Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json)
Hash identifier: d0Nt2AdBo21VTcc3goLQr9Rz5MrgBQDIWszCTCqcP/U=
Subject key identifier: EE:22:48:D1:A8:70:C2:B6:C3:10:8B:F7:94:07:92:EA:2B:00:49:7D
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 019A4E86543B495EDDA5C2CD6DD7239B060C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
Manifest number: 1308
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=)
2: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: tFlX1GUNeDOmz2B/A3GE6ruzRl9AU0Eg27bd6eg3nik=)
3: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=)
4: Tejvj9qxpmK-Q9ozwoa4JgqAODI.roa (hash: /TPy8RknH5DLQDL1CebXsA2bJBvL5d5fEGLi3cWXKps=)
5: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=)
6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:54:3b:49:5e:dd:a5:c2:cd:6d:d7:23:9b:06:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=ee2248d1a870c2b6c3108bf7940792ea2b00497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:8e:fa:e4:64:ff:d2:f8:3a:22:34:84:7f:
a0:12:7c:70:77:26:14:f7:4a:cc:c6:3e:be:1b:a4:
06:5f:f8:b1:5a:84:d9:14:27:9c:fe:69:4e:52:79:
f2:07:a1:9a:79:bf:b9:45:70:25:7a:de:28:00:09:
88:79:e2:6c:7a:c4:5f:5b:24:1d:4f:f3:d5:ff:8c:
70:34:11:a4:a1:3b:bd:d5:d1:b8:bb:46:b7:77:23:
15:94:5a:5c:ef:87:7c:2d:5a:c1:23:a1:72:3d:9c:
cc:b0:20:10:b3:93:6e:20:dd:d8:2d:32:c4:bd:73:
75:84:bb:fe:ba:2a:43:b5:e6:84:55:16:01:ea:5c:
ba:7d:f9:d6:62:2e:b3:19:01:85:9a:7a:5c:ee:38:
d8:10:5b:df:4f:d0:d6:21:5e:b0:dd:fc:d1:c8:c7:
d7:f9:70:30:37:2c:44:08:ed:ca:f4:47:ef:15:9e:
3d:af:65:5b:39:8d:a5:14:9b:40:9d:d0:fe:44:c2:
95:38:86:8d:e6:4f:53:99:ea:67:98:5b:aa:b0:10:
b9:8f:a0:10:7e:e4:b9:e1:d9:45:ca:9c:25:1d:cf:
09:98:fc:24:21:c7:9a:ed:db:83:85:f5:b1:67:fb:
bb:a5:3d:25:12:a4:c0:91:f5:c4:3e:44:7a:83:a9:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:48:D1:A8:70:C2:B6:C3:10:8B:F7:94:07:92:EA:2B:00:49:7D
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:b0:2f:f7:14:21:da:21:d6:02:e5:c3:02:88:e4:a1:aa:
76:8d:21:2a:c3:65:88:c1:42:3d:6d:a1:6a:02:fd:85:98:9e:
1d:57:28:2d:77:3f:44:d6:a6:89:26:b6:b0:eb:b4:bb:c3:3f:
2c:52:20:ce:05:b7:0b:71:71:e4:92:aa:08:43:cf:03:fc:95:
54:65:6b:d4:61:4f:46:82:d2:c9:67:48:55:52:9c:7a:cc:19:
70:c0:1f:51:ff:99:6c:a3:b2:79:13:ff:35:04:f6:05:b1:01:
8e:42:4b:25:1f:20:98:d3:42:e9:22:97:9e:52:52:d5:2d:d8:
00:ff:4c:ca:7b:fd:4f:5d:aa:2c:96:39:17:11:f1:ec:e2:b0:
d9:4b:14:d9:31:64:fd:55:5b:e4:5d:40:12:08:05:07:e3:47:
6b:52:79:e3:5e:48:e1:fe:10:5f:54:c1:2f:fb:0b:5c:ad:fc:
af:e7:68:dc:af:82:7b:de:af:c4:95:57:52:6d:61:a0:3e:27:
95:9b:19:bf:9c:0b:dd:07:be:09:10:7c:53:f8:79:1a:5a:f5:
94:d3:b1:ac:0e:44:0d:45:41:83:da:e8:67:16:27:a0:d2:d0:
14:cd:a3:ae:ff:4b:d6:53:bc:34:0d:00:53:dc:f9:d1:48:eb:
d7:38:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:13 2025 by rpki-client