Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: lt33aZ9QYDoJ/nvlDpkOzphqQDTUIAijSKPIijwJlb4=
Subject key identifier: F2:16:1D:57:91:D3:9D:69:68:1F:96:16:FB:E5:A8:B3:B5:8A:C5:C4
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0199240DA91C8FA7A2EF83C7AD02CB156B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1379
Signing time: Sun 07 Sep 2025 12:01:38 +0000
Manifest this update: Sun 07 Sep 2025 12:01:38 +0000
Manifest next update: Mon 08 Sep 2025 12:01:38 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: FdjY3pqN740Vydhq+m+cuwLg+i6U/FYIEmBTfwFEarg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:a9:1c:8f:a7:a2:ef:83:c7:ad:02:cb:15:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Sep 7 12:01:38 2025 GMT
Not After : Sep 8 12:01:38 2025 GMT
Subject: CN=f2161d5791d39d69681f9616fbe5a8b3b58ac5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:c3:6c:1c:d8:8e:95:99:d2:92:12:3b:e1:
ec:f4:02:40:9f:11:97:60:21:54:e9:93:97:fa:62:
8f:94:11:9d:a9:53:18:55:7f:6d:8a:07:c0:6e:b8:
2a:9c:bf:17:a9:c9:a3:4e:cf:2e:a0:5f:e2:8b:3b:
5b:e6:59:df:10:1c:7b:62:5d:6b:cf:a4:93:0a:3c:
c7:73:3b:28:4f:b4:ea:86:16:21:34:a1:1f:78:27:
08:1f:73:63:33:cf:1b:32:1a:35:b8:8b:5d:10:dc:
e8:88:a8:6e:62:64:87:77:b5:a5:fc:97:cf:05:9c:
e9:c5:33:9a:08:6e:7e:3b:49:1b:04:4c:88:28:72:
7a:22:9a:ce:c0:87:7b:8c:96:de:7d:a6:e1:ba:73:
31:25:21:3c:49:52:28:ba:cf:ea:9d:39:62:db:75:
d3:1d:ac:69:97:d1:9c:51:6e:4e:29:e9:c7:dd:31:
18:d3:3d:0c:4e:62:b8:be:b6:b3:83:27:93:95:a4:
47:6c:1c:2e:31:b3:13:84:b9:0b:03:99:50:80:c8:
da:c5:ce:09:7d:d6:ca:85:d7:94:f0:55:b0:a1:9a:
a9:62:7f:d7:64:cd:86:bf:68:8e:20:86:b3:8d:49:
42:98:fa:52:63:f0:a1:49:dc:09:de:45:c3:0b:03:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:16:1D:57:91:D3:9D:69:68:1F:96:16:FB:E5:A8:B3:B5:8A:C5:C4
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:23:32:db:a3:00:be:ec:c4:92:af:90:32:2e:1e:df:4b:66:
07:00:3f:4f:ee:f9:eb:79:d4:dc:29:29:c7:53:c0:3b:50:9b:
6a:5d:a3:6b:b6:7e:32:9f:fb:9a:c9:aa:85:48:06:a6:5f:00:
7f:7f:82:84:cc:7c:88:f2:4b:87:ac:e8:f6:fe:b5:45:08:4a:
c1:ca:d6:a9:c6:53:15:b6:5f:84:64:14:d5:4c:cb:4f:25:60:
86:74:3e:77:4f:fc:ed:6e:c4:bb:f2:de:ff:51:ad:0a:92:13:
20:89:8e:9a:58:c6:39:89:85:de:1c:ac:dc:bf:d4:b7:b6:59:
21:36:de:36:4f:53:ee:97:f5:25:45:54:25:fa:a0:55:af:ed:
82:e2:6e:6c:68:e6:34:46:14:d8:16:3a:8e:6d:9b:20:ea:d1:
6e:50:87:7b:4f:9b:cd:52:7d:1b:d9:37:80:84:d1:b9:09:ba:
1f:84:1d:48:c7:02:7f:a6:ad:c2:9c:cb:a3:90:a9:95:5e:29:
b7:47:37:73:59:41:20:30:c2:37:e1:61:92:fd:92:31:31:65:
82:5f:2e:6b:e2:d2:c1:51:97:4f:87:27:c6:f6:1f:79:01:12:
66:83:69:cd:5e:98:49:a5:0f:de:01:3d:50:00:63:96:b3:84:
d7:cf:07:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDakcj6ei74PHrQLLFWtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5
ZmJkMzUwHhcNMjUwOTA3MTIwMTM4WhcNMjUwOTA4MTIwMTM4WjAzMTEwLwYDVQQD
EyhmMjE2MWQ1NzkxZDM5ZDY5NjgxZjk2MTZmYmU1YThiM2I1OGFjNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmrDbBzYjpWZ0pISO+Hs9AJAnxGX
YCFU6ZOX+mKPlBGdqVMYVX9tigfAbrgqnL8XqcmjTs8uoF/iiztb5lnfEBx7Yl1r
z6STCjzHczsoT7TqhhYhNKEfeCcIH3NjM88bMho1uItdENzoiKhuYmSHd7Wl/JfP
BZzpxTOaCG5+O0kbBEyIKHJ6IprOwId7jJbefabhunMxJSE8SVIous/qnTli23XT
Haxpl9GcUW5OKenH3TEY0z0MTmK4vrazgyeTlaRHbBwuMbMThLkLA5lQgMjaxc4J
fdbKhdeU8FWwoZqpYn/XZM2Gv2iOIIazjUlCmPpSY/ChSdwJ3kXDCwOtBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIWHVeR051paB+WFvvlqLO1isXEMB8GA1UdIwQY
MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt
OGE5NjYwNGM4MjZkLzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk
LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiMy26MA
vuzEkq+QMi4e30tmBwA/T+7563nU3Ckpx1PAO1Cbal2ja7Z+Mp/7msmqhUgGpl8A
f3+ChMx8iPJLh6zo9v61RQhKwcrWqcZTFbZfhGQU1UzLTyVghnQ+d0/87W7Eu/Le
/1GtCpITIImOmljGOYmF3hys3L/Ut7ZZITbeNk9T7pf1JUVUJfqgVa/tguJubGjm
NEYU2BY6jm2bIOrRblCHe0+bzVJ9G9k3gITRuQm6H4QdSMcCf6atwpzLo5CplV4p
t0c3c1lBIDDCN+Fhkv2SMTFlgl8ua+LSwVGXT4cnxvYfeQESZoNpzV6YSaUP3gE9
UABjlrOE188H8w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:22 2025 by rpki-client