Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: nakFHrkpZZyCX1ykR4+wQU9WGdnrRSGml0lgp9+GJ+I=
Subject key identifier: 51:2D:1A:A5:2E:52:8D:1E:A7:6B:A5:94:7F:DA:0F:27:AF:A1:DE:F8
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019A1F1A6DFD6D6179A3E9B1F7E8D4597457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 103D
Signing time: Sun 26 Oct 2025 06:00:17 +0000
Manifest this update: Sun 26 Oct 2025 06:00:17 +0000
Manifest next update: Mon 27 Oct 2025 06:00:17 +0000
Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: sonOtUhFVD60QhZLIoV3/UhiTIQF+tl17hxQDJNi4AA=)
3: pjkORl4e_icMku-dYwyxSK4dpvQ.roa (hash: jYn2CwjUvaCvvwmPswUUWp4ZR7edzl8SVBDQU+3D+k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:6d:fd:6d:61:79:a3:e9:b1:f7:e8:d4:59:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Oct 26 06:00:17 2025 GMT
Not After : Oct 27 06:00:17 2025 GMT
Subject: CN=512d1aa52e528d1ea76ba5947fda0f27afa1def8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:d0:fd:87:43:66:c5:2b:81:2a:9c:57:bd:
83:08:e0:4b:ca:5a:3f:71:0a:7a:bf:bb:9d:13:8c:
7d:32:37:d5:3e:76:0c:b5:22:a8:39:86:8f:16:f1:
fd:52:9c:9a:66:72:f9:0d:f8:4e:89:8c:db:58:ba:
2a:2a:b8:bf:38:a6:74:89:8f:c5:5e:ca:08:d0:9f:
69:e2:2a:5f:e8:44:ca:d8:a3:43:9f:52:75:1a:62:
78:8d:be:4b:16:1a:5e:66:cf:d9:0a:a7:cb:a2:28:
b5:d1:3e:cd:0e:50:ec:ee:7b:21:01:cf:b1:c0:aa:
a5:40:ab:50:c8:25:a0:bf:30:ca:4a:6e:9f:45:b3:
2d:69:1f:29:d8:65:12:a8:07:64:06:82:09:82:12:
16:47:50:d4:f8:a8:ff:05:ec:bb:e2:62:8c:87:10:
a7:f8:a2:55:29:fa:60:3b:30:cc:c3:48:e2:bf:1b:
12:e2:08:44:cb:53:e3:e8:2d:a8:72:26:d9:f0:c6:
88:72:b2:56:0a:13:9b:ae:e4:b6:06:5d:1d:a5:23:
8d:ec:c0:fb:03:58:2d:66:5f:c9:c6:fc:5b:f9:d5:
56:a6:ee:c1:8b:1e:90:7b:29:9f:cf:df:59:2b:27:
f1:58:ba:f9:64:cc:b2:be:e7:6b:0d:14:e5:bd:c6:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:1A:A5:2E:52:8D:1E:A7:6B:A5:94:7F:DA:0F:27:AF:A1:DE:F8
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:d0:18:e0:d5:ce:7d:06:8b:e6:bd:fc:49:28:57:88:d2:
9b:bb:d1:67:a0:bc:15:b4:a5:bf:b6:8c:0c:75:47:78:68:03:
50:5d:be:17:0f:07:fc:75:7e:20:d1:99:ab:f5:34:c0:f5:68:
35:86:18:40:46:9f:25:38:54:18:5b:14:f6:c8:66:45:ff:d7:
1c:0d:39:eb:8f:bb:38:e3:d4:f3:f7:ab:70:e9:3e:a9:b4:0a:
0c:35:00:66:14:4d:c7:0c:33:13:64:22:a8:27:23:74:c4:d6:
a6:53:30:33:7c:43:f0:92:5d:d8:a8:d9:ff:72:3f:8b:b1:81:
a5:c6:2c:bf:59:bf:59:00:60:a1:fe:cc:16:a0:45:cc:86:6b:
1a:39:31:7b:16:0e:f5:67:fe:d9:74:44:7d:50:d4:e1:16:6d:
29:db:b5:b2:a1:18:1e:4c:bc:36:27:e3:7e:6b:f3:ea:66:84:
24:53:dc:26:a5:7b:fc:a4:40:18:e9:a5:16:62:97:b0:ef:4d:
7e:44:59:fb:68:b1:5e:1c:29:7e:e1:b4:a1:2d:dd:57:3b:58:
5b:6c:38:77:c4:26:93:20:1e:ec:dd:8b:65:f3:a0:12:86:f7:
47:27:2e:7a:df:7d:62:29:7d:33:db:23:55:24:e4:74:bd:e2:
f5:62:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:50:00 2025 by rpki-client