Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: dKS3AMtr2Haz/waIzJowUNnqF+FjMQjduC4BhWS+Ntg=
Subject key identifier: F8:F5:2A:00:84:FA:25:E9:C7:77:3F:CA:83:46:7B:BB:C7:5C:FB:07
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 019A71EEEBC8F470FE23A6E0B1770B347D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 0805
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: m3r7U01qxwKSa+WEEysRDRz0wYtUtTrRmVQicWFB4Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:eb:c8:f4:70:fe:23:a6:e0:b1:77:0b:34:7d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=f8f52a0084fa25e9c7773fca83467bbbc75cfb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:4a:b3:89:33:2a:96:ee:a3:a5:77:6a:7b:
86:0e:cd:63:d8:a6:d8:07:cc:55:1e:de:ae:59:5e:
b6:da:21:a2:a5:0a:13:96:af:c4:f9:19:fb:a8:f2:
e3:ee:00:02:d9:50:ae:89:1c:01:a2:81:6b:a4:bb:
b9:f4:50:07:b5:5c:fc:c9:81:0d:ea:ff:6b:41:4d:
ca:e3:fa:1d:ff:a0:a7:ed:ff:f5:3b:00:db:9e:8c:
e8:55:27:a7:e9:0e:84:f8:d0:a5:6f:66:33:42:1c:
7b:ac:1d:5c:76:e9:88:0f:61:77:41:d6:7f:8a:96:
0e:89:f0:48:a4:b4:15:8b:0b:03:8e:a9:33:06:fe:
a3:65:38:06:ab:4c:bd:47:57:32:52:96:0e:cf:55:
f4:83:38:49:d5:64:29:7a:ee:51:33:95:7f:5d:2f:
9e:8f:3d:6b:8d:42:ac:50:39:94:5b:61:05:b8:80:
69:b7:b2:53:d2:00:2e:5e:80:25:33:6c:fe:cc:dc:
a7:b5:22:09:c2:c9:7d:38:c7:b7:88:ae:ea:95:da:
b5:93:87:cd:cd:2f:d4:84:f6:45:56:2f:0b:5d:13:
0a:2c:da:87:de:50:a0:5f:b4:c0:e1:00:f8:e8:c3:
59:9a:6e:2b:44:ec:a1:80:72:f5:83:f8:0a:4b:b9:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:2A:00:84:FA:25:E9:C7:77:3F:CA:83:46:7B:BB:C7:5C:FB:07
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:95:44:ae:53:cb:32:1d:72:b1:d8:ae:13:d2:c2:db:d4:
69:17:5a:34:17:41:09:50:45:07:d2:8b:0c:60:08:d0:dc:39:
65:23:02:0f:16:99:b0:9e:be:11:50:f4:ad:6d:d4:7c:cc:3c:
94:8d:1c:77:59:ca:57:5a:a8:ee:69:0e:a7:0f:7f:cc:61:dd:
5c:f1:6b:43:cf:86:89:b8:41:3d:59:19:8d:2c:19:e3:7d:04:
91:13:51:f9:a2:ec:a7:43:01:6b:34:3c:9b:ff:2c:d3:8d:81:
32:46:ac:12:2f:98:8f:d5:96:73:94:c6:52:f4:cf:63:34:32:
22:c4:cc:2d:f6:22:5a:a9:fd:e2:9d:24:cc:67:7f:66:32:b7:
ae:69:3c:69:1c:47:5b:fb:84:94:9b:a4:c2:61:5d:f4:c2:35:
11:90:7b:b6:9d:51:16:8d:2d:6a:e8:aa:08:35:57:6d:6c:58:
7e:3b:a8:00:2b:45:d0:33:a4:85:b4:19:e7:78:d1:64:c4:50:
b9:98:0c:5b:ef:2a:37:20:7b:95:d2:11:c5:18:71:b4:93:97:
cc:61:64:06:7a:fb:d4:1b:21:d5:a9:c5:a2:b8:45:6e:31:27:
7b:10:a8:7b:14:cb:ae:34:0a:30:50:7f:09:7b:b2:ca:85:27:
b8:2d:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:46 2025 by rpki-client