Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: QKJuPTLwB4C1zrdxyIjjW/Zy/uEaQ0S7kTOdm25n9dI=
Subject key identifier: 9F:89:F0:62:93:A4:76:A2:62:8A:2C:39:13:99:3E:52:AE:54:22:1C
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019849D33BF39C71A5331074A0D8028AAF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 0696
Signing time: Sun 27 Jul 2025 03:00:36 +0000
Manifest this update: Sun 27 Jul 2025 03:00:36 +0000
Manifest next update: Mon 28 Jul 2025 03:00:36 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: NidWdyL0odXLUpEQ+hn1+AC0zTRWlu4OmAI1Qjjs1kc=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3b:f3:9c:71:a5:33:10:74:a0:d8:02:8a:af:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Jul 27 03:00:36 2025 GMT
Not After : Jul 28 03:00:36 2025 GMT
Subject: CN=9f89f06293a476a2628a2c3913993e52ae54221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:41:f6:ad:16:c2:c7:c2:38:ba:ee:cf:1e:
ed:5a:b3:eb:f6:f5:ff:ba:ce:41:64:d5:a7:da:51:
63:f5:91:4f:fa:6b:35:3a:1f:0a:32:d1:a7:27:65:
3e:e4:9e:55:d1:ee:f2:9f:be:dd:cf:8b:70:f9:32:
0f:0e:ea:dc:ec:99:97:a8:6d:4e:70:a5:27:d5:96:
be:ad:11:b2:bb:2d:e2:27:17:b9:43:68:db:84:36:
c7:26:6b:2e:f6:33:de:ad:b1:b7:7e:42:0a:d5:cd:
64:c1:3d:d4:a2:3f:a5:c6:56:71:3f:d3:5b:9f:22:
b8:86:de:f9:86:e0:cb:31:32:d9:ae:01:bd:e5:df:
56:dc:74:57:51:6f:43:80:00:96:5e:27:30:a9:00:
5e:d1:c7:c2:3f:1a:99:13:fb:4a:0e:76:45:55:41:
78:88:41:d7:79:98:cc:16:31:82:64:5f:d8:2b:96:
ce:f2:3c:e3:1a:b5:5c:2f:8b:b2:c6:95:7c:9f:44:
2f:20:eb:4b:93:80:42:c5:9c:3a:dd:a6:46:10:63:
bf:33:76:c0:9a:b4:57:ee:f3:db:2c:30:8c:01:b3:
11:36:dd:8d:a7:6a:38:fb:17:85:a8:e5:80:16:06:
bb:f3:4a:5a:ca:40:17:89:15:4f:05:6c:f6:51:64:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:F0:62:93:A4:76:A2:62:8A:2C:39:13:99:3E:52:AE:54:22:1C
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:82:89:a2:94:ec:35:4d:f1:16:0a:ea:e3:ea:dc:0c:c0:
62:11:45:59:39:d1:75:a8:3c:17:c4:a4:b6:26:6d:7d:bb:24:
f1:b9:df:2a:41:9d:05:1b:48:b6:3a:46:32:ae:82:1e:42:4b:
ef:93:14:d3:0c:01:9b:8e:f5:b5:8e:96:be:12:f8:c8:88:cd:
77:8d:ed:58:98:f1:d1:2c:fb:30:b8:12:9c:21:91:8f:14:f9:
89:75:01:af:f6:5a:2e:2b:f0:87:56:6b:5d:ca:1c:69:da:fa:
c2:2a:72:fe:bb:2d:c5:9e:ec:f2:01:d4:48:5d:b9:fc:87:f5:
d7:88:d3:c2:ce:62:35:08:6f:66:e3:29:03:8b:f8:3c:85:6d:
de:d8:5a:a8:6c:15:ba:e3:c8:61:d0:dd:02:49:dc:2a:0d:fe:
15:1c:4f:e9:e6:fe:b8:9d:99:00:fa:73:ba:11:1e:68:f8:dc:
93:60:5b:02:3b:22:6b:eb:61:ad:d1:8d:d1:aa:d4:f9:b5:71:
d2:68:f0:e7:2b:67:1c:3b:29:3f:da:32:fb:06:12:1f:9d:c1:
09:09:31:d4:86:7c:ec:ca:25:ab:52:4e:30:14:25:9a:c0:99:
46:0b:c2:a0:eb:78:64:37:b0:df:fe:03:ec:bd:19:63:1a:8c:
cc:69:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:38 2025 by rpki-client