Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: L1sfeIUn1Oqp8VVChFaI9DJVVmXrFouk3mg7FRZ4KXo=
Subject key identifier: 59:CB:69:F5:09:8D:A1:E1:C8:61:73:5A:A4:A6:1B:CD:EA:3A:75:65
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019845888E35864C86F34631C211588C10FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:00:33 +0000
Manifest this update: Sat 26 Jul 2025 07:00:33 +0000
Manifest next update: Sun 27 Jul 2025 07:00:33 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: iSAwAgbS5sxYMiDnSX1WZKuSMpXF8qX5Nd+f9pF/FYs=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:8e:35:86:4c:86:f3:46:31:c2:11:58:8c:10:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Jul 26 07:00:33 2025 GMT
Not After : Jul 27 07:00:33 2025 GMT
Subject: CN=59cb69f5098da1e1c861735aa4a61bcdea3a7565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:3a:93:52:7d:5e:d9:80:e3:ee:41:be:2f:
ed:88:3b:00:36:9c:69:6c:cc:16:90:9a:4a:95:07:
ce:42:bf:f3:88:a2:00:8c:85:46:9f:f7:6c:d7:b1:
b6:9f:bc:c0:b0:fb:be:e2:78:f8:4a:a0:9d:0d:fe:
fc:27:04:f9:80:0e:86:50:f5:cf:38:90:3e:4f:2f:
df:79:60:6f:f3:11:20:69:2d:a2:10:69:e1:c9:05:
59:55:5f:83:97:0f:ce:9b:a8:8c:71:12:a6:cc:c7:
04:eb:89:5f:ad:a9:fe:c6:b2:99:be:3b:76:ab:de:
e1:65:50:7a:fd:14:1d:64:35:27:e1:55:a5:a4:53:
4f:d1:13:b4:07:68:a4:cf:4a:29:a3:c2:67:4e:ca:
ad:d7:48:0c:4f:f8:be:e5:6f:00:99:01:00:a8:eb:
da:f7:d6:79:1d:11:92:a2:83:cb:d5:86:d8:f3:e4:
98:46:7f:eb:a7:e0:04:41:cd:c5:ba:65:ee:61:49:
0e:6e:44:e4:e6:4f:4d:ba:b9:a8:6a:c4:03:ad:89:
46:c4:55:0f:97:28:56:24:61:60:3f:bd:39:b2:07:
d1:96:25:e8:93:f0:e0:c6:74:f5:d2:62:34:ce:95:
35:b4:30:ad:20:50:6a:91:fb:4c:9f:da:1a:ce:6b:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:69:F5:09:8D:A1:E1:C8:61:73:5A:A4:A6:1B:CD:EA:3A:75:65
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:17:bb:32:2d:0b:e1:fc:97:84:7e:98:09:ea:46:46:4b:
2e:7a:62:76:3d:f6:f7:47:72:dc:92:8d:da:67:96:50:8a:a3:
ef:66:84:76:da:a7:44:04:03:12:01:6e:1e:db:17:ca:b2:91:
4a:22:44:de:41:d7:f3:0a:a6:84:66:ca:8f:bd:06:9c:1d:83:
aa:99:98:be:9f:8d:e9:70:5c:41:f6:ab:ae:27:87:1e:ad:e7:
c4:57:a0:a2:4f:df:2a:a7:7a:82:48:e6:e0:98:73:48:86:74:
df:7c:fd:ea:b8:a2:8a:82:82:63:36:a4:8f:4d:8b:ad:cd:ed:
d2:0c:51:6b:f1:17:07:96:27:f3:b2:bc:e2:eb:6a:ec:23:15:
d9:43:59:3c:b1:5b:2e:16:b8:25:6c:97:12:bc:42:00:5d:70:
4f:5b:5a:74:ca:28:f0:6c:37:f5:5f:5f:bc:ce:75:50:97:f6:
53:c9:e1:54:dc:f3:d2:55:c3:dd:fc:b7:b5:58:cf:3c:e2:e8:
95:86:fb:be:da:20:c8:bc:a7:6c:ee:64:a6:24:f8:87:e4:b2:
52:c4:07:24:a3:eb:5b:56:e9:e9:69:fe:10:0b:ff:1e:81:b6:
65:37:f2:71:f2:df:59:53:63:f0:0b:9d:cb:99:14:0e:7e:ff:
d9:bb:e1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiI41hkyG80YxwhFYjBD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUwNzI2MDcwMDMzWhcNMjUwNzI3MDcwMDMzWjAzMTEwLwYDVQQD
Eyg1OWNiNjlmNTA5OGRhMWUxYzg2MTczNWFhNGE2MWJjZGVhM2E3NTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSs6k1J9XtmA4+5Bvi/tiDsANpxp
bMwWkJpKlQfOQr/ziKIAjIVGn/ds17G2n7zAsPu+4nj4SqCdDf78JwT5gA6GUPXP
OJA+Ty/feWBv8xEgaS2iEGnhyQVZVV+Dlw/Om6iMcRKmzMcE64lfran+xrKZvjt2
q97hZVB6/RQdZDUn4VWlpFNP0RO0B2ikz0opo8JnTsqt10gMT/i+5W8AmQEAqOva
99Z5HRGSooPL1YbY8+SYRn/rp+AEQc3FumXuYUkObkTk5k9NurmoasQDrYlGxFUP
lyhWJGFgP705sgfRliXok/DgxnT10mI0zpU1tDCtIFBqkftMn9oazmtRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnLafUJjaHhyGFzWqSmG83qOnVlMB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXI0XuzIt
C+H8l4R+mAnqRkZLLnpidj3290dy3JKN2meWUIqj72aEdtqnRAQDEgFuHtsXyrKR
SiJE3kHX8wqmhGbKj70GnB2DqpmYvp+N6XBcQfarrieHHq3nxFegok/fKqd6gkjm
4JhzSIZ033z96riiioKCYzakj02Lrc3t0gxRa/EXB5Yn87K84utq7CMV2UNZPLFb
Lha4JWyXErxCAF1wT1tadMoo8Gw39V9fvM51UJf2U8nhVNzz0lXD3fy3tVjPPOLo
lYb7vtogyLynbO5kpiT4h+SyUsQHJKPrW1bp6Wn+EAv/HoG2ZTfycfLfWVNj8Aud
y5kUDn7/2bvh2Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:23:23 2025 by rpki-client