Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: 3Jjo7WQPvgLILeDHYS/IyL26OAqM1e0FYVkn2o9l8Qg=
Subject key identifier: F2:11:56:1B:85:3E:6D:D1:76:94:ED:51:B9:47:88:1E:59:49:31:1A
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 01976EF544E4A5E1458932693399CA78D854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:56 +0000
Manifest this update: Sat 14 Jun 2025 15:00:56 +0000
Manifest next update: Sun 15 Jun 2025 15:00:56 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: SyrVSFokj67LHmj+Nuad26ShBMRoTJWPrbErgm3dfuE=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:44:e4:a5:e1:45:89:32:69:33:99:ca:78:d8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Jun 14 15:00:56 2025 GMT
Not After : Jun 15 15:00:56 2025 GMT
Subject: CN=f211561b853e6dd17694ed51b947881e5949311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:0a:8d:85:c5:dc:88:5b:06:d4:33:52:a8:
84:09:32:84:0a:73:cd:70:84:8f:05:68:d5:70:93:
4e:f8:1c:f7:33:b3:bf:7b:34:d1:c5:13:6a:64:46:
73:c9:84:e3:41:c1:58:de:bf:46:a3:f8:a0:83:cd:
d0:6a:b4:96:99:42:a7:de:74:2e:17:ea:39:05:b1:
40:8b:df:77:3c:e0:1a:a7:11:87:42:ab:b0:ff:3d:
84:71:18:c6:ae:9d:57:cf:06:1f:e7:57:6e:8d:f5:
e8:a1:eb:e6:09:ca:87:ba:af:76:89:4e:34:30:49:
2f:08:16:01:6d:69:54:4d:cd:b2:d4:25:7d:50:c7:
cd:fe:a1:52:75:4c:77:05:f0:1d:43:32:4f:40:b1:
23:b6:3c:c4:88:2b:e3:57:fe:73:21:e0:59:9f:54:
b9:71:0e:3a:68:8e:e0:df:b0:81:f9:bc:62:f4:f1:
7e:4e:51:a7:cb:0b:14:00:34:91:47:95:ec:80:e0:
26:73:75:44:ce:b3:4a:44:cc:25:cd:00:9f:5c:ee:
60:f6:b2:8c:1f:b0:5a:16:38:21:ed:f8:7f:8b:df:
79:da:f8:75:02:ec:ef:f9:0b:85:dd:bd:9e:10:b0:
2c:d4:7d:5a:9f:84:02:cd:20:c2:fe:9e:b8:de:cd:
eb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:56:1B:85:3E:6D:D1:76:94:ED:51:B9:47:88:1E:59:49:31:1A
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:69:c9:06:3b:c8:3b:81:9f:a1:6c:f3:38:88:2a:9a:ec:
79:d9:2c:c8:14:bd:d8:d0:10:c5:66:25:25:1c:bf:38:99:3b:
a5:88:11:9e:57:f3:61:ff:d8:93:dc:25:4e:54:71:92:48:34:
f1:36:da:dc:35:13:4e:dd:45:80:fe:79:66:69:90:d7:3c:50:
7c:95:ba:7f:44:56:e7:e0:f5:8e:ea:63:fb:f3:f9:1f:63:d9:
5d:74:55:d1:7d:3e:e3:26:88:a9:d2:79:1d:b8:cc:7e:27:39:
ad:aa:d3:68:32:08:db:3f:73:ba:c0:70:c6:ec:f4:4f:5a:10:
7e:46:0b:38:67:0c:ff:16:8c:57:39:f4:29:a1:e4:c7:cf:11:
4c:4b:8b:2a:49:6c:1c:d6:de:aa:da:34:ef:a2:2e:93:93:19:
11:67:31:72:a5:31:2b:1f:fc:5d:9e:00:b5:9c:88:ac:40:02:
92:34:f0:e3:f8:a6:e2:33:f9:36:5f:a3:fa:a0:6d:05:4c:74:
ce:9a:9d:2a:30:01:be:bd:43:bb:a5:fd:cb:9c:99:f8:f4:0e:
ec:e6:c5:dc:12:8d:f8:b7:2e:f0:01:94:56:83:1a:54:d7:dd:
a3:bc:82:2c:4f:d3:f9:6d:0d:0c:94:25:43:ea:60:37:40:97:
dd:cf:77:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9UTkpeFFiTJpM5nKeNhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUwNjE0MTUwMDU2WhcNMjUwNjE1MTUwMDU2WjAzMTEwLwYDVQQD
EyhmMjExNTYxYjg1M2U2ZGQxNzY5NGVkNTFiOTQ3ODgxZTU5NDkzMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnoKjYXF3IhbBtQzUqiECTKECnPN
cISPBWjVcJNO+Bz3M7O/ezTRxRNqZEZzyYTjQcFY3r9Go/igg83QarSWmUKn3nQu
F+o5BbFAi993POAapxGHQquw/z2EcRjGrp1XzwYf51dujfXooevmCcqHuq92iU40
MEkvCBYBbWlUTc2y1CV9UMfN/qFSdUx3BfAdQzJPQLEjtjzEiCvjV/5zIeBZn1S5
cQ46aI7g37CB+bxi9PF+TlGnywsUADSRR5XsgOAmc3VEzrNKRMwlzQCfXO5g9rKM
H7BaFjgh7fh/i9952vh1Auzv+QuF3b2eELAs1H1an4QCzSDC/p643s3rwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIRVhuFPm3RdpTtUblHiB5ZSTEaMB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXJpyQY7
yDuBn6Fs8ziIKprsedksyBS92NAQxWYlJRy/OJk7pYgRnlfzYf/Yk9wlTlRxkkg0
8Tba3DUTTt1FgP55ZmmQ1zxQfJW6f0RW5+D1jupj+/P5H2PZXXRV0X0+4yaIqdJ5
HbjMfic5rarTaDII2z9zusBwxuz0T1oQfkYLOGcM/xaMVzn0KaHkx88RTEuLKkls
HNbeqto076Iuk5MZEWcxcqUxKx/8XZ4AtZyIrEACkjTw4/im4jP5Nl+j+qBtBUx0
zpqdKjABvr1Du6X9y5yZ+PQO7ObF3BKN+Lcu8AGUVoMaVNfdo7yCLE/T+W0NDJQl
Q+pgN0CX3c93xA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:58 2025 by rpki-client