Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: 5CyIg54u1DumfgBcMt08Nne1dHG65buXPaXCUm0sMBY=
Subject key identifier: 12:90:30:C3:80:26:4F:01:80:BF:7C:E2:F4:19:E7:6E:B5:2E:0A:BC
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 019A2478F9772534CB07B0427C1C373196A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 07:01:39 +0000
Manifest this update: Mon 27 Oct 2025 07:01:39 +0000
Manifest next update: Tue 28 Oct 2025 07:01:39 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: 1/40faNY6d1B/USXaJwJbqqsAvgi3l629U4ger76IfE=)
3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:f9:77:25:34:cb:07:b0:42:7c:1c:37:31:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Oct 27 07:01:39 2025 GMT
Not After : Oct 28 07:01:39 2025 GMT
Subject: CN=129030c380264f0180bf7ce2f419e76eb52e0abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:73:ec:ef:51:2c:49:5f:c3:d2:3f:10:2e:
c7:eb:7d:d6:7b:4b:48:20:8d:18:4e:3c:74:dc:ad:
ba:d5:35:79:d5:bc:3c:d1:56:8b:a7:d2:aa:fc:b1:
c6:6d:01:88:7a:d9:21:d2:3a:f6:7c:25:ec:32:10:
55:bc:e2:76:b1:9c:5d:19:d4:89:b6:82:40:55:c3:
85:9e:79:5c:05:9c:09:0d:3f:d3:58:47:54:cd:36:
0d:47:2c:66:c7:9e:0e:06:e6:69:ee:be:6a:e6:99:
f1:52:ee:c3:50:d7:d1:16:d4:8b:29:9e:59:e2:5f:
41:9f:d9:7b:87:11:4d:4a:dc:34:47:16:28:b6:a7:
0b:e0:99:5c:44:e6:48:70:79:62:36:0d:00:38:78:
65:a9:13:d5:11:10:1b:ce:a1:3c:07:7e:dd:df:8b:
5c:f1:ea:7d:19:65:e0:09:7c:ee:8e:15:1d:8c:1d:
76:68:e0:71:85:ff:b4:26:10:fe:10:a7:7f:c4:5b:
44:6b:9d:0e:22:51:26:10:84:60:45:ac:7b:15:14:
b6:64:23:5b:a5:44:1e:1e:0b:21:18:cb:df:3d:04:
48:3d:78:b4:35:89:79:c9:cc:01:8e:0a:17:d2:2e:
fc:07:93:77:43:9f:22:34:b2:10:6e:95:af:79:55:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:30:C3:80:26:4F:01:80:BF:7C:E2:F4:19:E7:6E:B5:2E:0A:BC
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:23:a4:e2:45:10:d3:85:9e:88:90:af:c0:93:5e:bb:be:
be:44:19:6a:b5:26:a5:f5:e2:ac:2d:c3:ba:b2:84:b0:98:cd:
bd:c5:07:d4:33:48:15:99:c4:75:f4:de:f8:d3:84:47:fc:c3:
b7:dc:5e:03:84:12:84:da:11:f7:9d:40:9a:37:b0:52:ce:97:
d5:b0:5f:8c:68:63:5e:e8:56:8e:93:f7:2a:e6:e3:26:fd:12:
6e:a3:b3:0b:8c:7c:f5:ab:3d:72:f9:ac:fe:1f:06:b5:e4:b4:
31:df:bb:e9:55:41:6b:db:d1:d6:fe:04:e4:43:72:6f:09:81:
7f:59:69:d7:56:77:c4:db:08:a5:2b:a9:c2:5e:13:34:90:3c:
51:62:72:6a:48:1f:44:69:4d:9f:e0:71:27:2e:18:74:71:ca:
9d:fc:df:f6:bf:26:8d:23:5a:7d:d3:fe:d1:57:3b:6e:1c:54:
75:05:b9:cb:e9:2c:dd:48:7d:06:f0:b9:5a:03:ee:5d:e0:ac:
02:24:10:d7:79:3d:1e:79:74:ea:e7:b4:c6:d2:1a:e1:b8:9c:
f6:42:c0:3a:fc:55:86:db:19:23:47:8b:23:1d:82:65:b8:48:
95:c6:53:13:46:33:14:cb:7b:9e:d7:55:d0:2b:2e:c1:64:32:
13:9b:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:46 2025 by rpki-client