUu
Enyis7CRkkBDYUodSRsaFrJLMzB2ZFHCE72wPBsATN7pzQBR/ZxbcYuST5kfD0PW
4uL7aDMNSMnv1UweADey1eCsdqA0cnAVZtQuQie8wfx8dAVobXDQgar2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpIQrSnA0deB7Bp50HFePCMvQBbMB8GA1UdIwQY
MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt
YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk
LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSRYwdDN
OOxJrxVm2mezRGkd8rILYCokMFQb3A4u5E6SBlOG+CZlvxK0M+z9YBLeHVeMWokb
MB25ldc6EjyOYie428/yTU+8cLn0QoloFDKgPacwHYuSQEJow5DkZayj/hi3+vzb
kASVAdKm60Jta4484iu+qjxwAZLhYIaVdHweqBAhHd9zoxmWbbY8Bz2UYH6PO24t
qVLPUTfRtD6XrkWK880Aj8cefexu3nXIzK//QFPHKVRytvQ4a/FW6XtXGYs/HyOn
C+SK0if9u5nMp6b7wLLrHNiaMeTdJFX/o57Csd1yQu9brRjT/l/SDGTPo28RwzH+
UJvd/QzxU5BsYw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 11:05:27 2025 by rpki-client