Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: 8DW3tkSUJyP8lF0OmJE9KqN3Al1XZdHmLW82QwVVfHw=
Subject key identifier: 53:19:3E:9E:47:CE:2A:55:50:96:E2:45:60:39:06:10:AD:F0:BF:19
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019A51875712A3312F848DC667B742C02405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 15D4
Signing time: Wed 05 Nov 2025 01:00:15 +0000
Manifest this update: Wed 05 Nov 2025 01:00:15 +0000
Manifest next update: Thu 06 Nov 2025 01:00:15 +0000
Files and hashes: 1: KntY924djWUw2E5_6Dutq_ZZ4Zc.roa (hash: KalXmSDxooKoko/REjizBaBBm53fPU+cB759UZj4dk0=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: Z9c/tkRU1bb7EzOEbIeOlmUFWXBsZ6W37+OJ3cT0oW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:57:12:a3:31:2f:84:8d:c6:67:b7:42:c0:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Nov 5 01:00:15 2025 GMT
Not After : Nov 6 01:00:15 2025 GMT
Subject: CN=53193e9e47ce2a555096e24560390610adf0bf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:ed:1f:7c:31:df:29:0a:8e:b7:2f:cc:bd:
1e:eb:73:ad:73:4b:7e:be:08:7e:00:88:66:c9:de:
11:95:87:8c:0a:45:57:dd:d3:9e:c9:0d:b4:38:24:
f5:27:9e:d0:dd:e4:cd:3e:d8:a2:c9:35:22:f5:3a:
06:87:8a:0e:a6:d9:1a:b1:51:30:a9:23:86:e9:68:
25:87:a6:df:bc:7f:a9:53:fd:b9:b6:5b:2d:2c:fe:
55:bf:8d:c2:4d:d8:3e:47:30:2b:ad:06:b2:09:33:
f9:dd:49:1f:f3:07:51:00:31:29:55:27:fb:d8:30:
aa:0a:04:6d:66:70:15:5e:59:b9:96:79:c3:c9:25:
14:f9:21:aa:92:58:d2:b7:80:07:22:18:95:ff:b4:
53:35:e8:1f:21:10:09:11:b7:c0:62:43:ce:63:f6:
ce:88:8f:a4:ad:f3:cc:5e:cb:ad:64:d8:85:fc:ad:
e3:48:19:a1:73:41:0d:c7:86:9f:e0:de:13:69:84:
89:b1:95:f9:8c:fe:9a:4f:a7:bf:d8:a9:15:60:b2:
66:2c:b1:49:78:ed:af:30:a7:76:26:e4:25:72:d7:
59:82:62:6d:22:38:26:e8:97:5f:59:af:63:91:ef:
5d:99:f1:7c:c2:59:5b:85:9e:60:c2:b5:f2:5c:14:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:3E:9E:47:CE:2A:55:50:96:E2:45:60:39:06:10:AD:F0:BF:19
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:eb:cb:33:65:4f:e7:cc:18:a8:a3:97:ef:39:71:e6:cc:58:
57:91:a6:95:4b:f2:0d:37:0f:ec:e0:1f:50:1c:f9:09:bd:26:
e4:fb:6e:bf:8a:e4:01:1d:1d:05:45:bd:d4:a6:d3:34:8b:53:
5d:6d:d2:7c:dc:03:6a:59:e6:5e:76:ba:4a:70:ed:b0:10:a4:
3d:34:00:13:f6:e4:c8:bb:be:8b:60:29:bc:3a:ae:c8:5d:67:
63:1a:bc:ab:7c:03:33:a1:a6:69:e4:be:7b:ed:39:75:f9:75:
c5:52:56:8c:9b:91:73:b4:16:ae:8a:ec:e3:ca:49:84:cd:63:
b9:a3:66:f7:2c:5f:1f:7b:73:92:4e:5d:c6:7a:d5:53:35:6e:
38:db:96:d4:e9:51:90:d2:a9:ef:2c:f7:f9:56:4c:f9:ae:e3:
69:bd:d2:98:51:3f:32:2a:58:b0:a9:23:04:84:39:62:40:ae:
e6:0e:11:6b:52:b2:55:de:91:9b:00:f3:d6:13:31:38:e7:80:
41:ee:9f:90:57:f8:8a:4e:40:aa:94:5e:40:43:78:5b:b2:2d:
71:cd:3f:4b:71:85:12:77:ec:f8:89:45:54:38:17:a4:d0:6d:
54:37:a5:db:c6:bc:d9:fb:3c:5a:b9:7c:f4:ec:ab:ac:22:58:
25:3d:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:04 2025 by rpki-client