Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier: AA6aRQr43EoWkY0C1shg2LZ71itRSQK8TwHsWZ+g7dg=
Subject key identifier: BA:19:39:9E:23:D1:0C:1E:C0:78:F0:0B:86:A4:90:D3:C4:3B:43:AD
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 019A50E29B10A850467E0BF3EFA1FDF7F0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number: 37
Signing time: Tue 04 Nov 2025 22:00:19 +0000
Manifest this update: Tue 04 Nov 2025 22:00:19 +0000
Manifest next update: Wed 05 Nov 2025 22:00:19 +0000
Files and hashes: 1: 8jP_y3ejZgoctYO3RIyWsm1WwTY.roa (hash: ecd4E/hh4r+6kZxHuFwVi+mLNAKKO0mfpn1+ByWy+90=)
2: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (hash: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=)
3: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: UddOIUAU9/cu8bEFm7VS59XvoN4h+A8rMMZxHbSQd8o=)
4: kcL34WnZYMdN4SVhN2PeVdwWvgo.roa (hash: hEzKI9j+KADlA8KNZpHMbM3OEdQSPR+S9HcqTPPWTXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:9b:10:a8:50:46:7e:0b:f3:ef:a1:fd:f7:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: Nov 4 22:00:19 2025 GMT
Not After : Nov 5 22:00:19 2025 GMT
Subject: CN=ba19399e23d10c1ec078f00b86a490d3c43b43ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:63:03:1b:ae:82:d6:44:57:5b:e8:cd:66:
b7:44:3e:73:c3:c2:7a:25:0d:b1:cb:98:cb:0c:16:
30:b3:fa:63:16:d7:85:5d:54:45:53:2a:75:8a:ce:
aa:e1:55:e3:52:2b:fd:36:c7:fa:20:9e:db:14:18:
d1:26:7c:73:1e:3b:78:95:e2:5b:2c:ec:06:e6:e5:
45:7f:13:9a:e7:db:19:42:fd:71:c7:a0:87:d3:10:
32:52:01:6e:ea:e3:ce:6a:0a:90:16:a7:d9:45:e8:
a0:57:c9:35:92:6a:c8:c4:76:01:93:82:8e:e6:51:
9f:31:4e:c3:1a:1f:e2:03:77:57:e7:fe:18:a9:6d:
5d:5b:ab:cd:07:a8:c7:f5:cc:be:83:da:a3:a0:78:
82:d2:d5:ad:cd:5d:99:32:a9:19:c1:70:05:81:e2:
d1:b5:ce:55:c5:e6:63:2d:27:6c:e6:36:42:bf:cc:
9a:09:f5:a1:3c:96:23:25:62:e8:f8:47:f6:cc:fc:
60:54:f8:82:6d:b4:12:0b:77:cf:67:4f:04:08:1c:
13:3f:3c:25:7a:0e:8a:64:3b:78:29:2f:89:71:db:
f8:d3:9b:d4:6e:c6:b7:2b:04:eb:6f:0e:5c:2f:16:
2d:b1:dd:59:46:4f:48:9c:8d:45:86:fb:5b:32:d2:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:39:9E:23:D1:0C:1E:C0:78:F0:0B:86:A4:90:D3:C4:3B:43:AD
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:86:81:4d:43:19:d9:a3:b8:75:e0:e4:6d:7a:9b:27:75:28:
13:40:28:0a:f5:49:4d:d1:98:b7:fb:7e:d1:7c:c4:17:46:12:
bb:7e:bd:bd:6e:82:c2:d4:ca:2e:66:ad:3d:73:db:7b:78:a9:
d1:c1:d7:d3:d4:cf:56:c7:b1:f7:f2:ae:c0:ef:9f:2a:76:af:
93:8f:a0:2e:69:60:04:ae:75:fc:f8:5c:f8:88:06:30:0c:84:
64:c2:18:14:61:8e:1b:b5:00:f4:3b:bc:2e:1a:c9:13:3d:12:
91:fd:ca:cc:76:d8:be:1e:50:bd:23:56:1d:8e:4c:3e:2b:c2:
11:8b:0e:e5:46:4f:0c:ad:16:dc:e9:e0:f8:83:cd:63:92:3f:
67:c8:f1:7a:8d:25:cc:44:33:eb:67:8c:fd:09:c1:32:48:37:
de:d4:b0:18:b4:45:1d:1d:58:d2:b8:1b:4e:b7:c3:49:11:99:
23:f7:13:0a:b1:5c:07:b3:ec:08:8c:71:2c:f3:8e:db:ba:37:
74:ee:5a:46:cf:8b:d2:d6:3c:ee:7c:7e:d6:20:fb:99:05:82:
0b:50:ea:63:33:0f:02:75:65:b0:e8:98:7f:08:5a:ca:03:d5:
a9:82:36:a7:27:ee:8b:c8:0c:fb:69:b2:5b:e7:f1:5a:5a:c1:
48:64:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:04 2025 by rpki-client