Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier: biJt7GXKCbGz0vMNNpFDsBraAE/yGHRuDllRMKYwcBM=
Subject key identifier: CB:4B:AC:C3:C3:16:91:3F:F2:D3:B0:E3:8D:F1:5A:F6:79:0C:6A:85
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01992F366E685EC40E59EA48C29C620B68BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number: 1273
Signing time: Tue 09 Sep 2025 16:02:00 +0000
Manifest this update: Tue 09 Sep 2025 16:02:00 +0000
Manifest next update: Wed 10 Sep 2025 16:02:00 +0000
Files and hashes: 1: 1ffKjQocjrQNsazj1CAi9JjVS5M.roa (hash: LGq8PY1XybDfBXT9FGzMq8PfJwuGWsOSqjxZ40jc9hQ=)
2: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
3: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: CfdDEMpQ0SlArqp3bphMzdPrbKQ9yHVYy3K3kf6Iml8=)
4: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:6e:68:5e:c4:0e:59:ea:48:c2:9c:62:0b:68:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Sep 9 16:02:00 2025 GMT
Not After : Sep 10 16:02:00 2025 GMT
Subject: CN=cb4bacc3c316913ff2d3b0e38df15af6790c6a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:aa:f4:6b:8f:80:3f:ae:2b:a3:83:88:0c:
73:96:f9:b8:77:49:ce:e4:46:bb:04:af:46:70:9a:
22:0a:ab:e8:61:47:4c:68:c8:4a:9d:95:de:ca:d0:
77:7a:04:06:f5:93:71:8e:cf:94:37:d6:aa:57:75:
1d:03:c9:ec:00:f9:39:20:6a:f6:5c:5e:d1:c3:11:
61:51:48:9d:1d:f3:5d:75:f4:c0:18:ef:2a:d8:a4:
59:af:ea:5a:dd:3b:ec:f8:2d:9c:bc:c2:82:74:98:
3d:cd:55:00:ed:b3:2f:51:13:a6:a3:08:89:ba:de:
cb:23:de:2c:c8:34:ca:af:56:a0:73:8b:56:71:6c:
b8:c8:c4:0e:32:ba:83:cb:92:3a:7f:1d:6b:ee:64:
ac:b7:6a:a3:f0:f1:46:23:8b:2b:f3:1d:8d:46:15:
41:8c:a1:ae:31:8f:68:76:36:08:04:36:5e:0b:be:
df:ba:d6:4d:5d:eb:a1:e6:0e:14:d8:86:3c:e6:80:
49:50:89:dc:38:d5:69:0d:c7:e6:e7:f6:f6:ed:05:
86:c6:21:c4:73:88:4c:db:97:ed:b1:ea:f8:9f:6a:
24:cd:3f:88:07:73:ac:67:bc:fc:94:32:1b:a8:88:
05:fd:9b:b1:65:4f:7e:4b:0a:08:fd:27:27:7b:c6:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4B:AC:C3:C3:16:91:3F:F2:D3:B0:E3:8D:F1:5A:F6:79:0C:6A:85
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:02:a8:fd:c4:90:c0:d8:93:32:7a:f9:5f:06:62:16:cc:19:
7a:06:d1:d7:f6:ea:be:b0:71:5b:e6:5e:19:32:30:89:4e:63:
18:33:02:3e:c8:21:be:66:90:a4:ce:fe:9f:d5:9c:f8:20:24:
7f:89:1e:4c:e2:56:44:80:1e:af:f0:58:24:0a:ad:ae:47:44:
57:9d:2c:64:73:bf:d5:2f:50:9e:24:18:bd:6e:03:63:c9:a6:
ab:36:26:3e:f9:f2:fe:ce:cb:4e:f6:43:02:b0:c4:ad:47:99:
27:00:dc:56:2c:45:0d:71:99:3a:75:75:a3:78:91:b9:61:ed:
41:56:42:f3:05:1e:27:5e:e2:dd:66:2d:f2:ba:2e:d5:31:a0:
a0:06:9e:3b:a4:96:da:f6:55:73:67:6d:0b:6f:78:b8:9d:8d:
18:6c:7f:3e:a5:cf:e1:a8:fc:d7:33:a9:8c:6f:f2:ff:f5:b5:
76:44:2f:d2:db:60:10:4f:c1:0b:72:12:31:a0:8e:9e:a8:dd:
6a:e2:11:5c:63:87:2e:d9:aa:c2:c7:32:a5:5f:6f:94:10:29:
eb:b3:59:40:29:6a:34:59:e9:cd:dc:50:08:dc:67:2f:77:7d:
be:1e:12:dd:b8:3f:85:5e:03:50:ce:1e:bd:55:47:d7:15:3c:
f1:d3:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:48:33 2025 by rpki-client