Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: g9y0znmTZvcA5pvk1dOYT7LTRxofRKh8zeEWGa5uXHc=
Subject key identifier: 82:D9:96:12:F9:31:62:56:2C:50:9E:CB:C0:52:BA:80:E4:24:0A:D4
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019960587762E3784961E8B2111E3DE76E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 1557
Signing time: Fri 19 Sep 2025 05:00:34 +0000
Manifest this update: Fri 19 Sep 2025 05:00:34 +0000
Manifest next update: Sat 20 Sep 2025 05:00:34 +0000
Files and hashes: 1: 8841bTLrrYM0Y1pyII0NVGzQWf4.roa (hash: 9qcEtK1zI2KboXmqVlSqE8SPNMfCXcG8xs/dxHVG8IY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 9GDd63i5KtJqK/uS/pavZBM4sJoqXlLfb15AxlHxQIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:58:77:62:e3:78:49:61:e8:b2:11:1e:3d:e7:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Sep 19 05:00:34 2025 GMT
Not After : Sep 20 05:00:34 2025 GMT
Subject: CN=82d99612f93162562c509ecbc052ba80e4240ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:e9:e0:b2:7e:c5:ca:fa:a5:e4:53:76:eb:
66:0a:ef:e2:b3:17:98:6c:23:a8:e5:35:fc:35:f1:
d8:f4:7e:e1:75:8e:b1:85:a0:78:fc:e2:3a:5c:87:
e6:23:ee:7a:c6:a4:9c:17:66:e0:d9:05:b0:79:a7:
1d:29:80:89:3d:19:ab:6f:15:ca:a1:bc:2d:19:79:
fa:2a:58:de:3e:dc:26:25:e9:33:51:87:84:99:8e:
e7:0b:c0:fe:82:9a:63:79:a7:eb:60:7f:99:5d:f7:
3f:18:dd:6d:bc:ff:c1:d5:86:3f:11:0d:be:e7:04:
85:d0:be:8f:4b:2d:73:1e:c3:b4:cb:f0:8a:42:58:
be:67:97:a7:e4:a1:e1:7e:b8:4d:dd:83:f2:8b:d4:
5b:14:4a:b7:14:8d:c7:39:d0:2f:e4:45:74:93:2c:
cd:ff:6d:45:a3:6d:0d:37:8e:27:98:e8:ae:52:af:
c6:84:fd:03:32:6f:0b:90:54:9d:c7:c9:43:2f:bf:
fd:bd:c7:f7:0c:63:d2:78:ac:6e:7c:b3:81:cb:80:
40:ab:a6:89:53:cb:8c:f5:ad:36:92:76:af:e2:fb:
3d:e5:cf:0e:d1:fc:5b:9f:00:06:c0:bd:f4:73:21:
c9:be:13:2f:c4:81:e1:d8:73:ac:99:3c:12:49:14:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D9:96:12:F9:31:62:56:2C:50:9E:CB:C0:52:BA:80:E4:24:0A:D4
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:cc:7a:6d:13:fc:f6:63:de:e5:d7:59:f6:06:69:3c:f2:
fe:40:73:5e:7f:40:60:50:df:d0:db:79:87:dd:e6:e2:e3:12:
47:08:1a:be:80:d7:d7:f1:00:73:0d:78:bf:23:01:b2:a0:98:
b5:6c:0f:df:23:e9:b0:9a:7d:66:35:0f:ba:20:fd:87:aa:1c:
19:be:f7:23:d9:4e:56:67:4c:28:d6:1e:bb:21:da:52:67:fc:
62:87:43:24:51:97:f3:d1:8b:e4:a5:0b:33:b2:4b:0f:25:c6:
7e:4c:70:87:68:c4:8e:d8:2e:f9:fd:dd:94:78:f2:93:2d:44:
c5:21:68:49:ad:71:49:4d:6f:63:8a:cc:7e:ea:d6:ef:cc:37:
65:ec:58:a6:db:15:a8:29:2e:13:0a:5d:3d:6c:93:ff:55:60:
b1:7d:7c:bc:38:78:d4:fe:05:06:7d:10:34:7f:5d:61:e0:6a:
3c:71:c3:af:2b:d1:70:2c:46:4b:56:1b:ee:9c:36:4e:ba:20:
72:1a:e3:20:49:ed:50:70:82:ce:94:a8:e6:12:16:fe:28:d8:
cc:ad:d6:64:68:bd:ab:5a:64:9f:0c:ce:54:a3:12:17:b1:eb:
c3:b3:f6:97:d2:cc:5c:90:fc:7a:ef:79:b2:55:2f:02:93:70:
42:6a:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:09:20 2025 by rpki-client