Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: 2A1ea3h/XonbDOUjDnrTyKLJfP2J9e9brb8h7SI+mxE=
Subject key identifier: A6:41:75:8A:59:6D:15:04:F0:E0:74:96:A2:43:7C:A0:B2:D2:C1:6D
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 019A7225ED4AE6A7CD2844F575B73D2B0254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 07B4
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: paUxG9IvsBKM/XeT/COOk5IXUBt0Dke4q+6m7j8ctMw=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ed:4a:e6:a7:cd:28:44:f5:75:b7:3d:2b:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=a641758a596d1504f0e07496a2437ca0b2d2c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:b5:39:83:ee:a5:59:51:cc:e2:aa:11:e5:
1a:c5:b5:6d:c4:0b:a3:78:75:a8:d1:71:ab:4f:32:
a0:25:c9:b2:da:a2:84:7f:b6:07:0e:7b:ee:0e:d0:
04:1b:ea:b1:fc:f7:6f:6b:d8:dc:f1:95:91:c1:fb:
ab:c4:47:bc:8c:89:ae:29:83:6a:8c:5e:0b:b6:00:
6f:1d:67:3e:47:7e:1e:fe:b2:50:c9:5e:26:1d:08:
99:4a:bf:e9:a8:d2:b1:bd:31:d3:5f:ea:d8:a5:a4:
6d:28:2d:87:e6:fd:15:d7:62:b6:2e:96:01:c6:a0:
ac:59:4d:c0:20:ee:b6:e9:1c:fe:e6:60:20:92:84:
9c:65:2e:d6:fc:58:8c:3e:30:85:b7:ff:46:82:d8:
bb:b1:9d:b0:ec:38:ed:ef:d7:25:27:63:69:a3:13:
51:a9:3f:0f:64:12:48:09:c1:17:12:5d:a5:60:8a:
4c:a1:61:f5:ed:dc:1d:85:ac:ad:9f:b4:84:f5:df:
7a:b1:e5:ea:ab:b2:63:8b:6f:78:2d:5e:56:15:ba:
bc:15:a8:2d:a5:22:43:56:c8:1b:e9:95:67:7e:32:
77:5b:ef:55:c9:ab:0f:dc:a7:50:10:eb:77:82:7c:
3c:ca:76:ac:7f:3c:1b:a9:4a:56:ba:e6:63:67:76:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:75:8A:59:6D:15:04:F0:E0:74:96:A2:43:7C:A0:B2:D2:C1:6D
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:87:28:18:d5:98:02:43:c7:ff:36:ab:3d:7a:a9:d2:d0:
43:a9:b3:1a:9b:3c:d1:6c:d6:d1:99:05:b9:fe:93:f6:fe:00:
00:c2:e2:df:d1:ed:5c:18:79:9c:09:3c:15:9e:6b:7f:24:79:
cf:91:eb:39:4a:64:e8:e7:f3:d7:4b:3f:ac:9d:ad:08:05:9d:
60:8b:6a:e7:12:2f:94:4b:90:b1:ed:59:4a:cb:5a:4d:20:da:
8e:0e:fd:1f:2c:60:70:b1:d2:df:38:36:f5:e5:7a:de:68:e1:
43:20:30:39:a5:43:79:4b:69:8e:69:d2:bc:55:14:5a:03:eb:
f9:99:0b:99:ba:15:c7:88:a2:ec:fd:e2:6e:f7:fa:50:4d:35:
da:6b:cc:70:fe:ff:f7:78:28:42:86:ac:5e:ca:ed:64:4c:74:
1c:fd:c5:b7:d1:21:54:b2:dc:24:2d:f7:6e:c9:2a:74:32:74:
1b:95:8e:0d:67:88:eb:db:a4:09:ec:f2:55:67:31:77:b6:f2:
c3:da:8d:11:eb:1c:5b:ee:ee:6f:d9:2b:98:8b:ca:47:07:e0:
8b:9c:68:01:53:f4:85:d6:78:cc:a7:90:e3:5c:28:19:27:96:
01:0c:28:ce:8d:3d:30:96:e8:64:11:b5:00:80:2a:88:64:75:
fb:20:9c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJe1K5qfNKET1dbc9KwJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2QwNDRjMDkxZTg4YjgwYjRiMjY5ZWJiNzk2YjNmMjQ1
NDRiNWYwHhcNMjUxMTExMDkwMTE5WhcNMjUxMTEyMDkwMTE5WjAzMTEwLwYDVQQD
EyhhNjQxNzU4YTU5NmQxNTA0ZjBlMDc0OTZhMjQzN2NhMGIyZDJjMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWe1OYPupVlRzOKqEeUaxbVtxAuj
eHWo0XGrTzKgJcmy2qKEf7YHDnvuDtAEG+qx/Pdva9jc8ZWRwfurxEe8jImuKYNq
jF4LtgBvHWc+R34e/rJQyV4mHQiZSr/pqNKxvTHTX+rYpaRtKC2H5v0V12K2LpYB
xqCsWU3AIO626Rz+5mAgkoScZS7W/FiMPjCFt/9Ggti7sZ2w7Djt79clJ2NpoxNR
qT8PZBJICcEXEl2lYIpMoWH17dwdhaytn7SE9d96seXqq7Jji294LV5WFbq8Fagt
pSJDVsgb6ZVnfjJ3W+9VyasP3KdQEOt3gnw8ynasfzwbqUpWuuZjZ3Zh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZBdYpZbRUE8OB0lqJDfKCy0sFtMB8GA1UdIwQY
MBaAFB09BEwJHoi4C0smnrt5az8kVEtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYt
YzQxNzQ0MmVmZjkzLzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYtYzQxNzQ0MmVmZjkz
LzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOCHKBjV
mAJDx/82qz16qdLQQ6mzGps80WzW0ZkFuf6T9v4AAMLi39HtXBh5nAk8FZ5rfyR5
z5HrOUpk6Ofz10s/rJ2tCAWdYItq5xIvlEuQse1ZSstaTSDajg79HyxgcLHS3zg2
9eV63mjhQyAwOaVDeUtpjmnSvFUUWgPr+ZkLmboVx4ii7P3ibvf6UE012mvMcP7/
93goQoasXsrtZEx0HP3Ft9EhVLLcJC33bskqdDJ0G5WODWeI69ukCezyVWcxd7by
w9qNEescW+7ub9krmIvKRwfgi5xoAVP0hdZ4zKeQ41woGSeWAQwozo09MJboZBG1
AIAqiGR1+yCcsQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:25 2025 by rpki-client