Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: 8XFEvZYz9BRutp3hOEwGZot1QsBGGoDMPKsECPaAhNU=
Subject key identifier: 2E:90:C7:4D:F7:78:EA:B3:74:ED:C5:52:F6:65:05:6D:4E:5D:E5:1F
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 0199228C484667C88C157BD739B256E45707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: dsuLLIaeS9z78DlA+XRld+UztqsUytO/9hD4alYBIVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:46:67:c8:8c:15:7b:d7:39:b2:56:e4:57:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=2e90c74df778eab374edc552f665056d4e5de51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:42:99:c4:b1:5a:d3:55:1a:08:39:b6:20:
cb:91:3f:46:0e:93:8c:e6:e9:a8:ba:16:e5:7f:12:
25:c3:8d:f6:14:b7:87:16:3a:f3:a2:f9:28:6e:5e:
5e:74:7b:d9:4a:38:a6:99:e2:0e:8d:f1:28:ae:19:
52:6a:97:e2:39:6b:3f:0b:c6:de:4d:63:88:8c:d0:
4f:d8:ad:3a:da:73:89:d7:18:11:9a:7f:11:4c:be:
4a:07:7c:b8:2e:00:cd:89:a4:24:8e:45:2c:da:81:
c2:45:1a:4d:87:b4:f8:0a:c8:58:52:94:54:a0:31:
ea:cb:f4:51:b7:db:94:3a:a7:35:e9:c6:f0:93:02:
93:01:5e:d3:41:a8:b8:b9:a4:d4:96:6c:1f:92:92:
b6:90:24:7c:66:d9:28:a6:b6:ea:e6:65:f6:d2:6f:
60:10:92:89:59:48:f5:71:bd:38:a7:e0:3e:ff:d1:
c9:2d:ee:e7:b6:dc:85:17:0a:49:32:c7:be:a1:20:
1e:e2:8b:91:59:47:58:d0:91:9a:fc:bb:ff:7e:e3:
7d:d9:80:33:ac:e1:ce:37:e6:d4:fd:fb:c4:40:fc:
d5:a3:ea:95:3e:a7:78:5a:0e:ca:f5:b0:3a:3b:14:
34:09:05:ff:ce:8b:cb:af:a5:64:86:00:f3:ba:63:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:C7:4D:F7:78:EA:B3:74:ED:C5:52:F6:65:05:6D:4E:5D:E5:1F
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e7:52:8e:04:e6:92:f1:f9:75:3e:3b:2f:09:a5:e8:73:a4:
f0:30:26:f4:e8:48:44:ea:67:36:89:f8:5a:31:45:88:b9:f9:
06:62:07:ae:1b:d7:e7:8d:9f:1c:a5:aa:a3:dd:f3:24:23:49:
84:1d:56:92:35:aa:c3:df:c7:b7:1a:c8:27:c2:2f:7d:b0:0c:
04:ad:bc:68:17:9f:8a:33:62:e6:34:c8:a1:e6:34:57:61:d9:
32:e9:85:98:25:bb:e9:21:3d:73:4d:32:36:69:f1:f2:bd:5a:
87:3c:f7:c0:7d:61:19:e6:54:12:ea:bd:79:ef:1c:b9:34:41:
cc:54:1e:7b:31:18:f6:72:6b:4c:05:a4:41:ae:21:f6:a1:41:
ff:29:e9:ff:04:ff:07:78:1b:b7:2c:8c:7f:c4:aa:b2:b7:1e:
ac:2b:cc:71:59:9f:61:89:af:b3:08:61:92:52:75:7c:40:74:
a6:c6:09:15:ed:7c:93:cb:2a:d0:3f:07:91:4e:c6:f7:e6:24:
e1:0a:30:b5:bd:fb:7c:c3:3e:9d:f4:20:0c:43:f5:11:0e:45:
ef:9e:65:f0:30:d0:72:fd:20:e7:48:d0:0f:5a:c2:a9:6a:d3:
b5:ad:b8:54:ea:9d:23:6f:b3:6b:d8:de:df:62:f9:54:1e:45:
61:cf:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client