Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: 1p/P+DvoeTbdh83YmYBBWzp9wfGVCIGea0TWD0QElnk=
Subject key identifier: 8A:E6:3E:DA:73:32:DF:1B:09:B9:4A:89:58:B1:F7:25:2C:94:B5:0F
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 019A7293FFA2A7C5F4B84C75100634AD353B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 136E
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: 4YBUL7+JJrAxue2QOvtZAcStL/ZyWdqHSqPBu3ovq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ff:a2:a7:c5:f4:b8:4c:75:10:06:34:ad:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=8ae63eda7332df1b09b94a8958b1f7252c94b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:66:5e:db:f1:5b:4c:ce:62:f8:d4:c5:fe:
db:bf:ad:4e:ea:ef:ce:5f:78:df:e0:19:92:22:46:
63:19:67:d4:94:61:a1:59:ef:6b:8b:43:ca:68:a3:
e7:ca:6a:ad:5f:e2:9c:cd:45:32:0a:eb:82:31:b8:
91:cd:d8:1d:28:5b:9c:0f:25:da:e2:80:a2:33:0e:
3d:5b:72:bd:f7:67:c9:79:19:19:33:a3:be:d7:d6:
69:7c:46:0b:c1:26:9b:7a:bf:bc:a4:47:0d:c5:c7:
8e:a3:51:77:0c:93:69:ee:0c:6a:15:35:48:ef:38:
f1:5b:47:9a:0a:0a:ea:95:51:bd:66:47:f1:5e:fb:
72:e1:4f:63:de:30:75:0d:67:00:71:02:2e:a3:13:
a6:b0:ae:13:da:ce:59:45:8e:bb:42:ef:7c:84:88:
e9:5a:0c:b6:81:e9:38:63:c1:37:df:07:5e:da:57:
a5:23:aa:4e:dc:bc:03:ce:8e:2f:3e:c4:8b:01:ce:
4a:46:05:3f:5b:d4:e6:ed:d5:4e:fe:2e:82:bd:b3:
e7:29:60:01:b9:d2:e4:0d:25:1b:5c:1c:01:39:da:
21:7f:eb:56:e1:ab:b6:50:fd:04:37:28:b3:57:88:
f9:ab:bb:60:0b:d2:f5:fc:9d:67:4d:19:07:71:81:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:3E:DA:73:32:DF:1B:09:B9:4A:89:58:B1:F7:25:2C:94:B5:0F
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:39:e5:e9:70:a9:1c:9d:0a:93:6c:13:0d:90:16:2e:23:
9f:21:3d:ba:d1:b5:d2:bf:20:bf:77:ab:ab:b8:10:f4:99:e2:
c3:dd:d6:0a:6f:8c:55:51:6d:7f:72:3f:20:c5:1e:99:e4:ea:
31:4a:13:ab:99:7b:7a:f2:5f:7a:09:f2:15:f5:02:19:75:53:
d5:5f:e9:0c:a9:7e:fd:95:39:76:7d:f9:dd:bd:3f:81:9d:55:
d6:a5:eb:16:05:f2:66:e0:cc:c5:87:cc:fb:ff:44:a6:58:2f:
0d:95:34:34:f7:c7:2c:c0:91:d8:80:e3:2c:50:6e:21:88:a8:
b4:72:56:5f:22:8b:93:03:f3:f4:98:85:58:d5:21:23:05:72:
62:22:4d:bc:50:2f:39:3f:73:0b:07:dc:e8:18:a0:4a:8d:80:
6f:15:44:c6:86:2b:dd:a7:e2:99:d8:62:d8:14:5b:9b:c8:c2:
e7:54:c6:4a:36:5a:00:39:39:a9:31:2d:e2:6c:0f:69:06:ad:
72:13:12:d5:da:f1:b0:a8:25:a2:d3:f1:24:45:60:1d:37:a9:
7f:c2:1f:79:08:0d:b3:dc:91:d0:a8:26:ae:af:e9:6c:fd:f0:
f1:f1:85:44:06:35:87:fb:98:20:ca:57:9a:99:d3:7f:4d:64:
d5:3d:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:15 2025 by rpki-client