Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: zsUV7YD+4dtOuvtrUiwemxXLLCQtsXvyCavI4DOTVUA=
Subject key identifier: D4:67:A1:E4:19:3D:05:76:E5:F1:D9:0D:5C:01:AC:14:B4:7C:89:66
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01984965B38957CA2267E751F5324AFC1505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:58 +0000
Manifest this update: Sun 27 Jul 2025 01:00:58 +0000
Manifest next update: Mon 28 Jul 2025 01:00:58 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: fqXJOOjQLtZI3W7KzpbHQ8yZYIwlNI2L6cjY4de0WSk=)
3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b3:89:57:ca:22:67:e7:51:f5:32:4a:fc:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jul 27 01:00:58 2025 GMT
Not After : Jul 28 01:00:58 2025 GMT
Subject: CN=d467a1e4193d0576e5f1d90d5c01ac14b47c8966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:7f:5a:2d:37:37:6c:91:e0:0b:8f:30:bd:
63:78:40:01:7a:95:72:c4:e3:d4:55:e5:a0:ec:80:
00:40:43:a0:78:2a:21:f6:32:a4:c5:6e:3a:56:bd:
ad:ab:ba:73:84:86:e8:20:cf:5b:33:d0:8a:5c:44:
51:23:93:2f:86:7e:17:cc:97:81:e5:ea:5d:50:6e:
b3:4d:a9:ee:01:f4:23:da:24:4a:6c:f9:1d:d1:bd:
e3:f8:57:52:2c:3d:c4:91:a5:00:af:64:f1:4d:81:
cf:b3:94:58:c3:6b:05:11:78:62:b1:b8:29:58:20:
87:6c:18:63:3f:e3:d8:0a:75:8c:46:67:5e:c5:df:
6e:61:d6:7b:3a:65:89:57:99:09:6b:c2:4c:0b:72:
13:d3:38:93:f3:fe:89:98:be:a1:27:7a:a5:a1:87:
19:d7:d3:42:43:ec:13:56:0d:ec:5a:a3:49:d5:12:
67:51:5b:48:98:c6:66:41:ec:38:18:5e:6b:fa:52:
9d:bf:46:0d:cf:b2:09:77:8d:70:5a:67:07:18:e8:
65:dc:31:fe:a8:3e:ed:e8:93:ae:9e:a2:0d:77:43:
24:0d:7a:8f:dd:f5:2a:e6:12:15:b0:43:cf:94:32:
60:0a:6b:1f:87:5f:11:be:a9:9c:1c:4d:93:49:ce:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:A1:E4:19:3D:05:76:E5:F1:D9:0D:5C:01:AC:14:B4:7C:89:66
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ae:6a:e5:82:90:d4:b5:4a:bb:97:90:40:39:fb:22:8a:72:
16:88:70:58:7e:de:e5:e6:c4:9a:90:49:38:ba:9f:9c:92:ac:
ee:cb:b0:59:70:7d:b4:d0:32:0e:63:d1:5a:99:90:8e:72:de:
96:d0:6d:39:4c:a6:6c:a5:3e:16:c4:56:66:55:f8:7e:67:78:
0e:8a:f5:8f:44:38:b2:b9:21:16:97:36:d7:38:25:d6:93:b1:
f9:51:81:a5:ea:c5:78:a0:9b:82:51:ae:83:66:13:f4:cb:9a:
fd:9f:2e:f5:78:0e:3b:21:bc:4a:5a:92:92:01:1a:0f:f2:f9:
6d:00:3c:2f:85:0d:5b:c2:ae:e9:58:86:3f:d3:85:68:5d:b5:
e8:20:bf:d2:65:7b:98:42:b0:5c:83:4c:fb:a0:a7:c0:ad:0c:
e8:67:ce:da:7d:60:0a:33:b5:7a:30:b7:18:e5:b3:ae:97:45:
b4:f3:25:59:14:0c:eb:91:25:b2:6b:23:60:78:91:59:80:58:
4d:46:3b:6a:46:55:24:b7:99:a5:ce:cb:f4:36:d7:6c:c1:f1:
ff:5e:80:6a:aa:d2:c1:2d:43:8d:f3:57:98:c9:68:4a:c0:e9:
f1:5e:68:0a:ad:8c:dc:f3:fa:1d:b1:c5:8f:ef:42:8b:0e:22:
b4:a0:d7:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbOJV8oiZ+dR9TJK/BUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz
ZGI4MzQwHhcNMjUwNzI3MDEwMDU4WhcNMjUwNzI4MDEwMDU4WjAzMTEwLwYDVQQD
EyhkNDY3YTFlNDE5M2QwNTc2ZTVmMWQ5MGQ1YzAxYWMxNGI0N2M4OTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mh/Wi03N2yR4AuPML1jeEABepVy
xOPUVeWg7IAAQEOgeCoh9jKkxW46Vr2tq7pzhIboIM9bM9CKXERRI5Mvhn4XzJeB
5epdUG6zTanuAfQj2iRKbPkd0b3j+FdSLD3EkaUAr2TxTYHPs5RYw2sFEXhisbgp
WCCHbBhjP+PYCnWMRmdexd9uYdZ7OmWJV5kJa8JMC3IT0ziT8/6JmL6hJ3qloYcZ
19NCQ+wTVg3sWqNJ1RJnUVtImMZmQew4GF5r+lKdv0YNz7IJd41wWmcHGOhl3DH+
qD7t6JOunqINd0MkDXqP3fUq5hIVsEPPlDJgCmsfh18RvqmcHE2TSc4x0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRnoeQZPQV25fHZDVwBrBS0fIlmMB8GA1UdIwQY
MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt
NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi
LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba5q5YKQ
1LVKu5eQQDn7IopyFohwWH7e5ebEmpBJOLqfnJKs7suwWXB9tNAyDmPRWpmQjnLe
ltBtOUymbKU+FsRWZlX4fmd4Dor1j0Q4srkhFpc21zgl1pOx+VGBperFeKCbglGu
g2YT9Mua/Z8u9XgOOyG8SlqSkgEaD/L5bQA8L4UNW8Ku6ViGP9OFaF216CC/0mV7
mEKwXINM+6CnwK0M6GfO2n1gCjO1ejC3GOWzrpdFtPMlWRQM65ElsmsjYHiRWYBY
TUY7akZVJLeZpc7L9DbXbMHx/16AaqrSwS1DjfNXmMloSsDp8V5oCq2M3PP6HbHF
j+9Ciw4itKDXxw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:36 2025 by rpki-client